97] ? vfs_write+0x354/0xb10 [ 1018.316861] ? fput_many+0x2f/0x1a0 [ 1018.317310] ? ksys_write+0x1a9/0x260 [ 1018.317790] ? __ia32_sys_read+0xb0/0xb0 [ 1018.318302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1018.318944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1018.319577] do_syscall_64+0x33/0x40 [ 1018.320039] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1018.320687] RIP: 0033:0x7f57e5b24b19 [ 1018.321145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1018.323407] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1018.324357] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1018.325239] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1018.326117] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.327007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1018.327899] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:31:45 executing program 4: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000900), &(0x7f0000000940)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}], [{@seclabel}, {@pcr={'pcr', 0x3d, 0x3f}}]}) 14:31:45 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x3, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:31:45 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:31:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xf72) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1018.376695] FAULT_INJECTION: forcing a failure. [ 1018.376695] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.378573] CPU: 1 PID: 7196 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1018.379673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1018.381041] Call Trace: [ 1018.381474] dump_stack+0x107/0x167 [ 1018.382067] should_fail.cold+0x5/0xa [ 1018.382678] ? create_object.isra.0+0x3a/0xa20 [ 1018.383427] should_failslab+0x5/0x20 [ 1018.384053] kmem_cache_alloc+0x5b/0x310 [ 1018.384721] ? mark_held_locks+0x9e/0xe0 [ 1018.385392] create_object.isra.0+0x3a/0xa20 [ 1018.386101] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1018.386930] kmem_cache_alloc_bulk+0x168/0x320 [ 1018.387687] io_submit_sqes+0x6fe6/0x8610 [ 1018.388363] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1018.389185] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1018.389988] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1018.390777] ? find_held_lock+0x2c/0x110 [ 1018.391440] ? io_submit_sqes+0x8610/0x8610 [ 1018.392144] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1018.392931] ? wait_for_completion_io+0x270/0x270 [ 1018.393703] ? rcu_read_lock_any_held+0x75/0xa0 [ 1018.394448] ? vfs_write+0x354/0xb10 [ 1018.395062] ? fput_many+0x2f/0x1a0 [ 1018.395644] ? ksys_write+0x1a9/0x260 [ 1018.396258] ? __ia32_sys_read+0xb0/0xb0 [ 1018.396925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1018.397764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1018.398597] do_syscall_64+0x33/0x40 [ 1018.399198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1018.400027] RIP: 0033:0x7faf61c84b19 [ 1018.400635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1018.403592] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1018.404830] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1018.405985] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1018.407125] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.408272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.409421] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1018.414617] tmpfs: Bad value for 'mpol' 14:31:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xf77) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:31:45 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:31:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000000ffff0000366175a204000007"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$inet(0x2, 0x80000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 14:31:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xf84) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:31:59 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:31:59 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:31:59 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x3, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:31:59 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 14:31:59 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x8800000) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r0, 0x0) ftruncate(r0, 0xc3f7) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)=""/200, 0x20000148}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x77d5, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000840)=@IORING_OP_WRITE={0x17, 0x5, 0x2004, @fd, 0x9, &(0x7f0000000740)="7dabdd30662c41ebab71042a28603cb3955cac004ea09476a2814ecde1226e5bcf43862b546a620f64d94df8ad154f7ca7d80b7212b23e5a366af94e623b05496ee7cae034b15509d4156f56fa2ed6bff89f21edd81c81dc8e4fbfa1241db2dfd7fd5501e077721907587b1881ede8fa0209f30af6ae1b89fae897231058b293e42ce8893865793453a4211011e149046cc04f4e35b061d21c694a3a4b3a8843a4d2ff410183df75e73129c3d36d69faa00569f38ac6a6515ddb10c22c734c1f4324b60704428c977a600841533422cb1357c327893e72635c36fa794e04eb5e98b26dbfcca6f280ce69c5526937d6af", 0xf0, 0x8, 0x1}, 0xfffffffc) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x80, &(0x7f0000000200)=@sco, 0x0, 0x80000, 0x1}, 0x8000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) r4 = inotify_init1(0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x8080, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x6080) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r8, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[r5, r6, r2, r7, r4, r8], 0x6) 14:31:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xf8a) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:31:59 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 14:31:59 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1032.670509] FAULT_INJECTION: forcing a failure. [ 1032.670509] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.673112] CPU: 0 PID: 7244 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1032.674666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1032.676551] Call Trace: [ 1032.677162] dump_stack+0x107/0x167 [ 1032.677987] should_fail.cold+0x5/0xa [ 1032.678856] ? create_object.isra.0+0x3a/0xa20 [ 1032.679889] should_failslab+0x5/0x20 [ 1032.680747] kmem_cache_alloc+0x5b/0x310 [ 1032.681675] create_object.isra.0+0x3a/0xa20 [ 1032.682661] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1032.683811] kmem_cache_alloc_trace+0x151/0x320 [ 1032.684858] ? lock_downgrade+0x6d0/0x6d0 [ 1032.685810] __io_queue_sqe+0x666/0x9d0 [ 1032.686711] ? io_issue_sqe+0x77b0/0x77b0 [ 1032.687644] ? __fget_files+0x2f8/0x520 [ 1032.688546] ? io_prep_rw+0x7f5/0x1050 [ 1032.689442] io_submit_sqes+0x44aa/0x8610 [ 1032.690412] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1032.691535] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1032.692623] ? find_held_lock+0x2c/0x110 [ 1032.693558] ? io_submit_sqes+0x8610/0x8610 [ 1032.694542] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1032.695632] ? wait_for_completion_io+0x270/0x270 [ 1032.696720] ? rcu_read_lock_any_held+0x75/0xa0 [ 1032.697774] ? vfs_write+0x354/0xb10 [ 1032.698613] ? fput_many+0x2f/0x1a0 [ 1032.699437] ? ksys_write+0x1a9/0x260 [ 1032.700294] ? __ia32_sys_read+0xb0/0xb0 [ 1032.701222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1032.702407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1032.703570] do_syscall_64+0x33/0x40 [ 1032.704409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1032.705571] RIP: 0033:0x7f57e5b24b19 [ 1032.706410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1032.710525] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1032.712219] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1032.713815] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1032.715403] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1032.716991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1032.718582] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1032.725125] FAULT_INJECTION: forcing a failure. [ 1032.725125] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.727619] CPU: 1 PID: 7250 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1032.729083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1032.730856] Call Trace: [ 1032.731417] dump_stack+0x107/0x167 [ 1032.732199] should_fail.cold+0x5/0xa [ 1032.733022] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1032.734095] should_failslab+0x5/0x20 [ 1032.734913] kmem_cache_alloc_trace+0x55/0x320 [ 1032.735886] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1032.736915] __io_uring_add_tctx_node+0x15c/0x520 [ 1032.737951] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1032.739109] __do_sys_io_uring_enter+0x146f/0x1890 [ 1032.740186] ? find_held_lock+0x2c/0x110 [ 1032.741085] ? io_submit_sqes+0x8610/0x8610 [ 1032.742037] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1032.743101] ? wait_for_completion_io+0x270/0x270 [ 1032.744161] ? rcu_read_lock_any_held+0x75/0xa0 [ 1032.745187] ? vfs_write+0x354/0xb10 [ 1032.745998] ? fput_many+0x2f/0x1a0 [ 1032.746796] ? ksys_write+0x1a9/0x260 [ 1032.747632] ? __ia32_sys_read+0xb0/0xb0 [ 1032.748523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1032.749668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1032.750796] do_syscall_64+0x33/0x40 [ 1032.751600] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1032.752690] RIP: 0033:0x7faf61c84b19 [ 1032.753493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1032.757412] RSP: 002b:00007faf5f1d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1032.759034] RAX: ffffffffffffffda RBX: 00007faf61d98020 RCX: 00007faf61c84b19 [ 1032.760555] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1032.762078] RBP: 00007faf5f1d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1032.763590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.765121] R13: 00007ffe9c062b8f R14: 00007faf5f1d9300 R15: 0000000000022000 14:31:59 executing program 4: socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ftruncate(0xffffffffffffffff, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000100)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x1000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x80464c453f) 14:31:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xf90) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:31:59 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 1033.036386] FAULT_INJECTION: forcing a failure. [ 1033.036386] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.038862] CPU: 1 PID: 7263 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1033.040299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.042048] Call Trace: [ 1033.042618] dump_stack+0x107/0x167 [ 1033.043394] should_fail.cold+0x5/0xa [ 1033.044201] ? create_object.isra.0+0x3a/0xa20 [ 1033.045185] should_failslab+0x5/0x20 [ 1033.046005] kmem_cache_alloc+0x5b/0x310 [ 1033.046870] ? mark_held_locks+0x9e/0xe0 [ 1033.047734] create_object.isra.0+0x3a/0xa20 [ 1033.048665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1033.049755] kmem_cache_alloc_bulk+0x168/0x320 [ 1033.050733] io_submit_sqes+0x6fe6/0x8610 [ 1033.051621] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1033.052670] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1033.053721] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1033.054743] ? find_held_lock+0x2c/0x110 [ 1033.055611] ? io_submit_sqes+0x8610/0x8610 [ 1033.056533] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1033.057567] ? wait_for_completion_io+0x270/0x270 [ 1033.058586] ? rcu_read_lock_any_held+0x75/0xa0 [ 1033.059568] ? vfs_write+0x354/0xb10 [ 1033.060361] ? fput_many+0x2f/0x1a0 [ 1033.061146] ? ksys_write+0x1a9/0x260 [ 1033.061946] ? __ia32_sys_read+0xb0/0xb0 [ 1033.062815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1033.063927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1033.065045] do_syscall_64+0x33/0x40 [ 1033.065837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1033.066921] RIP: 0033:0x7faf61c84b19 [ 1033.067707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.071628] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1033.073271] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1033.074800] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1033.076322] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.077841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.079354] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:32:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/214, 0xd6}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000340)=""/179, 0xb3}], 0x6, &(0x7f0000000680)=""/128, 0x80}, 0x2020) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x1, 0x9, 0x2, 0x6, 0x0, 0x8001, 0x1, 0x9db41e9a1cacf8a7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x80000001, 0x4}, 0x401c0, 0x80, 0x200, 0x6, 0x100000000, 0xad09, 0x4, 0x0, 0x5, 0x0, 0x10001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) signalfd4(r1, &(0x7f0000000880)={[0x2]}, 0x8, 0x80800) ioctl$LOOP_SET_STATUS(r0, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000740)={0x0, {}, 0x0, {}, 0x7, 0xb, 0x7, 0x19, "2345e30b0564d49753273ee028f4cbe5492167a01702fad6726f97f8bd17baa8c258cae3c8880f16e89d8a0b7247c51c926c3243def86d894a2dd72db4ba98a0", "ace527c0e969f1f70575f6c43a9b4b4114c1616650a10ac93700f7cf9ceea148", [0x1f9, 0x4]}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x1d, 0x0, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001]}) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100)=0x8, 0x0, 0x6) 14:32:00 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfa0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:00 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) [ 1033.348548] FAULT_INJECTION: forcing a failure. [ 1033.348548] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.351188] CPU: 0 PID: 7275 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1033.352743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.354629] Call Trace: [ 1033.355235] dump_stack+0x107/0x167 [ 1033.356057] should_fail.cold+0x5/0xa [ 1033.356916] ? create_object.isra.0+0x3a/0xa20 [ 1033.357962] should_failslab+0x5/0x20 [ 1033.358834] kmem_cache_alloc+0x5b/0x310 [ 1033.359760] create_object.isra.0+0x3a/0xa20 [ 1033.360749] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1033.361913] kmem_cache_alloc_trace+0x151/0x320 [ 1033.362965] ? lock_downgrade+0x6d0/0x6d0 [ 1033.363910] __io_queue_sqe+0x666/0x9d0 [ 1033.364819] ? io_issue_sqe+0x77b0/0x77b0 [ 1033.365773] ? __fget_files+0x2f8/0x520 [ 1033.366685] ? io_prep_rw+0x7f5/0x1050 [ 1033.367580] io_submit_sqes+0x44aa/0x8610 [ 1033.368552] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1033.369689] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1033.370781] ? find_held_lock+0x2c/0x110 [ 1033.371710] ? io_submit_sqes+0x8610/0x8610 [ 1033.372695] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1033.373809] ? wait_for_completion_io+0x270/0x270 [ 1033.374912] ? rcu_read_lock_any_held+0x75/0xa0 [ 1033.375973] ? vfs_write+0x354/0xb10 [ 1033.376827] ? fput_many+0x2f/0x1a0 [ 1033.377659] ? ksys_write+0x1a9/0x260 [ 1033.378519] ? __ia32_sys_read+0xb0/0xb0 14:32:00 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfa5) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1033.379443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1033.380802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1033.381979] do_syscall_64+0x33/0x40 [ 1033.382822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1033.383981] RIP: 0033:0x7f57e5b24b19 [ 1033.384823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.389019] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1033.390755] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1033.392352] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1033.393969] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.395580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.397198] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:32:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed", 0x1, 0x2100}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff4cf7852da82eb97c1593d25f327465865c63404062bf03b510d836cca6c445b159509c1f075f0e0ec33e5ab0e3ff65aede0daf4ae3232dd82e3c37025865bad9d3cbdf8609183b2628f130c6059418d27a54acf71fe6971e7f"]) [ 1046.366445] FAULT_INJECTION: forcing a failure. [ 1046.366445] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.368028] CPU: 0 PID: 7294 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1046.368943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1046.369935] Call Trace: [ 1046.370253] dump_stack+0x107/0x167 [ 1046.370684] should_fail.cold+0x5/0xa [ 1046.371145] ? create_object.isra.0+0x3a/0xa20 [ 1046.371680] should_failslab+0x5/0x20 [ 1046.372128] kmem_cache_alloc+0x5b/0x310 [ 1046.372615] create_object.isra.0+0x3a/0xa20 [ 1046.373128] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1046.373736] __kmalloc+0x16e/0x390 [ 1046.374170] io_setup_async_rw+0x180/0x580 [ 1046.374674] io_read+0xe98/0x11e0 [ 1046.375098] ? kiocb_done+0xc90/0xc90 [ 1046.375558] ? mark_lock+0xf5/0x2df0 [ 1046.376015] ? lock_chain_count+0x20/0x20 [ 1046.376512] ? stack_trace_consume_entry+0x160/0x160 [ 1046.377116] ? lock_acquire+0x197/0x470 [ 1046.377606] ? __lock_acquire+0xbb1/0x5b00 [ 1046.378106] io_issue_sqe+0x2e8a/0x77b0 [ 1046.378584] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1046.379207] ? lock_chain_count+0x20/0x20 [ 1046.379701] ? __is_insn_slot_addr+0x14c/0x290 [ 1046.380243] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1046.380866] ? io_connect+0x610/0x610 [ 1046.381319] ? lock_acquire+0x197/0x470 [ 1046.381795] ? find_held_lock+0x2c/0x110 [ 1046.382288] ? __fget_files+0x2cf/0x520 [ 1046.382759] ? lock_downgrade+0x6d0/0x6d0 [ 1046.383265] __io_queue_sqe+0x90/0x9d0 [ 1046.383724] ? io_issue_sqe+0x77b0/0x77b0 [ 1046.384226] ? __fget_files+0x2f8/0x520 [ 1046.384696] ? io_prep_rw+0x7f5/0x1050 [ 1046.385163] io_submit_sqes+0x44aa/0x8610 [ 1046.385684] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1046.386281] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1046.386855] ? find_held_lock+0x2c/0x110 [ 1046.387342] ? io_submit_sqes+0x8610/0x8610 [ 1046.387857] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1046.388433] ? wait_for_completion_io+0x270/0x270 [ 1046.389007] ? rcu_read_lock_any_held+0x75/0xa0 [ 1046.389568] ? vfs_write+0x354/0xb10 [ 1046.390012] ? fput_many+0x2f/0x1a0 [ 1046.390447] ? ksys_write+0x1a9/0x260 [ 1046.390901] ? __ia32_sys_read+0xb0/0xb0 [ 1046.391392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1046.392011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1046.392626] do_syscall_64+0x33/0x40 [ 1046.393072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1046.393686] RIP: 0033:0x7faf61c84b19 [ 1046.394136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1046.396303] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1046.397209] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1046.398060] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1046.398907] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.399752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1046.400600] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1046.412473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:32:13 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 14:32:13 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:13 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r2]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) r5 = gettid() r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x6e, 0x9, 0x4, 0xff, 0x0, 0xfffffffffffffffc, 0x50000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000180), 0xa}, 0x14000, 0x3, 0x2, 0x5, 0x6, 0x10001, 0x9, 0x0, 0x7fffffff, 0x0, 0x4}, r5, 0xd, r6, 0xb) write$binfmt_elf64(r4, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0xbd, 0x8, 0x1f, 0x3, 0x2, 0x47, 0x2, 0x217, 0x40, 0x36, 0xffffffc0, 0xbd, 0x38, 0x2, 0x3f, 0x3806, 0x1}, [{0x6474e556, 0x401, 0x4, 0x8001, 0x0, 0x5, 0x5, 0x5}, {0x1, 0x1, 0x80, 0x401, 0x440, 0x1029, 0x3}], "a65c224112cda669351b3e8ec23428ba44d8df31d4e28e843b1a4cf9521e80efb534aa0cc3bb98dda36ab6c30b9943e05db9a0dffe2e1e315659503f14e3669ca7a2e904dbf08d0a0dead60c2af6a87e2582f07990", ['\x00', '\x00', '\x00']}, 0x405) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4305, 0x15840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x8, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) 14:32:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfb2) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:13 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:13 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x3, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:13 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:13 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) [ 1046.424878] FAULT_INJECTION: forcing a failure. [ 1046.424878] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.427756] CPU: 1 PID: 7301 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1046.429335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1046.431122] Call Trace: [ 1046.431697] dump_stack+0x107/0x167 [ 1046.432488] should_fail.cold+0x5/0xa [ 1046.433323] ? create_object.isra.0+0x3a/0xa20 [ 1046.434311] should_failslab+0x5/0x20 [ 1046.435115] kmem_cache_alloc+0x5b/0x310 [ 1046.435994] create_object.isra.0+0x3a/0xa20 [ 1046.436935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1046.438040] __kmalloc+0x16e/0x390 [ 1046.438815] ? lock_downgrade+0x6d0/0x6d0 [ 1046.439709] io_setup_async_rw+0x180/0x580 [ 1046.440626] io_read+0xe98/0x11e0 [ 1046.441384] ? register_lock_class+0xbb/0x17b0 [ 1046.442401] ? kiocb_done+0xc90/0xc90 [ 1046.443221] ? mark_lock+0xf5/0x2df0 [ 1046.444027] ? lock_chain_count+0x20/0x20 [ 1046.444951] ? __lock_acquire+0xbb1/0x5b00 [ 1046.445875] io_issue_sqe+0x2e8a/0x77b0 [ 1046.446735] ? find_held_lock+0x2c/0x110 [ 1046.447625] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1046.448748] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1046.449789] ? lock_downgrade+0x6d0/0x6d0 [ 1046.450685] ? io_connect+0x610/0x610 [ 1046.451514] ? lock_acquire+0x197/0x470 [ 1046.452383] ? find_held_lock+0x2c/0x110 [ 1046.453259] ? __fget_files+0x2cf/0x520 [ 1046.454115] ? lock_downgrade+0x6d0/0x6d0 [ 1046.455008] __io_queue_sqe+0x90/0x9d0 [ 1046.455849] ? io_issue_sqe+0x77b0/0x77b0 [ 1046.456754] ? __fget_files+0x2f8/0x520 [ 1046.457630] ? io_prep_rw+0x7f5/0x1050 [ 1046.458532] io_submit_sqes+0x44aa/0x8610 [ 1046.459545] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1046.460622] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1046.461687] ? find_held_lock+0x2c/0x110 [ 1046.462578] ? io_submit_sqes+0x8610/0x8610 [ 1046.463514] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1046.464556] ? wait_for_completion_io+0x270/0x270 [ 1046.465636] ? rcu_read_lock_any_held+0x75/0xa0 [ 1046.466629] ? vfs_write+0x354/0xb10 [ 1046.467433] ? fput_many+0x2f/0x1a0 [ 1046.468212] ? ksys_write+0x1a9/0x260 [ 1046.469033] ? __ia32_sys_read+0xb0/0xb0 [ 1046.469922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1046.471058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1046.472160] do_syscall_64+0x33/0x40 [ 1046.472962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1046.474072] RIP: 0033:0x7f57e5b24b19 [ 1046.474865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1046.478803] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1046.480459] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1046.481994] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1046.483540] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.485072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1046.486631] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:32:13 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:13 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1046.560231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:32:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfb8) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:13 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:13 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfbe) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:13 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:13 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 14:32:13 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1046.837821] FAULT_INJECTION: forcing a failure. [ 1046.837821] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.840397] CPU: 1 PID: 7328 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1046.841890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1046.843689] Call Trace: [ 1046.844276] dump_stack+0x107/0x167 [ 1046.845063] should_fail.cold+0x5/0xa [ 1046.845911] ? create_object.isra.0+0x3a/0xa20 [ 1046.846927] should_failslab+0x5/0x20 [ 1046.847763] kmem_cache_alloc+0x5b/0x310 [ 1046.848648] ? find_held_lock+0x2c/0x110 [ 1046.849548] create_object.isra.0+0x3a/0xa20 [ 1046.850509] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1046.851613] __kmalloc_node+0x1ae/0x420 [ 1046.852501] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1046.853618] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1046.854714] kmem_cache_alloc_bulk+0x182/0x320 [ 1046.855717] io_submit_sqes+0x6fe6/0x8610 [ 1046.856625] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1046.857713] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1046.858796] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1046.859835] ? find_held_lock+0x2c/0x110 [ 1046.860727] ? io_submit_sqes+0x8610/0x8610 [ 1046.861681] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1046.862729] ? wait_for_completion_io+0x270/0x270 [ 1046.863772] ? rcu_read_lock_any_held+0x75/0xa0 [ 1046.864776] ? vfs_write+0x354/0xb10 [ 1046.865589] ? fput_many+0x2f/0x1a0 [ 1046.866382] ? ksys_write+0x1a9/0x260 [ 1046.867211] ? __ia32_sys_read+0xb0/0xb0 [ 1046.868094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1046.869241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1046.870367] do_syscall_64+0x33/0x40 [ 1046.871164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1046.872290] RIP: 0033:0x7faf61c84b19 [ 1046.873092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1046.877082] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1046.878744] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1046.880280] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1046.881851] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.883389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1046.884915] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:32:13 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:26 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:26 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x3, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:26 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfce) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:26 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 14:32:26 executing program 4: newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) syz_mount_image$msdos(&(0x7f0000000580), &(0x7f0000000740)='./file2\x00', 0x1, 0x8, &(0x7f0000000c80)=[{&(0x7f0000000780)="ad8e9b0450a5d7d42dbdae4c81659b50ca2e3fb51f40b4a81f1c9bd0856f49be86d967e49bdc00a51e834ab54360477044cd3c7e18e772e14a67212a902eb2eb07480e33bfad623b4e98d0971220e3a80beab1bb90bc964ffc00fb303f21116ba7dceb0756", 0x65, 0x80000000}, {&(0x7f0000000800)="d6b9b71e2a7318e68c87044881d79a9b17cb7498d1cdfd9bfb8ce00cdd88651e848d6fa3d6e2579ff3ac8d0e2376650aee44f6debf26d10bbd31acebfb196e22a0009fca63845ba4b3a372f74a15e626e738527d163ed142b05e2c0383b88ccb892ebd6d99d5885373e6d4ed1bbd1cbd338e9a6340602eaf5cdb778c1d0d4761272d9777b01edc7a84eec307526edcd3ed28f5a5e80b0a20", 0x98, 0xffffffffffffff05}, {&(0x7f0000000940)="fb89705e59ea0cd56146dc76f2b9b7948d05c7d981ee18293a22ffbcfe128ff1fc06", 0x22, 0xed7}, {&(0x7f0000000980)="bcf7b5cfad0ffc46e7ccd161106cd2744b6c6d5544b1c97c567939ca2c0782", 0x1f, 0xff}, {&(0x7f00000009c0)="f5e7b9d708a7cea48b29be8c1f21ff2d5b9245f2697070e4ab05fc1de439cba2db2223b43c72cd13d42351eda9f8512ff9ebcbc34a3b66aef45dbeaba9d0045ed3540d998f9d9322de0686f58f971ac580fa8d44f0c62f1e063c609ffa0835ba2723a2bceca17eadce131363b759adc4e4f6563b028e3db0ff6fb534", 0x7c}, {&(0x7f0000000a40)="13e00a2dbc7c181aefaa01997359194a5c09f7fd80a5853b19ffa440939405d307bc4e07a0c547f18534f959788a3b4ce45291d55c744df6bd1202939bdd237851ca1264187b296fd31681b34945796e256b63d3", 0x54, 0x3ff}, {&(0x7f0000000ac0)="ef0bfd0a36c542735232053cfef178ac23160956e37621ceb11afcf049026e532aa6f6787888e770367e09222c5bb1309e06d672d82d3eee49af97f403bddc2e00b0c93d1eb4d02b1b49ca5a6252b315bc6c8ad56703fcc6bf2a9afbdcb7ff92353a6494e14d87919c69a85c6561c1f522500e94c0dcb4334aad62e197eec02aac77ad035665c8f4c0f47fc96e201c46ae28ea3dc33c19c49987ac", 0x9b, 0x4}, {&(0x7f0000000b80)="63188af35b358ddf590b331bcbcdd78c84778946151c0072f6da157c0c57a50605457677199d80444f9f9e5a49f43706fd1d1da374efd818c407c4063c09d7b73ecf9dde5c5f8b32bb8f929b550782b110940fe6d098a6168daf3345301025bd058b33b3c5faa1cd210c6fcdcabb8ab31250791298309b48d7ed4709114aad8cfa06c13f97a947d3158560a75b5860ff073d55ef7ba028cb0c0eea06dca049c741f872942c507d3aab9e2c06f551487db1dcb13e70c8e0ebf7d956a9397fe61e7cf7a8db4e6933146f4cc4590d78cb00666b16b7333a6c", 0xd7, 0x7}], 0x1010804, &(0x7f0000000e80)={[{@fat=@tz_utc}, {@dots}, {}, {@dots}, {@dots}, {@fat=@flush}, {@fat=@nfs}, {@nodots}, {@fat=@debug}], [{@euid_gt}, {@smackfshat={'smackfshat', 0x3d, 'system.posix_acl_default\x00'}}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) r5 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x3c403, 0x28) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7000) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, r8, 0x100) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r9, r10, 0x100) getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x0, r0}, {0x2, 0x1, r2}, {0x2, 0x4, r4}], {0x4, 0x4}, [{0x8, 0x1, r6}, {0x8, 0x3, r8}, {0x8, 0x3, r10}, {0x8, 0x3, r1}, {0x8, 0x3, r11}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x1) r12 = socket$netlink(0x10, 0x3, 0x0) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/13, 0xd}], 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001, 0xf28}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r12, {r4, r3}}, './file0\x00'}) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xff, 0x9, 0x81, 0x3, 0x0, 0x3f, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc2, 0x4, @perf_config_ext={0x3, 0x9}, 0x32b1, 0x7f, 0x3, 0x4, 0x5, 0x0, 0xfb31, 0x0, 0x1, 0x0, 0x3fd7}, 0x0, 0x5, r14, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r13, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40000) 14:32:26 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:26 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 14:32:26 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1059.637643] FAULT_INJECTION: forcing a failure. [ 1059.637643] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.640286] CPU: 1 PID: 7350 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1059.641836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1059.643724] Call Trace: [ 1059.644326] dump_stack+0x107/0x167 [ 1059.645151] should_fail.cold+0x5/0xa [ 1059.646020] ? create_object.isra.0+0x3a/0xa20 [ 1059.647048] should_failslab+0x5/0x20 [ 1059.647910] kmem_cache_alloc+0x5b/0x310 [ 1059.648836] create_object.isra.0+0x3a/0xa20 [ 1059.649818] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1059.650983] kmem_cache_alloc_trace+0x151/0x320 [ 1059.652038] ? lock_downgrade+0x6d0/0x6d0 [ 1059.653000] __io_queue_sqe+0x666/0x9d0 [ 1059.653912] ? io_issue_sqe+0x77b0/0x77b0 [ 1059.654867] ? __fget_files+0x2f8/0x520 [ 1059.655766] ? io_prep_rw+0x7f5/0x1050 [ 1059.656674] io_submit_sqes+0x44aa/0x8610 [ 1059.657664] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1059.658812] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1059.659930] ? find_held_lock+0x2c/0x110 [ 1059.660870] ? io_submit_sqes+0x8610/0x8610 [ 1059.661877] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1059.662988] ? wait_for_completion_io+0x270/0x270 [ 1059.664087] ? rcu_read_lock_any_held+0x75/0xa0 [ 1059.665138] ? vfs_write+0x354/0xb10 [ 1059.665981] ? fput_many+0x2f/0x1a0 [ 1059.666823] ? ksys_write+0x1a9/0x260 [ 1059.667696] ? __ia32_sys_read+0xb0/0xb0 [ 1059.668619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1059.669824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1059.671019] do_syscall_64+0x33/0x40 [ 1059.671869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1059.673037] RIP: 0033:0x7faf61c84b19 [ 1059.673885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1059.678082] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1059.679814] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1059.681415] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1059.683032] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.684622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1059.686232] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1059.706411] FAULT_INJECTION: forcing a failure. [ 1059.706411] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.708989] CPU: 1 PID: 7353 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1059.710522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1059.712371] Call Trace: [ 1059.712954] dump_stack+0x107/0x167 [ 1059.713764] should_fail.cold+0x5/0xa [ 1059.714617] ? __io_queue_sqe+0x666/0x9d0 [ 1059.715533] should_failslab+0x5/0x20 [ 1059.716368] kmem_cache_alloc_trace+0x55/0x320 [ 1059.717362] ? lock_downgrade+0x6d0/0x6d0 [ 1059.718306] __io_queue_sqe+0x666/0x9d0 [ 1059.719172] ? io_issue_sqe+0x77b0/0x77b0 [ 1059.720066] ? __fget_files+0x2f8/0x520 [ 1059.720941] ? io_prep_rw+0x7f5/0x1050 [ 1059.721806] io_submit_sqes+0x44aa/0x8610 [ 1059.722764] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1059.723865] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1059.724918] ? find_held_lock+0x2c/0x110 [ 1059.725816] ? io_submit_sqes+0x8610/0x8610 [ 1059.726790] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1059.727860] ? wait_for_completion_io+0x270/0x270 [ 1059.728923] ? rcu_read_lock_any_held+0x75/0xa0 [ 1059.729944] ? vfs_write+0x354/0xb10 [ 1059.730747] ? fput_many+0x2f/0x1a0 [ 1059.731542] ? ksys_write+0x1a9/0x260 [ 1059.732362] ? __ia32_sys_read+0xb0/0xb0 [ 1059.733245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1059.734391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1059.735518] do_syscall_64+0x33/0x40 [ 1059.736313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1059.737411] RIP: 0033:0x7f57e5b24b19 [ 1059.738212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1059.742175] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1059.743795] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1059.745317] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1059.746994] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.748826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1059.750649] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:32:42 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:42 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:42 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:42 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfd3) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0)={0x0, 0xe683, 0x0, 0x0, 0x28f}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)) r3 = syz_io_uring_setup(0x5af7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000001500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r5}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x6007, @fd=r0, 0x1, &(0x7f00000000c0)=""/177, 0xb1, 0x17, 0x0, {0x0, r5}}, 0x5) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r6, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index, 0x9, 0x0, 0x5, 0x4, 0x1, {0x0, r8}}, 0x8001) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r9, 0x0, 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fadvise64(r10, 0x0, 0x0, 0x1) copy_file_range(r10, 0x0, r9, 0x0, 0x200f5ef, 0x0) 14:32:42 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x3, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:42 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 14:32:42 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) [ 1075.542485] FAULT_INJECTION: forcing a failure. [ 1075.542485] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.545221] CPU: 0 PID: 7383 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1075.546865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1075.548497] FAULT_INJECTION: forcing a failure. [ 1075.548497] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.548851] Call Trace: [ 1075.548884] dump_stack+0x107/0x167 [ 1075.552674] should_fail.cold+0x5/0xa [ 1075.553593] ? create_object.isra.0+0x3a/0xa20 [ 1075.554702] should_failslab+0x5/0x20 [ 1075.555618] kmem_cache_alloc+0x5b/0x310 [ 1075.556604] create_object.isra.0+0x3a/0xa20 [ 1075.557659] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1075.558898] kmem_cache_alloc_trace+0x151/0x320 [ 1075.560025] ? lock_downgrade+0x6d0/0x6d0 [ 1075.561042] __io_queue_sqe+0x666/0x9d0 [ 1075.562010] ? io_issue_sqe+0x77b0/0x77b0 [ 1075.563054] ? __fget_files+0x2f8/0x520 [ 1075.564024] ? io_prep_rw+0x7f5/0x1050 [ 1075.565021] io_submit_sqes+0x44aa/0x8610 [ 1075.566110] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1075.567387] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1075.568618] ? find_held_lock+0x2c/0x110 [ 1075.569658] ? io_submit_sqes+0x8610/0x8610 [ 1075.570779] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1075.572018] ? wait_for_completion_io+0x270/0x270 [ 1075.573259] ? rcu_read_lock_any_held+0x75/0xa0 [ 1075.574459] ? vfs_write+0x354/0xb10 [ 1075.575422] ? fput_many+0x2f/0x1a0 [ 1075.576358] ? ksys_write+0x1a9/0x260 [ 1075.577336] ? __ia32_sys_read+0xb0/0xb0 [ 1075.578397] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1075.579757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1075.581092] do_syscall_64+0x33/0x40 [ 1075.582056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1075.583387] RIP: 0033:0x7f57e5b24b19 [ 1075.584361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1075.589185] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1075.591196] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1075.593077] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1075.594966] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1075.596855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1075.598761] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1075.600694] CPU: 1 PID: 7382 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1075.602186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1075.603949] Call Trace: [ 1075.604517] dump_stack+0x107/0x167 [ 1075.605293] should_fail.cold+0x5/0xa [ 1075.606111] ? io_setup_async_rw+0x180/0x580 [ 1075.607055] should_failslab+0x5/0x20 [ 1075.607865] __kmalloc+0x72/0x390 [ 1075.608600] ? lock_downgrade+0x6d0/0x6d0 [ 1075.609481] io_setup_async_rw+0x180/0x580 [ 1075.610392] io_read+0xe98/0x11e0 [ 1075.611142] ? register_lock_class+0xbb/0x17b0 [ 1075.612120] ? kiocb_done+0xc90/0xc90 [ 1075.612927] ? mark_lock+0xf5/0x2df0 [ 1075.613724] ? lock_chain_count+0x20/0x20 [ 1075.614646] ? __lock_acquire+0xbb1/0x5b00 [ 1075.615546] io_issue_sqe+0x2e8a/0x77b0 [ 1075.616392] ? find_held_lock+0x2c/0x110 [ 1075.617257] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1075.618377] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1075.619392] ? lock_downgrade+0x6d0/0x6d0 [ 1075.620273] ? io_connect+0x610/0x610 [ 1075.621094] ? lock_acquire+0x197/0x470 [ 1075.621974] ? find_held_lock+0x2c/0x110 [ 1075.622854] ? __fget_files+0x2cf/0x520 [ 1075.623698] ? lock_downgrade+0x6d0/0x6d0 [ 1075.624590] __io_queue_sqe+0x90/0x9d0 [ 1075.625426] ? io_issue_sqe+0x77b0/0x77b0 [ 1075.626302] ? __fget_files+0x2f8/0x520 [ 1075.627165] ? io_prep_rw+0x7f5/0x1050 [ 1075.627997] io_submit_sqes+0x44aa/0x8610 [ 1075.628904] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1075.629969] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1075.631006] ? find_held_lock+0x2c/0x110 [ 1075.631876] ? io_submit_sqes+0x8610/0x8610 [ 1075.632812] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1075.633840] ? wait_for_completion_io+0x270/0x270 [ 1075.634881] ? rcu_read_lock_any_held+0x75/0xa0 [ 1075.635871] ? vfs_write+0x354/0xb10 [ 1075.636661] ? fput_many+0x2f/0x1a0 [ 1075.637435] ? ksys_write+0x1a9/0x260 [ 1075.638249] ? __ia32_sys_read+0xb0/0xb0 [ 1075.639128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1075.640248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1075.641346] do_syscall_64+0x33/0x40 [ 1075.642145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1075.643241] RIP: 0033:0x7faf61c84b19 [ 1075.644033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1075.647967] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1075.649616] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1075.651141] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1075.652679] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1075.654199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1075.655732] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:32:42 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfe0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:42 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="24000000100001000000000000000096000009000500000000000000050000804800000082f35bce50f9138d5c7c8d6f268fc86b2c7acda3adc4ce9a0aba5a3832e87b43eb9f61a92343d18448e3673df0f78d99bd9fb919defa141e2be24a6cc6151ffa12c67eaf3b79e300e919eb13403892132644c1c1637723c23007a34c8296e526c8242758f7e578035b45b08cbf155781d6febcb87972817efb2865b2a55ed0f36074005723279530240041da05073255d91098896d2e8e89fd91e042477c37e8712dad62f6170f468b12b5a7a7798997a00481ba365f2eadfed78a387643530087756cf5feecbdec1d3c38f1"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="95b50000018fd33a76f1d2328800000018000000", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(r2, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfa, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x30004840) pipe2(&(0x7f0000000000), 0x0) syz_80211_join_ibss(&(0x7f00000002c0)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) [ 1075.905658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1075.993637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.995350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.997172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1088.854730] FAULT_INJECTION: forcing a failure. [ 1088.854730] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.856310] CPU: 1 PID: 7412 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1088.857180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1088.858230] Call Trace: [ 1088.858569] dump_stack+0x107/0x167 [ 1088.859045] should_fail.cold+0x5/0xa [ 1088.859741] ? io_setup_async_rw+0x180/0x580 [ 1088.860384] should_failslab+0x5/0x20 [ 1088.861059] __kmalloc+0x72/0x390 [ 1088.861549] ? lock_downgrade+0x6d0/0x6d0 [ 1088.862072] io_setup_async_rw+0x180/0x580 [ 1088.862609] io_read+0xe98/0x11e0 [ 1088.863063] ? kiocb_done+0xc90/0xc90 [ 1088.863543] ? mark_lock+0xf5/0x2df0 [ 1088.864015] ? lock_chain_count+0x20/0x20 [ 1088.864557] ? __lock_acquire+0xbb1/0x5b00 [ 1088.865095] io_issue_sqe+0x2e8a/0x77b0 [ 1088.865599] ? find_held_lock+0x2c/0x110 [ 1088.866115] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1088.866777] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1088.867384] ? lock_downgrade+0x6d0/0x6d0 [ 1088.867905] ? io_connect+0x610/0x610 [ 1088.868389] ? lock_acquire+0x197/0x470 [ 1088.868890] ? find_held_lock+0x2c/0x110 [ 1088.869406] ? __fget_files+0x2cf/0x520 [ 1088.869912] ? lock_downgrade+0x6d0/0x6d0 [ 1088.870435] __io_queue_sqe+0x90/0x9d0 [ 1088.870934] ? io_issue_sqe+0x77b0/0x77b0 [ 1088.871456] ? __fget_files+0x2f8/0x520 [ 1088.871958] ? io_prep_rw+0x7f5/0x1050 [ 1088.872451] io_submit_sqes+0x44aa/0x8610 [ 1088.872988] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1088.873618] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1088.874228] ? find_held_lock+0x2c/0x110 [ 1088.874743] ? io_submit_sqes+0x8610/0x8610 [ 1088.875300] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1088.875912] ? wait_for_completion_io+0x270/0x270 [ 1088.876522] ? rcu_read_lock_any_held+0x75/0xa0 [ 1088.877111] ? vfs_write+0x354/0xb10 [ 1088.877578] ? fput_many+0x2f/0x1a0 [ 1088.878041] ? ksys_write+0x1a9/0x260 [ 1088.878521] ? __ia32_sys_read+0xb0/0xb0 [ 1088.879045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1088.879743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1088.880426] do_syscall_64+0x33/0x40 [ 1088.880913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1088.881582] RIP: 0033:0x7f57e5b24b19 [ 1088.882051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1088.884334] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1088.885268] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1088.886142] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1088.887027] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1088.887899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1088.888774] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1088.897215] netlink: 'syz-executor.4': attribute type 39 has an invalid length. 14:32:55 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 14:32:55 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfe6) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:55 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:55 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:55 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 14:32:55 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:55 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:55 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) r3 = timerfd_create(0x8, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) open_tree(r4, &(0x7f0000000100)='./file0\x00', 0x8001) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) accept4(r5, &(0x7f0000000200)=@generic, &(0x7f0000000040)=0x80, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ab0f253a7c"], 0x14}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) [ 1088.907473] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1088.910111] FAULT_INJECTION: forcing a failure. [ 1088.910111] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.912802] CPU: 0 PID: 7418 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1088.914362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1088.916255] Call Trace: [ 1088.916856] dump_stack+0x107/0x167 [ 1088.917686] should_fail.cold+0x5/0xa [ 1088.918548] ? create_object.isra.0+0x3a/0xa20 [ 1088.919599] should_failslab+0x5/0x20 [ 1088.920462] kmem_cache_alloc+0x5b/0x310 [ 1088.921380] create_object.isra.0+0x3a/0xa20 [ 1088.922364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1088.923517] __kmalloc+0x16e/0x390 [ 1088.924318] ? lock_downgrade+0x6d0/0x6d0 [ 1088.925260] io_setup_async_rw+0x180/0x580 [ 1088.926220] io_read+0xe98/0x11e0 [ 1088.927014] ? register_lock_class+0xbb/0x17b0 [ 1088.928055] ? kiocb_done+0xc90/0xc90 [ 1088.928913] ? mark_lock+0xf5/0x2df0 [ 1088.929766] ? lock_chain_count+0x20/0x20 [ 1088.930734] ? __lock_acquire+0xbb1/0x5b00 [ 1088.931716] io_issue_sqe+0x2e8a/0x77b0 [ 1088.932616] ? find_held_lock+0x2c/0x110 [ 1088.933542] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1088.934734] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1088.935816] ? lock_downgrade+0x6d0/0x6d0 [ 1088.936754] ? io_connect+0x610/0x610 [ 1088.937623] ? lock_acquire+0x197/0x470 [ 1088.938523] ? find_held_lock+0x2c/0x110 [ 1088.939452] ? __fget_files+0x2cf/0x520 [ 1088.940353] ? lock_downgrade+0x6d0/0x6d0 [ 1088.941294] __io_queue_sqe+0x90/0x9d0 [ 1088.942191] ? io_issue_sqe+0x77b0/0x77b0 [ 1088.943130] ? __fget_files+0x2f8/0x520 [ 1088.944029] ? io_prep_rw+0x7f5/0x1050 [ 1088.944918] io_submit_sqes+0x44aa/0x8610 [ 1088.945887] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1088.947025] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1088.948124] ? find_held_lock+0x2c/0x110 [ 1088.949046] ? io_submit_sqes+0x8610/0x8610 [ 1088.950028] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1088.951136] ? wait_for_completion_io+0x270/0x270 [ 1088.952236] ? rcu_read_lock_any_held+0x75/0xa0 [ 1088.953278] ? vfs_write+0x354/0xb10 [ 1088.954121] ? fput_many+0x2f/0x1a0 [ 1088.954948] ? ksys_write+0x1a9/0x260 [ 1088.955814] ? __ia32_sys_read+0xb0/0xb0 [ 1088.956740] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1088.957927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1088.959108] do_syscall_64+0x33/0x40 [ 1088.959945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1088.961102] RIP: 0033:0x7faf61c84b19 [ 1088.961947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1088.966132] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1088.967866] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1088.969490] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1088.971110] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1088.972714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1088.974323] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1089.058413] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1089.059493] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 14:32:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfec) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:56 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYBLOB="20fb2a0305e9107dacea633ed29be604aec503079112ef2d822a", @ANYRESOCT=0x0], 0x2a, 0x2) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000001500)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e76375000008000b5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x80, 0xb6]}, &(0x7f00000001c0)=0x44) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000001480)={0xe0002001}) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f00000014c0)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) timerfd_create(0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9089b5586f4b94214b", @ANYRES16=r3, @ANYBLOB="000229bd7000ffdbdf25370000000c009900010400006a00000008009f000700000005001801110000000800a10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x100) timerfd_create(0x0, 0x0) unshare(0x48020200) 14:32:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xffc) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:56 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:56 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:32:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xf000) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:32:56 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 14:32:56 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) [ 1089.515717] FAULT_INJECTION: forcing a failure. [ 1089.515717] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.517077] CPU: 1 PID: 7445 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1089.517864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1089.518833] Call Trace: [ 1089.519139] dump_stack+0x107/0x167 [ 1089.519561] should_fail.cold+0x5/0xa [ 1089.520003] ? create_object.isra.0+0x3a/0xa20 [ 1089.520531] should_failslab+0x5/0x20 [ 1089.520947] kmem_cache_alloc+0x5b/0x310 [ 1089.521416] create_object.isra.0+0x3a/0xa20 [ 1089.521887] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1089.522443] __kmalloc+0x16e/0x390 [ 1089.522862] io_setup_async_rw+0x180/0x580 [ 1089.523359] io_read+0xe98/0x11e0 [ 1089.523767] ? __is_insn_slot_addr+0x14c/0x290 [ 1089.524300] ? kiocb_done+0xc90/0xc90 [ 1089.524713] ? mark_lock+0xf5/0x2df0 [ 1089.525147] ? register_lock_class+0xbb/0x17b0 [ 1089.525687] ? arch_stack_walk+0x99/0xf0 [ 1089.526165] ? lock_chain_count+0x20/0x20 [ 1089.526654] ? is_dynamic_key+0x1e0/0x1e0 [ 1089.527133] ? __lock_acquire+0x1657/0x5b00 [ 1089.527647] ? __lock_acquire+0xbb1/0x5b00 [ 1089.528148] io_issue_sqe+0x2e8a/0x77b0 [ 1089.528592] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1089.529204] ? lock_chain_count+0x20/0x20 [ 1089.529694] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1089.530275] ? io_connect+0x610/0x610 [ 1089.530727] ? lock_acquire+0x197/0x470 [ 1089.531203] ? find_held_lock+0x2c/0x110 [ 1089.531647] ? __fget_files+0x2cf/0x520 [ 1089.532073] ? lock_downgrade+0x6d0/0x6d0 [ 1089.532518] __io_queue_sqe+0x90/0x9d0 [ 1089.532937] ? io_issue_sqe+0x77b0/0x77b0 [ 1089.533379] ? __fget_files+0x2f8/0x520 [ 1089.533805] ? io_prep_rw+0x7f5/0x1050 [ 1089.534226] io_submit_sqes+0x44aa/0x8610 [ 1089.534685] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1089.535232] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1089.535751] ? find_held_lock+0x2c/0x110 [ 1089.536188] ? io_submit_sqes+0x8610/0x8610 [ 1089.536655] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1089.537177] ? wait_for_completion_io+0x270/0x270 [ 1089.537697] ? rcu_read_lock_any_held+0x75/0xa0 [ 1089.538235] ? vfs_write+0x354/0xb10 [ 1089.538638] ? fput_many+0x2f/0x1a0 [ 1089.539070] ? ksys_write+0x1a9/0x260 [ 1089.539481] ? __ia32_sys_read+0xb0/0xb0 [ 1089.539918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1089.540478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1089.541041] do_syscall_64+0x33/0x40 [ 1089.541445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1089.542055] RIP: 0033:0x7faf61c84b19 [ 1089.542460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1089.544466] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1089.545286] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1089.546051] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1089.546816] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1089.547591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1089.548354] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1089.595073] FAULT_INJECTION: forcing a failure. [ 1089.595073] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.597731] CPU: 0 PID: 7449 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1089.599290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1089.601172] Call Trace: [ 1089.601774] dump_stack+0x107/0x167 [ 1089.602598] should_fail.cold+0x5/0xa [ 1089.603465] ? __io_queue_sqe+0x666/0x9d0 [ 1089.604401] should_failslab+0x5/0x20 [ 1089.605257] kmem_cache_alloc_trace+0x55/0x320 [ 1089.606293] ? lock_downgrade+0x6d0/0x6d0 [ 1089.607246] __io_queue_sqe+0x666/0x9d0 [ 1089.608146] ? io_issue_sqe+0x77b0/0x77b0 [ 1089.609078] ? __fget_files+0x2f8/0x520 [ 1089.609985] ? io_prep_rw+0x7f5/0x1050 [ 1089.610873] io_submit_sqes+0x44aa/0x8610 [ 1089.611853] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1089.612971] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1089.614060] ? find_held_lock+0x2c/0x110 [ 1089.614996] ? io_submit_sqes+0x8610/0x8610 [ 1089.615984] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1089.617078] ? wait_for_completion_io+0x270/0x270 [ 1089.618166] ? rcu_read_lock_any_held+0x75/0xa0 [ 1089.619226] ? vfs_write+0x354/0xb10 [ 1089.620065] ? fput_many+0x2f/0x1a0 [ 1089.620883] ? ksys_write+0x1a9/0x260 [ 1089.621742] ? __ia32_sys_read+0xb0/0xb0 [ 1089.622659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1089.623851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1089.625016] do_syscall_64+0x33/0x40 [ 1089.625854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1089.627013] RIP: 0033:0x7f57e5b24b19 [ 1089.627853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1089.632012] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1089.633723] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1089.635355] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1089.636982] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1089.638591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1089.640202] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:33:08 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 14:33:08 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xff00) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:33:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setsig(r3, 0xa, 0xb) openat(r0, &(0x7f0000000100)='./file0\x00', 0x4200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) connect$unix(r2, &(0x7f0000001140)=@file={0x0, './file1\x00'}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) sendfile(r1, r5, 0x0, 0xb052) creat(&(0x7f0000000000)='./file2\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xfff}}, './file1\x00'}) openat(r7, &(0x7f0000000180)='./file2/file0\x00', 0x8001, 0x176) 14:33:08 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:08 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:08 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:08 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 14:33:08 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1102.022494] FAULT_INJECTION: forcing a failure. [ 1102.022494] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.025047] CPU: 1 PID: 7464 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1102.026534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.028360] Call Trace: [ 1102.028934] dump_stack+0x107/0x167 [ 1102.029732] should_fail.cold+0x5/0xa [ 1102.030566] ? __io_queue_sqe+0x666/0x9d0 [ 1102.031478] should_failslab+0x5/0x20 [ 1102.032313] kmem_cache_alloc_trace+0x55/0x320 [ 1102.033302] ? lock_downgrade+0x6d0/0x6d0 [ 1102.034212] __io_queue_sqe+0x666/0x9d0 [ 1102.035080] ? io_issue_sqe+0x77b0/0x77b0 [ 1102.035984] ? __fget_files+0x2f8/0x520 [ 1102.036855] ? io_prep_rw+0x7f5/0x1050 [ 1102.037716] io_submit_sqes+0x44aa/0x8610 [ 1102.038656] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1102.039738] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1102.040783] ? find_held_lock+0x2c/0x110 [ 1102.041666] ? io_submit_sqes+0x8610/0x8610 [ 1102.042610] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1102.043672] ? wait_for_completion_io+0x270/0x270 [ 1102.044724] ? rcu_read_lock_any_held+0x75/0xa0 [ 1102.045731] ? vfs_write+0x354/0xb10 [ 1102.046546] ? fput_many+0x2f/0x1a0 [ 1102.047340] ? ksys_write+0x1a9/0x260 [ 1102.048182] ? __ia32_sys_read+0xb0/0xb0 [ 1102.049068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1102.050212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1102.051342] do_syscall_64+0x33/0x40 [ 1102.052174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1102.053294] RIP: 0033:0x7f57e5b24b19 [ 1102.054110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.058133] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1102.059796] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1102.061355] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1102.062922] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.064484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1102.066048] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:33:08 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfffff000) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1102.095176] FAULT_INJECTION: forcing a failure. [ 1102.095176] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.097705] CPU: 1 PID: 7475 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1102.099180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.100979] Call Trace: [ 1102.101546] dump_stack+0x107/0x167 [ 1102.102333] should_fail.cold+0x5/0xa [ 1102.103158] ? create_object.isra.0+0x3a/0xa20 [ 1102.104159] should_failslab+0x5/0x20 [ 1102.104983] kmem_cache_alloc+0x5b/0x310 [ 1102.105861] ? mark_held_locks+0x9e/0xe0 [ 1102.106747] create_object.isra.0+0x3a/0xa20 [ 1102.107700] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1102.108800] kmem_cache_alloc_bulk+0x168/0x320 [ 1102.109796] io_submit_sqes+0x6fe6/0x8610 [ 1102.110724] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1102.111811] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1102.112857] ? find_held_lock+0x2c/0x110 [ 1102.113741] ? io_submit_sqes+0x8610/0x8610 [ 1102.114681] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1102.115732] ? wait_for_completion_io+0x270/0x270 [ 1102.116779] ? rcu_read_lock_any_held+0x75/0xa0 [ 1102.117779] ? vfs_write+0x354/0xb10 [ 1102.118582] ? fput_many+0x2f/0x1a0 [ 1102.119377] ? ksys_write+0x1a9/0x260 [ 1102.120205] ? __ia32_sys_read+0xb0/0xb0 [ 1102.121088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1102.122223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1102.123342] do_syscall_64+0x33/0x40 [ 1102.124156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1102.125269] RIP: 0033:0x7faf61c84b19 [ 1102.126075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.130070] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1102.131731] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1102.133278] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1102.134822] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.136378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1102.137929] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:33:09 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:09 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0/../file0\x00'}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xff, 0x4, 0x9, 0xff, 0x0, 0xb3, 0x80, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x2400, 0x8000, 0xe3, 0x7, 0x8, 0x3, 0x100, 0x0, 0x200, 0x0, 0xff}, r1, 0x5, r2, 0x2) pipe(&(0x7f0000000280)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = gettid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffd}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r3, &(0x7f00000002c0)=0x9, 0xffffffffffffffff, &(0x7f0000000300)=0x5, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x2, 0x8025, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa4, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x2000, 0x2, 0x8, 0x6, 0x200, 0x1d, 0x81, 0x0, 0x5, 0x0, 0x4}, r4, 0x7, 0xffffffffffffffff, 0x2) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) gettid() capget(0x0, &(0x7f0000000100)) r5 = fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0/../file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="000100000700000066696c653000"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x1000}}, 0x0) 14:33:09 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 14:33:09 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0xfffffffffffff000) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:33:09 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r0, r1) [ 1102.390515] FAULT_INJECTION: forcing a failure. [ 1102.390515] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.393087] CPU: 1 PID: 7497 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1102.394591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.396415] Call Trace: [ 1102.396994] dump_stack+0x107/0x167 [ 1102.397791] should_fail.cold+0x5/0xa [ 1102.398630] ? create_object.isra.0+0x3a/0xa20 [ 1102.399645] should_failslab+0x5/0x20 [ 1102.400477] kmem_cache_alloc+0x5b/0x310 [ 1102.401372] create_object.isra.0+0x3a/0xa20 [ 1102.402328] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1102.403457] kmem_cache_alloc_trace+0x151/0x320 [ 1102.404481] ? lock_downgrade+0x6d0/0x6d0 [ 1102.405391] __io_queue_sqe+0x666/0x9d0 [ 1102.406263] ? io_issue_sqe+0x77b0/0x77b0 [ 1102.407164] ? __fget_files+0x2f8/0x520 [ 1102.408046] ? io_prep_rw+0x7f5/0x1050 [ 1102.408904] io_submit_sqes+0x44aa/0x8610 [ 1102.409841] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1102.410934] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1102.411998] ? find_held_lock+0x2c/0x110 [ 1102.412893] ? io_submit_sqes+0x8610/0x8610 [ 1102.413846] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1102.414904] ? wait_for_completion_io+0x270/0x270 [ 1102.415976] ? rcu_read_lock_any_held+0x75/0xa0 [ 1102.416986] ? vfs_write+0x354/0xb10 [ 1102.417796] ? fput_many+0x2f/0x1a0 [ 1102.418589] ? ksys_write+0x1a9/0x260 [ 1102.419427] ? __ia32_sys_read+0xb0/0xb0 [ 1102.420322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1102.421469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1102.422595] do_syscall_64+0x33/0x40 [ 1102.423413] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1102.424536] RIP: 0033:0x7faf61c84b19 [ 1102.425346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.429371] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1102.431036] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1102.432600] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1102.434154] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.435707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1102.437253] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:33:09 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:09 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x4000, 0x85) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x3, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}, @private1, 0x700, 0x40, 0x25, 0xb8}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x6, r3}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r5 = signalfd(r2, &(0x7f0000000240), 0x8) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xa3, 0x1, 0x1f, 0x8, 0x0, 0x20000, 0x4000a, 0x1e, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x0, 0x7}, 0x40, 0x4, 0x5, 0x0, 0x89e, 0x1, 0xfffa, 0x0, 0xfffffffc, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r5, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="565945a55ad4b0e2fffff9d885ca697965ec40"]) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:33:25 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:25 executing program 4: unshare(0x28020600) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) clone3(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r1], 0x1}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/81}, {&(0x7f0000000280)=""/226}], 0x181) sendfile(r2, r0, &(0x7f0000000080)=0x1, 0x6fc) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 14:33:25 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 14:33:25 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:25 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 14:33:25 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x2490}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000640)='net/hci\x00') syz_open_procfs(r1, &(0x7f0000000240)='io\x00') pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') sendmmsg$sock(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="5e9819fc46748de2fed3aec1fbaeddea9b14535f020a7f6dd9355ddd12f0820f1f2af17b6f7ef8756a5ac72567ea96bc7e1058c098f3bb1a142a2c905f100d87ece9c5b9d3b8d4afb99a8f0d89abdeb2ab7d6d0ebb4fdd19beab78e381d3d531e45759995484b4ea5240feebe2e42e5357163919a4550c4eb397888937df03ff1b00e0554f63af280946fbf29d43f03886aea6b19f737a660737a843c453f158ab", 0xa1}], 0x1, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}], 0x1, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000002c0)={0x5, 0xff, 0x2, 0xfff}, 0x10) readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:33:25 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:25 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1119.034556] FAULT_INJECTION: forcing a failure. [ 1119.034556] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.036981] CPU: 1 PID: 7521 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1119.038336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.039951] Call Trace: [ 1119.040502] dump_stack+0x107/0x167 [ 1119.041225] should_fail.cold+0x5/0xa [ 1119.041996] ? create_object.isra.0+0x3a/0xa20 [ 1119.042906] should_failslab+0x5/0x20 [ 1119.043657] kmem_cache_alloc+0x5b/0x310 [ 1119.044497] create_object.isra.0+0x3a/0xa20 [ 1119.044797] FAULT_INJECTION: forcing a failure. [ 1119.044797] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.045356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1119.045383] kmem_cache_alloc_trace+0x151/0x320 [ 1119.045412] ? lock_downgrade+0x6d0/0x6d0 [ 1119.050624] __io_queue_sqe+0x666/0x9d0 [ 1119.051409] ? io_issue_sqe+0x77b0/0x77b0 [ 1119.052268] ? __fget_files+0x2f8/0x520 [ 1119.053056] ? io_prep_rw+0x7f5/0x1050 [ 1119.053829] io_submit_sqes+0x44aa/0x8610 [ 1119.054675] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.055654] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.056631] ? find_held_lock+0x2c/0x110 [ 1119.057430] ? io_submit_sqes+0x8610/0x8610 [ 1119.058278] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1119.059217] ? wait_for_completion_io+0x270/0x270 [ 1119.060178] ? rcu_read_lock_any_held+0x75/0xa0 [ 1119.061082] ? vfs_write+0x354/0xb10 [ 1119.061804] ? fput_many+0x2f/0x1a0 [ 1119.062503] ? ksys_write+0x1a9/0x260 [ 1119.063248] ? __ia32_sys_read+0xb0/0xb0 [ 1119.064068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.065084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.066092] do_syscall_64+0x33/0x40 [ 1119.066826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.067820] RIP: 0033:0x7f57e5b24b19 [ 1119.068569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.072144] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1119.073597] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1119.074988] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1119.076356] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.077722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.079087] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1119.080525] CPU: 0 PID: 7523 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1119.082075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.083973] Call Trace: [ 1119.084578] dump_stack+0x107/0x167 [ 1119.085409] should_fail.cold+0x5/0xa [ 1119.086271] ? create_object.isra.0+0x3a/0xa20 [ 1119.087315] should_failslab+0x5/0x20 [ 1119.088198] kmem_cache_alloc+0x5b/0x310 [ 1119.089126] create_object.isra.0+0x3a/0xa20 [ 1119.090118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1119.091266] __kmalloc+0x16e/0x390 [ 1119.092081] ? lock_downgrade+0x6d0/0x6d0 [ 1119.093034] io_setup_async_rw+0x180/0x580 [ 1119.093995] io_read+0xe98/0x11e0 [ 1119.094804] ? kiocb_done+0xc90/0xc90 [ 1119.095672] ? mark_lock+0xf5/0x2df0 [ 1119.096534] ? lock_chain_count+0x20/0x20 [ 1119.097517] ? __lock_acquire+0xbb1/0x5b00 [ 1119.098482] io_issue_sqe+0x2e8a/0x77b0 [ 1119.099385] ? find_held_lock+0x2c/0x110 [ 1119.100318] ? perf_trace_lock+0xac/0x490 [ 1119.101257] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1119.102335] ? io_connect+0x610/0x610 [ 1119.103207] ? lock_acquire+0x197/0x470 [ 1119.104118] ? find_held_lock+0x2c/0x110 [ 1119.105049] ? __fget_files+0x2cf/0x520 [ 1119.105951] ? lock_downgrade+0x6d0/0x6d0 [ 1119.106897] __io_queue_sqe+0x90/0x9d0 [ 1119.107790] ? io_issue_sqe+0x77b0/0x77b0 [ 1119.108739] ? __fget_files+0x2f8/0x520 [ 1119.109651] ? io_prep_rw+0x7f5/0x1050 [ 1119.110543] io_submit_sqes+0x44aa/0x8610 [ 1119.111526] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.112663] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.113761] ? find_held_lock+0x2c/0x110 [ 1119.114691] ? io_submit_sqes+0x8610/0x8610 [ 1119.115680] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1119.116791] ? wait_for_completion_io+0x270/0x270 [ 1119.117890] ? rcu_read_lock_any_held+0x75/0xa0 [ 1119.118942] ? vfs_write+0x354/0xb10 [ 1119.119788] ? fput_many+0x2f/0x1a0 [ 1119.120627] ? ksys_write+0x1a9/0x260 [ 1119.121494] ? __ia32_sys_read+0xb0/0xb0 [ 1119.122424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.123618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.124796] do_syscall_64+0x33/0x40 [ 1119.125641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.126803] RIP: 0033:0x7faf61c84b19 [ 1119.127647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.131819] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1119.133559] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1119.135178] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1119.136804] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.138409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.140024] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:33:26 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:26 executing program 4: r0 = syz_mount_image$nfs(&(0x7f0000000280), &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="75646ffb2c000000009a967b67d57687595efc8e9fd891359923a1da3dd0b2f36b37fa12b2da00"/48]) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) renameat2(r1, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00', 0x0) 14:33:26 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1119.408750] nfs: Unknown parameter 'udo' [ 1119.420179] nfs: Unknown parameter 'udo' 14:33:26 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4089, 0xff9}], 0x2da) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:33:26 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:26 executing program 4: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x9d, 0x5, 0x5, 0x8, 0x8}, &(0x7f0000001400)={0x3, 0x9, 0x4ffb, 0x7, 0x401, 0x3f, 0x6, 0x3f}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x9, 0x4, 0x1, 0x401, 0x81}, &(0x7f0000001480)={0x0, 0x3938700}, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, r3) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r3, &(0x7f0000001380)="797c35694faf545b980f11ea719548dbaec15ab23a98f2ca70bc19a9f3052422372be051dd15a99c") fchmod(r2, 0x30) close_range(r2, r0, 0x0) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r0, 0x2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000001600), &(0x7f0000000200)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x2) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2, 0x5, 0x400) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) pwrite64(r4, &(0x7f0000000180)="5896c95cdd917897ca1398e5208dab9510223bf0fd68bda09440b31b84f8311075a553a7cf9482dc3662d50eaedc83adb0517b0167f60d1bb2f161641f7eddde9e1e7655a41b667eca49b923d43f7fb8e07e4c0156bb53c957", 0x59, 0x4083) 14:33:26 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:26 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 14:33:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="011f00003387b3771d73e60100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06ef0000000000002e2f66696c653000"]) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "132f8920521e6836", "0cea2b7fe632ee19eefb563b53f4ff2c", "e8489ff3", "b0eaa6bc8184930f"}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x120}, 0x0, 0xe, r1, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/81, 0x51}], 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f0000000640)='net/hci\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x3, 0xab, 0x4, 0x9, 0x0, 0x7fffffff, 0x200c0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf3e, 0x4, @perf_config_ext={0x80000001, 0x80000000}, 0x8440, 0x7fff, 0x1, 0x1, 0x0, 0x1, 0x9, 0x0, 0x3, 0x0, 0x9a}, r3, 0xb, r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0xdf1, 0x3f}) [ 1119.709507] FAULT_INJECTION: forcing a failure. [ 1119.709507] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.711001] CPU: 1 PID: 7554 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1119.711874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.712925] Call Trace: [ 1119.713264] dump_stack+0x107/0x167 [ 1119.713720] should_fail.cold+0x5/0xa [ 1119.714207] ? __io_queue_sqe+0x666/0x9d0 [ 1119.714731] should_failslab+0x5/0x20 [ 1119.715211] kmem_cache_alloc_trace+0x55/0x320 [ 1119.715781] ? lock_downgrade+0x6d0/0x6d0 [ 1119.716318] __io_queue_sqe+0x666/0x9d0 [ 1119.716818] ? io_issue_sqe+0x77b0/0x77b0 [ 1119.717355] ? __fget_files+0x2f8/0x520 [ 1119.717863] ? io_prep_rw+0x7f5/0x1050 [ 1119.718368] io_submit_sqes+0x44aa/0x8610 [ 1119.718927] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.719575] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.720224] ? find_held_lock+0x2c/0x110 [ 1119.720744] ? io_submit_sqes+0x8610/0x8610 [ 1119.721300] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1119.721900] ? wait_for_completion_io+0x270/0x270 [ 1119.722511] ? rcu_read_lock_any_held+0x75/0xa0 [ 1119.723086] ? vfs_write+0x354/0xb10 [ 1119.723558] ? fput_many+0x2f/0x1a0 [ 1119.724031] ? ksys_write+0x1a9/0x260 [ 1119.724509] ? __ia32_sys_read+0xb0/0xb0 [ 1119.725026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.725698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.726357] do_syscall_64+0x33/0x40 [ 1119.726827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.727468] RIP: 0033:0x7faf61c84b19 [ 1119.727942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.730260] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1119.731232] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1119.732147] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1119.733065] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.733948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.734853] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:33:26 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:26 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:39 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:39 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x0, 0x8}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r1 = getpgrp(0x0) r2 = pidfd_open(r1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r3 = dup(r2) setns(r3, 0x2020000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DVD_READ_STRUCT(r4, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "00bc95e1d7c7526002994560cca3cb55b66678e5eaea2741345629a1cec02f007569e0842af897601b10179ce9c733b49449827210b73d70a774f7e48cea1c35a571cf104a8db9faf6c7f7a86647a7a3a4a1740d6e9722cbf84f0d9ec33b9bab22d97351d38686158264793722ee3b2516645cf01a1a9ae08aa9192b0aa2d521be5340caa28d3e9aca95d6c911bf19b56b60b59d718961708152c187c5ec50437a3df5039deb78aa1ff0d0c1dce7ff26bb1fbbd65861e3bd8db8c3eabd654b68db5d517f3cad2b86c70d81f32e2a06e473b6ca25df162c2c9c07bc413dca11294ad0405edf9d6960235bf04a490a886388edae8fe3dc39031f5cf8d64613ce9bd37486c957324e5f11cb734692496a2ea9f4a345751bc9c2fe871e70c7b6611549350cde91af83ff7b1c57a2b3fa51cb7019e32b4a56fc4a3f0f78c41e923aed5cb89ab79fb2b1d7d2264638ec688486438cb5bfcda5bd3336c0eca5c4eb49ec0284e9b1356de8e47797300221dae6b2dc5998e5616720ffc947ec2810b3c85b606781abf15f61154565f58d2492cc6a2c56dffa9ba7ab98278ed6ee13653b779b893d8494c76cebde9bc51ed405e27e8daf3d6a9c0e3a09f155d92887781b7e1d1bdca9c0618f5ed7e0c97917b349b694a3d9005f9a672cd522aee5946b70b962128c7702b069399bf489ddb076c5ea02fe2b9030823c4247a6d22cd8c59b4290c56d47ccfa5167f94e9bf5e66bf4fb99c0585598f1113e111eb23cff6482c3060b77f79a77f71e9a6d8fdf8a7311ef5c2eaf7b102e638b3cd28644c29855f14b30e9c0631ead0c314870a30615de4c1bda467575f75edaf7569a77ba047b8443d96d8c862006bfcc7c21b848904100527b69d39c5caf1c3aa038fec350da5c1cbcdec3def9c83b0fe0e3d5f044685ca4e3da91622fcf098a3d4a827740c771dcfc67298754a2a1601e363c35ba09e0191097ac1cb793653beb39885a70b00457010111f12223bc6d6b8dfc16c29e31e27a0bf6c35b421907f10cd41cedd40709d56d7b8e9e3531c1acebc0a5ad21dc1a18affe006320ea8b5d7c4fca00ba4028f802c97ca82c5b321867ae14d8ec57614c9bc5a8b0b7df20bc38585a32d3cf58ea3f9402c478d84c9312e1660648f67ad131560dc6a4932657afcda99b9d5cbf9c8d8e19798f86e62c1dcf4e4bfcdedefac0cd9d9d21cc692a1eb6b7d5b1b2c1a1a49ea7c3566fa56a9d2cc025332479e61fe3a750e20446ebece96faaa58a355e59fb83205c2b389243ecf8141c4a75ffe7281adb43074b88a501682b32c5153f9b79441306a130d17536eafbc70bfe91bb34cf4488d8624cc4fa287fa60b6502c2cc1a049b0afc6bee5a6240238d5ef0e762791121ed045a939dafdf1dfe996325fd552570887ffc7f3066e857015ee8cf082339375cc0989afe26e125bd66579d44c56c4ffe86507b5155ac7f47ef66629ed7b6b11db00c40ef262f5609733ef55b27370e8fbfea36500ba3e9687232eb9f2f6af04dfbfa79a64cd7bfab080648330776ff4088b0345f436f869f5aea2dbd1155bcd62cb858f694ea8e8ca34c418dc7ee051a1a041f0521abd04a7319f73d8fb902688e58a69c9043e8392ff1ddb95a9f6f7c72d5ca765c809901b9e4da6929e6ab98fdbed606854e05677b5fc04b46c7e77550bb2cac1747774d9f5bb41071a2edfdf7ca48303b65800ae56b1d4254d504555484040c8a6a7ff987cfd65e29c921d6aa356ab1ab3c9c3f493cb3c55b414d31cde83084e2183bc2e173f5872c252ffbc5c97ff6712d5934fdc512575dc5db977bf7d5d0b92fc13fcdfd04bafb59d28aeac0d8d5c105b1d648f07753c1fb731f883d0957b1c56138847f34b9b669511580ccbe523de0abf33ee0ae793d659cb2fae7bb1e546eb3d9c4b805499627618b9d0400ff60fdafaf975cb3a9663eb1efef94676dce8042f0d93f11e93d7fcd25d7535c7a37f57b2835b2aefa0108924efba0390da2d939630b6047eb7fff3395d421a27412fadd589e4673f4e3b86d92c51b8d2451812ce4623b2c5de86894519f6e72e381c8fa39ef43f95bd4c812936794f709556e89f9f1044fc59237da4b40406d74b630f4b558e0ca5a7e85f45968ee2162c5c787123f3165cea19f4998ba73ea99af14de50017ced399b32c65fcc3b0069f2393958c5b8fae29ce59e3de43ff2fe4f603b264190ca1ebf9763cef6d81b3b16e59210c72f53f064e3e877791cdbb836cfc3fa9ca97c8adf27f1d012fffc243a95e10adb0de9d1b375c15d4b94e6e1ff7a2b1a3162fccab6e526e8db185555acdf449e15f9fb8b60185c61fc2f838e9c258ab52ece9a38214b0e8d100da3681e215eee5a2052de65f2568d49744786e56185416a53934f627f3fbb460880e5e399993743cc048549a08f9a4a1e11210fdf0ed031a3c8f44cee83af55bf74948f51126d53e6808915d630a0ec0e31884c3ea8b9eacfbda96501b44c200bb7caf55032ae99324af341291df2183ef4a6b0cb2f0272007dac9589149953e61f01e027627dacb58d5edc892fbe29146b3bce72431ec4e2fb4fb7a03af2c2e94c7d68cf59c2f618eff3e7e06d0e03608ac678b325dc4c7bf5af32b215b65fa9a1bed17292a56e9131a8af0e22b79a91f66e5294c9dfd0ee6546978e0d3d5420649f10c1b9f917351cf824887011a8b4ed165b5db68d8f8d4dbd87d337e49f05873553fe5d0e34638851a273618f59ce5fe148ca149cce089a8f4301a5507404939cf4993b4afa6f9d2a76c40adcbf4607e0e293483194f7756ac3fa8f7e2eb28be0a251d0e70f428d06731a135a02b239ab8a0a79472002e08291a7242c41251cd36185a1b31a32ba3da99897886dc37fc9c4d2a8d1"}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x5) 14:33:39 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:39 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 14:33:39 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:39 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:39 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) close_range(r3, r1, 0x2) ftruncate(r0, 0x7fffffff) readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:33:39 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) [ 1132.337768] FAULT_INJECTION: forcing a failure. [ 1132.337768] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.339404] CPU: 0 PID: 7581 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1132.340341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.341486] Call Trace: [ 1132.341853] dump_stack+0x107/0x167 [ 1132.342351] should_fail.cold+0x5/0xa [ 1132.342874] ? create_object.isra.0+0x3a/0xa20 [ 1132.343499] should_failslab+0x5/0x20 [ 1132.344020] kmem_cache_alloc+0x5b/0x310 [ 1132.344585] create_object.isra.0+0x3a/0xa20 [ 1132.345191] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1132.345901] kmem_cache_alloc_trace+0x151/0x320 [ 1132.346534] ? lock_downgrade+0x6d0/0x6d0 [ 1132.347105] __io_queue_sqe+0x666/0x9d0 [ 1132.347648] ? io_issue_sqe+0x77b0/0x77b0 [ 1132.348208] ? __fget_files+0x2f8/0x520 [ 1132.348756] ? io_prep_rw+0x7f5/0x1050 [ 1132.349300] io_submit_sqes+0x44aa/0x8610 [ 1132.349880] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.350566] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.351221] ? find_held_lock+0x2c/0x110 [ 1132.351776] ? io_submit_sqes+0x8610/0x8610 [ 1132.352366] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1132.353028] ? wait_for_completion_io+0x270/0x270 [ 1132.353683] ? rcu_read_lock_any_held+0x75/0xa0 [ 1132.354310] ? vfs_write+0x354/0xb10 [ 1132.354832] ? fput_many+0x2f/0x1a0 [ 1132.355339] ? ksys_write+0x1a9/0x260 [ 1132.355874] ? __ia32_sys_read+0xb0/0xb0 [ 1132.356462] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.357197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.357902] do_syscall_64+0x33/0x40 [ 1132.358407] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.359112] RIP: 0033:0x7faf61c84b19 [ 1132.359626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.362194] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1132.363232] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1132.364219] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1132.365203] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.366169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.367131] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1132.384599] FAULT_INJECTION: forcing a failure. [ 1132.384599] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.387582] CPU: 1 PID: 7585 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1132.389323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.391423] Call Trace: [ 1132.392089] dump_stack+0x107/0x167 [ 1132.393014] should_fail.cold+0x5/0xa [ 1132.393968] ? io_setup_async_rw+0x180/0x580 [ 1132.395078] should_failslab+0x5/0x20 14:33:39 executing program 0: sysfs$2(0x2, 0x1, &(0x7f0000000000)=""/56) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1132.396035] __kmalloc+0x72/0x390 [ 1132.397144] ? lock_downgrade+0x6d0/0x6d0 [ 1132.398181] io_setup_async_rw+0x180/0x580 [ 1132.399239] io_read+0xe98/0x11e0 [ 1132.400128] ? kiocb_done+0xc90/0xc90 [ 1132.401088] ? mark_lock+0xf5/0x2df0 [ 1132.402023] ? lock_chain_count+0x20/0x20 [ 1132.403094] ? __lock_acquire+0xbb1/0x5b00 [ 1132.404153] io_issue_sqe+0x2e8a/0x77b0 [ 1132.405154] ? find_held_lock+0x2c/0x110 [ 1132.406168] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1132.407470] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1132.408651] ? lock_downgrade+0x6d0/0x6d0 [ 1132.409674] ? io_connect+0x610/0x610 [ 1132.410621] ? lock_acquire+0x197/0x470 [ 1132.411600] ? find_held_lock+0x2c/0x110 [ 1132.412635] ? __fget_files+0x2cf/0x520 [ 1132.413622] ? lock_downgrade+0x6d0/0x6d0 [ 1132.414659] __io_queue_sqe+0x90/0x9d0 [ 1132.415631] ? io_issue_sqe+0x77b0/0x77b0 [ 1132.416670] ? __fget_files+0x2f8/0x520 [ 1132.417665] ? io_prep_rw+0x7f5/0x1050 [ 1132.418638] io_submit_sqes+0x44aa/0x8610 [ 1132.419693] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.420934] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.422124] ? find_held_lock+0x2c/0x110 [ 1132.423125] ? io_submit_sqes+0x8610/0x8610 [ 1132.424202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1132.425407] ? wait_for_completion_io+0x270/0x270 [ 1132.426596] ? rcu_read_lock_any_held+0x75/0xa0 [ 1132.427739] ? vfs_write+0x354/0xb10 [ 1132.428662] ? fput_many+0x2f/0x1a0 [ 1132.429559] ? ksys_write+0x1a9/0x260 [ 1132.430501] ? __ia32_sys_read+0xb0/0xb0 [ 1132.431506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.432804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.434076] do_syscall_64+0x33/0x40 [ 1132.434989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.436238] RIP: 0033:0x7f57e5b24b19 [ 1132.437148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.441643] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1132.443490] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1132.445246] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1132.446973] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.448723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.450450] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1132.547080] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 14:33:39 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:39 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:39 executing program 4: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda5}, 0x57) 14:33:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x100000001, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4077, 0x1e1}], 0x1) io_setup(0x6, &(0x7f0000000040)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000003840)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000003900), 0x80000000, 0x40000) open_by_handle_at(r1, &(0x7f00000000c0)=@orangefs_parent={0x28, 0x2, {{"28eab561d8252d0195f272f66da11b60", 0x7}, {"1311bc5ab9e5b782b6af94154149c75c", 0x7}}}, 0x200000) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) io_submit(r2, 0x3, &(0x7f0000003a40)=[&(0x7f0000003800)={0x0, 0x0, 0x0, 0x7, 0x241b, r3, &(0x7f0000002800)="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", 0x1000, 0x8, 0x0, 0x3, r1}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x8, 0xa, r4, &(0x7f0000003880)="b2eaaf27797c2bfe74fb42a5908ac8cdd6e4527caf81d50a85896735a97d94ea3b39c47713071044752b104e3f1178fdd58dabc84995443129d60241d5ab9ceea141798c14dfbc891d6991933e31ddada2aa8cd529ecd35ea45e5b50f17bdc67f0c9", 0x62, 0x10000, 0x0, 0x2, r5}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x8, r6, &(0x7f0000003980)="0ae70bb72694629f14386429b4edd5ecaefdf37e19c6868320fbd8555d1c3f9736bb144d501f38f3f5a433275ccf4571f4d907400bba823cf18596103f098fdfe0b275e100b0980baf4f04d22fd64653e0", 0x51, 0x0, 0x0, 0x2, r7}]) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:33:39 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:39 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:39 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 1132.805817] FAULT_INJECTION: forcing a failure. [ 1132.805817] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.808329] CPU: 1 PID: 7611 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1132.809819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.811579] Call Trace: [ 1132.812139] dump_stack+0x107/0x167 [ 1132.812914] should_fail.cold+0x5/0xa [ 1132.813731] ? io_setup_async_rw+0x180/0x580 [ 1132.814784] should_failslab+0x5/0x20 [ 1132.815695] __kmalloc+0x72/0x390 [ 1132.816528] ? lock_downgrade+0x6d0/0x6d0 [ 1132.817519] io_setup_async_rw+0x180/0x580 [ 1132.818530] io_read+0xe98/0x11e0 [ 1132.819378] ? kiocb_done+0xc90/0xc90 [ 1132.820278] ? mark_lock+0xf5/0x2df0 [ 1132.821190] ? lock_chain_count+0x20/0x20 [ 1132.822216] ? __lock_acquire+0xbb1/0x5b00 [ 1132.823236] io_issue_sqe+0x2e8a/0x77b0 [ 1132.824191] ? find_held_lock+0x2c/0x110 [ 1132.825173] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1132.826422] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1132.827555] ? lock_downgrade+0x6d0/0x6d0 [ 1132.828559] ? io_connect+0x610/0x610 [ 1132.829484] ? lock_acquire+0x197/0x470 [ 1132.830442] ? find_held_lock+0x2c/0x110 [ 1132.831420] ? __fget_files+0x2cf/0x520 [ 1132.832365] ? lock_downgrade+0x6d0/0x6d0 [ 1132.833369] __io_queue_sqe+0x90/0x9d0 [ 1132.834304] ? io_issue_sqe+0x77b0/0x77b0 [ 1132.835286] ? __fget_files+0x2f8/0x520 [ 1132.836236] ? io_prep_rw+0x7f5/0x1050 [ 1132.837171] io_submit_sqes+0x44aa/0x8610 [ 1132.838183] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.839356] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.840508] ? find_held_lock+0x2c/0x110 [ 1132.841471] ? io_submit_sqes+0x8610/0x8610 [ 1132.842503] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1132.843649] ? wait_for_completion_io+0x270/0x270 [ 1132.844801] ? rcu_read_lock_any_held+0x75/0xa0 [ 1132.845899] ? vfs_write+0x354/0xb10 [ 1132.846772] ? fput_many+0x2f/0x1a0 [ 1132.847625] ? ksys_write+0x1a9/0x260 [ 1132.848526] ? __ia32_sys_read+0xb0/0xb0 [ 1132.849481] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.850710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.851920] do_syscall_64+0x33/0x40 [ 1132.852802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.854001] RIP: 0033:0x7faf61c84b19 [ 1132.854871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.859177] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1132.860956] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1132.862609] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1132.864262] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.865925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.867572] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:33:53 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:53 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) socket$packet(0x11, 0x2, 0x300) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6a6f75726e616c5f6465763d3078303030303030303030303030303030302c004642742dd512610aeb6b572cf080ef18a9936634ceb49247d0d76d63b38419e260df5d12a0f07745cdac4c1d6d993ef49eb351"]) 14:33:53 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:53 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0xd6, 0x77, 0x7, 0x0, 0x3, 0x400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0x2}, 0x40200, 0x10000000000000, 0x0, 0x4, 0x2, 0xd0, 0x93, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) fcntl$dupfd(r0, 0x406, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)="9fb88c18f397b635e4ab0954d4a251f86ede0a255b4e366f437f1177d87307eee780f7fe4203654c99c6c9ff05e3f6d9a01afc32a680475d466a4e658e89269d78dff94782f67d3610fa321df4c166571889c62881e5544259f9", 0x5a}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x1, 0xffffffffffff5659, 0x7}) 14:33:53 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:53 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 14:33:53 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1146.413811] FAULT_INJECTION: forcing a failure. [ 1146.413811] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.415494] CPU: 0 PID: 7630 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1146.416463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.417650] Call Trace: [ 1146.418030] dump_stack+0x107/0x167 [ 1146.418543] should_fail.cold+0x5/0xa [ 1146.419088] ? create_object.isra.0+0x3a/0xa20 [ 1146.419734] should_failslab+0x5/0x20 [ 1146.420272] kmem_cache_alloc+0x5b/0x310 [ 1146.420849] create_object.isra.0+0x3a/0xa20 [ 1146.421477] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1146.422197] __kmalloc+0x16e/0x390 [ 1146.422698] ? lock_downgrade+0x6d0/0x6d0 [ 1146.423288] io_setup_async_rw+0x180/0x580 [ 1146.423889] io_read+0xe98/0x11e0 [ 1146.424390] ? kiocb_done+0xc90/0xc90 [ 1146.424750] FAULT_INJECTION: forcing a failure. [ 1146.424750] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.424933] ? mark_lock+0xf5/0x2df0 [ 1146.424952] ? lock_chain_count+0x20/0x20 [ 1146.424989] ? __lock_acquire+0xbb1/0x5b00 [ 1146.429017] io_issue_sqe+0x2e8a/0x77b0 [ 1146.429580] ? find_held_lock+0x2c/0x110 [ 1146.430154] ? perf_trace_lock+0xac/0x490 [ 1146.430739] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1146.431409] ? io_connect+0x610/0x610 [ 1146.431951] ? lock_acquire+0x197/0x470 [ 1146.432512] ? find_held_lock+0x2c/0x110 [ 1146.433101] ? __fget_files+0x2cf/0x520 [ 1146.433663] ? lock_downgrade+0x6d0/0x6d0 [ 1146.434255] __io_queue_sqe+0x90/0x9d0 [ 1146.434806] ? io_issue_sqe+0x77b0/0x77b0 [ 1146.435393] ? __fget_files+0x2f8/0x520 [ 1146.435962] ? io_prep_rw+0x7f5/0x1050 [ 1146.436516] io_submit_sqes+0x44aa/0x8610 [ 1146.437129] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.437828] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.438508] ? find_held_lock+0x2c/0x110 [ 1146.439082] ? io_submit_sqes+0x8610/0x8610 [ 1146.439694] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1146.440376] ? wait_for_completion_io+0x270/0x270 [ 1146.441070] ? rcu_read_lock_any_held+0x75/0xa0 [ 1146.441720] ? vfs_write+0x354/0xb10 [ 1146.442243] ? fput_many+0x2f/0x1a0 [ 1146.442755] ? ksys_write+0x1a9/0x260 [ 1146.443290] ? __ia32_sys_read+0xb0/0xb0 [ 1146.443864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1146.444601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1146.445333] do_syscall_64+0x33/0x40 [ 1146.445861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1146.446579] RIP: 0033:0x7f57e5b24b19 [ 1146.447103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.449697] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1146.450769] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1146.451771] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1146.452778] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.453788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.454794] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1146.455829] CPU: 1 PID: 7631 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1146.457311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.459065] Call Trace: [ 1146.459631] dump_stack+0x107/0x167 [ 1146.460416] should_fail.cold+0x5/0xa [ 1146.461262] ? create_object.isra.0+0x3a/0xa20 [ 1146.462246] should_failslab+0x5/0x20 [ 1146.463066] kmem_cache_alloc+0x5b/0x310 [ 1146.463943] create_object.isra.0+0x3a/0xa20 [ 1146.464875] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1146.465968] __kmalloc+0x16e/0x390 [ 1146.466726] ? lock_downgrade+0x6d0/0x6d0 [ 1146.467618] io_setup_async_rw+0x180/0x580 [ 1146.468533] io_read+0xe98/0x11e0 [ 1146.469296] ? kiocb_done+0xc90/0xc90 [ 1146.470117] ? mark_lock+0xf5/0x2df0 [ 1146.470915] ? lock_chain_count+0x20/0x20 [ 1146.471835] ? __lock_acquire+0xbb1/0x5b00 [ 1146.472745] io_issue_sqe+0x2e8a/0x77b0 [ 1146.473605] ? find_held_lock+0x2c/0x110 [ 1146.474468] ? perf_trace_lock+0xac/0x490 [ 1146.475355] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1146.476374] ? io_connect+0x610/0x610 [ 1146.477198] ? lock_acquire+0x197/0x470 [ 1146.478049] ? find_held_lock+0x2c/0x110 [ 1146.478926] ? __fget_files+0x2cf/0x520 [ 1146.479774] ? lock_downgrade+0x6d0/0x6d0 [ 1146.480663] __io_queue_sqe+0x90/0x9d0 [ 1146.481512] ? io_issue_sqe+0x77b0/0x77b0 [ 1146.482405] ? __fget_files+0x2f8/0x520 [ 1146.483257] ? io_prep_rw+0x7f5/0x1050 [ 1146.484082] io_submit_sqes+0x44aa/0x8610 [ 1146.484993] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.486049] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.487079] ? find_held_lock+0x2c/0x110 [ 1146.487950] ? io_submit_sqes+0x8610/0x8610 [ 1146.488877] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1146.489919] ? wait_for_completion_io+0x270/0x270 [ 1146.490952] ? rcu_read_lock_any_held+0x75/0xa0 [ 1146.491933] ? vfs_write+0x354/0xb10 [ 1146.492724] ? fput_many+0x2f/0x1a0 [ 1146.493507] ? ksys_write+0x1a9/0x260 [ 1146.494313] ? __ia32_sys_read+0xb0/0xb0 [ 1146.495180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1146.496290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1146.497383] do_syscall_64+0x33/0x40 [ 1146.498176] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1146.499263] RIP: 0033:0x7faf61c84b19 [ 1146.500049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.503941] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1146.505556] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1146.507071] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1146.508588] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.510116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.511631] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:33:53 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x50, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd_index=0x6, 0x1, 0x7, 0xf147, 0x9, 0x1, {0x1}}, 0x7) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x6}, {0x7f, 0x4000000, 0x400000000000000, 0x0, 0x0, 0x4}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c) r4 = getpgrp(0x0) tgkill(r4, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"]) write$binfmt_elf32(r5, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587) pipe(&(0x7f0000000140)) fcntl$getown(0xffffffffffffffff, 0x9) unshare(0x48020200) 14:33:53 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) socket$packet(0x11, 0x2, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:53 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:33:53 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:34:08 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:08 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1161.554327] FAULT_INJECTION: forcing a failure. [ 1161.554327] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.556099] CPU: 1 PID: 7663 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1161.557083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.558321] Call Trace: [ 1161.558704] dump_stack+0x107/0x167 [ 1161.559228] should_fail.cold+0x5/0xa [ 1161.559774] ? __io_queue_sqe+0x666/0x9d0 [ 1161.560382] should_failslab+0x5/0x20 [ 1161.560932] kmem_cache_alloc_trace+0x55/0x320 [ 1161.561606] ? lock_downgrade+0x6d0/0x6d0 [ 1161.562227] __io_queue_sqe+0x666/0x9d0 [ 1161.562806] ? io_issue_sqe+0x77b0/0x77b0 [ 1161.563405] ? __fget_files+0x2f8/0x520 [ 1161.563990] ? io_prep_rw+0x7f5/0x1050 [ 1161.564567] io_submit_sqes+0x44aa/0x8610 [ 1161.565189] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.565924] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.566825] ? find_held_lock+0x2c/0x110 [ 1161.567452] ? io_submit_sqes+0x8610/0x8610 [ 1161.568090] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.568795] ? wait_for_completion_io+0x270/0x270 [ 1161.569530] ? rcu_read_lock_any_held+0x75/0xa0 [ 1161.570210] ? vfs_write+0x354/0xb10 [ 1161.570744] ? fput_many+0x2f/0x1a0 [ 1161.571272] ? ksys_write+0x1a9/0x260 14:34:08 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 14:34:08 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:08 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x20, 0xff, 0x4, 0x3f, 0x0, 0x3, 0x8200, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x2}, 0x4001, 0xbc6, 0x401, 0x9, 0x7fffffff, 0xfffffa8b, 0x3f, 0x0, 0x1, 0x0, 0xffffffff}, r1, 0x1, r2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000025c0)={0x0, 0xfffffffffffffffc, 0x88, 0x2, @scatter={0x3, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000100)=""/234, 0xea}, {&(0x7f00000002c0)=""/206, 0xce}]}, &(0x7f0000002500)="8158aa46899cf37ddec20df51f66d72504143a93a5d54361da37c09aa712e1800ff8d4095d9db66ba4dff22b1852004d0289a4009302b1aecf000b6ee75bf99259a467d96c0ccd9eb74216c7fc32ea1561dcf9986ef0fc1f961663fa81bad3e858d90c09a7b09d57e18df7973e426f55ce61295b499b84aa40f0a1d979caa9203231e6c7c7ada74e", &(0x7f00000003c0)=""/110, 0x40, 0x10021, 0x3, &(0x7f0000000240)}) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000000c0)) 14:34:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x85, 0x0, 0xe4, "f55e38e6001321c98cd1c68f55127d0aebed5dbffcd15644f58be8bbe15bed1afce10b9b38f511deba2d8cfeb342d1bea83b54a2459f344efe4c348b1a62e8aec7af14e691bb8107d657077bdc246767399c98bfe889d8ae63de1a57803dfbebdb61bc469148517013020d721b0eeb9dc1b111ba53c63e86a4f4003486bb88e49e5480975f"}) ioctl$SG_GET_PACK_ID(r0, 0x1267, &(0x7f0000000040)) 14:34:08 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 14:34:08 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) socket$packet(0x11, 0x2, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1161.571815] ? __ia32_sys_read+0xb0/0xb0 [ 1161.572592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.573350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.574120] do_syscall_64+0x33/0x40 [ 1161.574666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.575408] RIP: 0033:0x7f57e5b24b19 [ 1161.575944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.578637] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1161.579735] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1161.580776] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1161.581834] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.582870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.583910] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1161.591412] FAULT_INJECTION: forcing a failure. [ 1161.591412] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.594075] CPU: 0 PID: 7668 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1161.595617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.597528] Call Trace: [ 1161.598138] dump_stack+0x107/0x167 [ 1161.598975] should_fail.cold+0x5/0xa [ 1161.599848] ? __io_queue_sqe+0x666/0x9d0 [ 1161.600799] should_failslab+0x5/0x20 [ 1161.601678] kmem_cache_alloc_trace+0x55/0x320 [ 1161.602718] ? lock_downgrade+0x6d0/0x6d0 [ 1161.603672] __io_queue_sqe+0x666/0x9d0 [ 1161.604582] ? io_issue_sqe+0x77b0/0x77b0 [ 1161.605534] ? __fget_files+0x2f8/0x520 [ 1161.606450] ? io_prep_rw+0x7f5/0x1050 [ 1161.607347] io_submit_sqes+0x44aa/0x8610 [ 1161.608323] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.609476] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.610586] ? find_held_lock+0x2c/0x110 [ 1161.611521] ? io_submit_sqes+0x8610/0x8610 [ 1161.612518] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.613636] ? wait_for_completion_io+0x270/0x270 [ 1161.614744] ? rcu_read_lock_any_held+0x75/0xa0 [ 1161.615813] ? vfs_write+0x354/0xb10 [ 1161.616668] ? fput_many+0x2f/0x1a0 [ 1161.617537] ? ksys_write+0x1a9/0x260 [ 1161.618410] ? __ia32_sys_read+0xb0/0xb0 [ 1161.619342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.620537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.621724] do_syscall_64+0x33/0x40 [ 1161.622572] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.623741] RIP: 0033:0x7faf61c84b19 [ 1161.624588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.628776] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1161.630500] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1161.632113] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1161.633728] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.635342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.636951] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:34:08 executing program 4: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000200)={0x0, 0xfffffffe, 0x10, 0x0, 0x2000000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x100}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file2\x00'}) io_uring_enter(r8, 0x5937, 0xba02, 0x0, &(0x7f0000000380)={[0x3]}, 0x8) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r7, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, r5, 0x10000000) syz_io_uring_submit(r6, r9, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x4, 0x5005, @fd=r3, 0x7ef, &(0x7f0000000140)="be33f7f23281164e233a14cfa95f7abc5ce9a20c4052645ca8b8c7716f512330e123bb9493b136bef299ed7914c59c7f2703655c03b2230777aafd7e7788fa97520bcf1070975744423cf6a05afe64a85ecdbcca07e93b3ffb0cc088aff1bb3301dc40641eb29864869413fe1d79c7b5b83eb2582a5675dc732245a24bbed33d7fdd3d1ae01db4", 0x87, 0x8}, 0xffffffa4) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001) r10 = openat$cgroup_subtree(r5, &(0x7f0000000280), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, &(0x7f0000000300)={0x8, 0x82, 0x1, 0x7, 0x1, [0x5, 0x5, 0x800, 0x7]}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:08 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:08 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x7}]}, 0x28}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="f2d5a00687552053347f951572e67b458c6688b285b2947d2250b43733e6d92d38fab699906fc23dcfcc517869a003597b25a9c93b1be62e72387d6bf25310a778a39ad376d5826104c407723e1e563100c7bf7e978074ccf4632a42733961254f2411cfbfc58e6ec4debef4840eae6d4dbaa480cb47f99bd0ee662ffed3de986181ec91796934d39addc2b3703a", 0x8e}, {&(0x7f0000000040)="58069dc24dc1d3dce332c28fcecda1c71bea45206966a58398906ddf2aae4ebd820fbd249dadc09c3b1d4e503bbeaa368300adb81f360c32c86277270945", 0x3e}, {&(0x7f0000000180)="790a9f05598acde25db51c09ba6e4985b1b15ddd28c2c7937f6686be983eb3ca193ff36dad241d1a4bcb", 0xffffffffffffff17}, {&(0x7f00000001c0)="5b4d5fcb478eadd61ae0e572e86742ef", 0x10}], 0x4, &(0x7f0000001500)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @rthdrdstopts={{0x1030, 0x29, 0x37, {0x2, 0x202, '\x00', [@enc_lim={0x4, 0x1, 0x3f}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x9}, @generic={0xff, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x1f}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x67, 0x8, 0x0, 0x1f, 0x0, [@remote, @mcast2, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r4}}}], 0x10f8}, 0x4) 14:34:08 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) [ 1161.928026] FAULT_INJECTION: forcing a failure. [ 1161.928026] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.929611] CPU: 1 PID: 7687 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1161.930487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.931540] Call Trace: [ 1161.931877] dump_stack+0x107/0x167 [ 1161.932341] should_fail.cold+0x5/0xa [ 1161.932824] ? io_setup_async_rw+0x180/0x580 [ 1161.933388] should_failslab+0x5/0x20 [ 1161.933888] __kmalloc+0x72/0x390 [ 1161.934330] ? lock_downgrade+0x6d0/0x6d0 [ 1161.934857] io_setup_async_rw+0x180/0x580 [ 1161.935399] io_read+0xe98/0x11e0 [ 1161.935855] ? kiocb_done+0xc90/0xc90 [ 1161.936341] ? mark_lock+0xf5/0x2df0 [ 1161.936822] ? lock_chain_count+0x20/0x20 [ 1161.937380] ? __lock_acquire+0xbb1/0x5b00 [ 1161.937941] io_issue_sqe+0x2e8a/0x77b0 [ 1161.938449] ? find_held_lock+0x2c/0x110 [ 1161.938964] ? perf_trace_lock+0xac/0x490 [ 1161.939489] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1161.940090] ? io_connect+0x610/0x610 [ 1161.940577] ? lock_acquire+0x197/0x470 [ 1161.941081] ? find_held_lock+0x2c/0x110 [ 1161.941632] ? __fget_files+0x2cf/0x520 [ 1161.942138] ? lock_downgrade+0x6d0/0x6d0 [ 1161.942666] __io_queue_sqe+0x90/0x9d0 [ 1161.943177] ? io_issue_sqe+0x77b0/0x77b0 [ 1161.943705] ? __fget_files+0x2f8/0x520 [ 1161.944216] ? io_prep_rw+0x7f5/0x1050 [ 1161.944718] io_submit_sqes+0x44aa/0x8610 [ 1161.945273] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.945929] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.946543] ? find_held_lock+0x2c/0x110 [ 1161.947067] ? io_submit_sqes+0x8610/0x8610 [ 1161.947625] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.948242] ? wait_for_completion_io+0x270/0x270 [ 1161.948854] ? rcu_read_lock_any_held+0x75/0xa0 [ 1161.949447] ? vfs_write+0x354/0xb10 [ 1161.949939] ? fput_many+0x2f/0x1a0 [ 1161.950405] ? ksys_write+0x1a9/0x260 [ 1161.950889] ? __ia32_sys_read+0xb0/0xb0 [ 1161.951410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.952078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.952737] do_syscall_64+0x33/0x40 [ 1161.953218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.953898] RIP: 0033:0x7f57e5b24b19 [ 1161.954368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.956708] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1161.957696] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1161.958611] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1161.959522] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.960426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.961335] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:34:08 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:08 executing program 4: unshare(0x28020600) r0 = socket$unix(0x1, 0x1, 0x0) unshare(0x2040000) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) clone3(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r1], 0x1}, 0x58) 14:34:08 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) socket$packet(0x11, 0x2, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:08 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) [ 1162.074998] FAULT_INJECTION: forcing a failure. [ 1162.074998] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.076480] CPU: 1 PID: 7696 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1162.077296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.078302] Call Trace: [ 1162.078622] dump_stack+0x107/0x167 [ 1162.079056] should_fail.cold+0x5/0xa [ 1162.079517] ? io_setup_async_rw+0x180/0x580 [ 1162.080045] should_failslab+0x5/0x20 [ 1162.080497] __kmalloc+0x72/0x390 [ 1162.080912] ? lock_downgrade+0x6d0/0x6d0 [ 1162.081406] io_setup_async_rw+0x180/0x580 [ 1162.081934] io_read+0xe98/0x11e0 [ 1162.082357] ? kiocb_done+0xc90/0xc90 [ 1162.082805] ? mark_lock+0xf5/0x2df0 [ 1162.083252] ? lock_chain_count+0x20/0x20 [ 1162.083765] ? __lock_acquire+0xbb1/0x5b00 [ 1162.084273] io_issue_sqe+0x2e8a/0x77b0 [ 1162.084748] ? find_held_lock+0x2c/0x110 [ 1162.085232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1162.085881] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1162.086457] ? lock_downgrade+0x6d0/0x6d0 [ 1162.086948] ? io_connect+0x610/0x610 [ 1162.087400] ? lock_acquire+0x197/0x470 [ 1162.087869] ? find_held_lock+0x2c/0x110 [ 1162.088352] ? __fget_files+0x2cf/0x520 [ 1162.088822] ? lock_downgrade+0x6d0/0x6d0 [ 1162.089314] __io_queue_sqe+0x90/0x9d0 [ 1162.089796] ? io_issue_sqe+0x77b0/0x77b0 [ 1162.090285] ? __fget_files+0x2f8/0x520 [ 1162.090760] ? io_prep_rw+0x7f5/0x1050 [ 1162.091222] io_submit_sqes+0x44aa/0x8610 [ 1162.091730] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1162.092321] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1162.092893] ? find_held_lock+0x2c/0x110 [ 1162.093379] ? io_submit_sqes+0x8610/0x8610 [ 1162.093914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1162.094488] ? wait_for_completion_io+0x270/0x270 [ 1162.095058] ? rcu_read_lock_any_held+0x75/0xa0 [ 1162.095612] ? vfs_write+0x354/0xb10 [ 1162.096049] ? fput_many+0x2f/0x1a0 [ 1162.096478] ? ksys_write+0x1a9/0x260 [ 1162.096925] ? __ia32_sys_read+0xb0/0xb0 [ 1162.097409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.098053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.098668] do_syscall_64+0x33/0x40 [ 1162.099112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1162.099723] RIP: 0033:0x7faf61c84b19 [ 1162.100165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.102375] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1162.103277] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1162.104121] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1162.104962] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.105816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.106658] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:34:21 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 14:34:21 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) accept4(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x80, 0x80000) r3 = fork() clone3(&(0x7f0000000340)={0x300200000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000400)=0x0, {0x14}, &(0x7f00000001c0)=""/140, 0x8c, &(0x7f00000002c0)=""/63, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r0}}, 0x58) syz_open_procfs(r4, &(0x7f00000003c0)='net/protocols\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:34:21 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:21 executing program 4: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x80000000, 0x4, 0x1}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400dd97b949d18963f52d21ae8e4d00001800210c00000000000000"], 0x24}}, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0xff, 0x48, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x7b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x200088d5}, 0x404c800) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) dup2(r2, r3) 14:34:21 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:21 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:21 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 14:34:21 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1174.512963] FAULT_INJECTION: forcing a failure. [ 1174.512963] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.514584] CPU: 0 PID: 7712 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1174.515522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.516642] Call Trace: [ 1174.517006] dump_stack+0x107/0x167 [ 1174.517505] should_fail.cold+0x5/0xa [ 1174.518030] ? io_setup_async_rw+0x180/0x580 [ 1174.518627] should_failslab+0x5/0x20 [ 1174.519139] __kmalloc+0x72/0x390 [ 1174.519609] ? lock_downgrade+0x6d0/0x6d0 [ 1174.520180] io_setup_async_rw+0x180/0x580 [ 1174.520758] io_read+0xe98/0x11e0 [ 1174.521238] ? kiocb_done+0xc90/0xc90 [ 1174.521754] ? mark_lock+0xf5/0x2df0 [ 1174.522270] ? lock_chain_count+0x20/0x20 [ 1174.522853] ? __lock_acquire+0xbb1/0x5b00 [ 1174.523429] io_issue_sqe+0x2e8a/0x77b0 [ 1174.523967] ? find_held_lock+0x2c/0x110 [ 1174.524518] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1174.525222] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1174.525864] ? lock_downgrade+0x6d0/0x6d0 [ 1174.526432] ? io_connect+0x610/0x610 [ 1174.526946] ? lock_acquire+0x197/0x470 [ 1174.527482] ? find_held_lock+0x2c/0x110 [ 1174.528029] ? __fget_files+0x2cf/0x520 [ 1174.528569] ? lock_downgrade+0x6d0/0x6d0 [ 1174.529129] __io_queue_sqe+0x90/0x9d0 [ 1174.529666] ? io_issue_sqe+0x77b0/0x77b0 [ 1174.530228] ? __fget_files+0x2f8/0x520 [ 1174.530764] ? io_prep_rw+0x7f5/0x1050 [ 1174.531289] io_submit_sqes+0x44aa/0x8610 [ 1174.531864] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.532534] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.533188] ? find_held_lock+0x2c/0x110 [ 1174.533734] ? io_submit_sqes+0x8610/0x8610 [ 1174.534331] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.534988] ? wait_for_completion_io+0x270/0x270 [ 1174.535648] ? rcu_read_lock_any_held+0x75/0xa0 [ 1174.536269] ? vfs_write+0x354/0xb10 [ 1174.536768] ? fput_many+0x2f/0x1a0 [ 1174.537268] ? ksys_write+0x1a9/0x260 [ 1174.537778] ? __ia32_sys_read+0xb0/0xb0 [ 1174.538341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.539048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.539745] do_syscall_64+0x33/0x40 [ 1174.540244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1174.540944] RIP: 0033:0x7f57e5b24b19 [ 1174.541444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.543937] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1174.544974] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1174.545929] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1174.546877] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.547831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.548790] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1174.553721] FAULT_INJECTION: forcing a failure. [ 1174.553721] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.555318] CPU: 0 PID: 7715 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1174.556234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.557356] Call Trace: [ 1174.557707] dump_stack+0x107/0x167 [ 1174.558195] should_fail.cold+0x5/0xa [ 1174.558705] ? io_setup_async_rw+0x180/0x580 [ 1174.559294] should_failslab+0x5/0x20 [ 1174.559807] __kmalloc+0x72/0x390 [ 1174.560273] ? lock_downgrade+0x6d0/0x6d0 [ 1174.560827] io_setup_async_rw+0x180/0x580 [ 1174.561400] io_read+0xe98/0x11e0 [ 1174.561871] ? kiocb_done+0xc90/0xc90 [ 1174.562395] ? mark_lock+0xf5/0x2df0 [ 1174.562899] ? lock_chain_count+0x20/0x20 [ 1174.563460] ? __lock_acquire+0xbb1/0x5b00 [ 1174.564029] io_issue_sqe+0x2e8a/0x77b0 [ 1174.564556] ? find_held_lock+0x2c/0x110 [ 1174.565103] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1174.565797] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1174.566431] ? lock_downgrade+0x6d0/0x6d0 [ 1174.566980] ? io_connect+0x610/0x610 [ 1174.567499] ? lock_acquire+0x197/0x470 [ 1174.568027] ? find_held_lock+0x2c/0x110 [ 1174.568569] ? __fget_files+0x2cf/0x520 [ 1174.569101] ? lock_downgrade+0x6d0/0x6d0 [ 1174.569652] __io_queue_sqe+0x90/0x9d0 [ 1174.570178] ? io_issue_sqe+0x77b0/0x77b0 [ 1174.570715] ? __fget_files+0x2f8/0x520 [ 1174.571243] ? io_prep_rw+0x7f5/0x1050 [ 1174.571752] io_submit_sqes+0x44aa/0x8610 [ 1174.572309] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.572968] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.573615] ? find_held_lock+0x2c/0x110 [ 1174.574152] ? io_submit_sqes+0x8610/0x8610 [ 1174.574728] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.575357] ? wait_for_completion_io+0x270/0x270 [ 1174.575991] ? rcu_read_lock_any_held+0x75/0xa0 [ 1174.576604] ? vfs_write+0x354/0xb10 [ 1174.577091] ? fput_many+0x2f/0x1a0 [ 1174.577565] ? ksys_write+0x1a9/0x260 [ 1174.578067] ? __ia32_sys_read+0xb0/0xb0 [ 1174.578605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.579290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.579976] do_syscall_64+0x33/0x40 [ 1174.580472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1174.581149] RIP: 0033:0x7faf61c84b19 [ 1174.581638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.584079] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1174.585080] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1174.586018] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1174.586957] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.587894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.588841] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1174.602453] selinux_netlink_send: 47 callbacks suppressed [ 1174.602463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7718 comm=syz-executor.4 [ 1174.616406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7718 comm=syz-executor.4 14:34:21 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) sendfile(r2, r1, &(0x7f0000000000)=0xbcb, 0x3) r3 = fcntl$getown(r2, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x24, 0x1e, 0xc21, 0x0, 0x0, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x9, 0x0, 0x0, @pid=r3}]}, 0x24}}, 0x0) 14:34:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000180), &(0x7f00000001c0)=@sha1={0x1, "a0a6c94c656529aa0826c2c19476855cbd2e5c63"}, 0x15, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) r2 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="81ce7887c311ccd62170eece96dc896c0a4d1dfa7b3a6ad6356a83d3ada909dc1dc1440d2db0f510a0fe83f82e882017488e846a674e2a972af41efa", 0x3c}], 0x1) fallocate(r1, 0x3, 0x4077, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 14:34:21 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:21 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 14:34:21 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) [ 1174.878564] FAULT_INJECTION: forcing a failure. [ 1174.878564] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.880024] CPU: 0 PID: 7743 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1174.880855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.881875] Call Trace: [ 1174.882211] dump_stack+0x107/0x167 [ 1174.882656] should_fail.cold+0x5/0xa [ 1174.883138] ? create_object.isra.0+0x3a/0xa20 [ 1174.883702] should_failslab+0x5/0x20 [ 1174.884167] kmem_cache_alloc+0x5b/0x310 [ 1174.884666] create_object.isra.0+0x3a/0xa20 [ 1174.885205] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1174.885831] __kmalloc+0x16e/0x390 [ 1174.886274] ? lock_downgrade+0x6d0/0x6d0 [ 1174.886789] io_setup_async_rw+0x180/0x580 [ 1174.887313] io_read+0xe98/0x11e0 [ 1174.887745] ? kiocb_done+0xc90/0xc90 [ 1174.888213] ? mark_lock+0xf5/0x2df0 [ 1174.888673] ? lock_chain_count+0x20/0x20 [ 1174.889210] ? __lock_acquire+0xbb1/0x5b00 [ 1174.889733] io_issue_sqe+0x2e8a/0x77b0 [ 1174.890227] ? find_held_lock+0x2c/0x110 [ 1174.890725] ? perf_trace_lock+0xac/0x490 [ 1174.891236] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1174.891829] ? io_connect+0x610/0x610 [ 1174.892300] ? lock_acquire+0x197/0x470 [ 1174.892782] ? find_held_lock+0x2c/0x110 [ 1174.893285] ? __fget_files+0x2cf/0x520 [ 1174.893773] ? lock_downgrade+0x6d0/0x6d0 [ 1174.894295] __io_queue_sqe+0x90/0x9d0 [ 1174.894775] ? io_issue_sqe+0x77b0/0x77b0 [ 1174.895280] ? __fget_files+0x2f8/0x520 [ 1174.895768] ? io_prep_rw+0x7f5/0x1050 [ 1174.896248] io_submit_sqes+0x44aa/0x8610 [ 1174.896775] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.897391] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.897989] ? find_held_lock+0x2c/0x110 [ 1174.898492] ? io_submit_sqes+0x8610/0x8610 [ 1174.899030] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.899623] ? wait_for_completion_io+0x270/0x270 [ 1174.900218] ? rcu_read_lock_any_held+0x75/0xa0 [ 1174.900788] ? vfs_write+0x354/0xb10 [ 1174.901250] ? fput_many+0x2f/0x1a0 [ 1174.901698] ? ksys_write+0x1a9/0x260 [ 1174.902172] ? __ia32_sys_read+0xb0/0xb0 [ 1174.902671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.903318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.903953] do_syscall_64+0x33/0x40 [ 1174.904410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1174.905040] RIP: 0033:0x7faf61c84b19 [ 1174.905498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.907763] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1174.908700] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1174.909572] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1174.910454] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.911326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.912204] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:34:21 executing program 4: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xe0) close(r0) syz_io_uring_setup(0x6dc6, &(0x7f0000000100)={0x0, 0x29f8, 0x1, 0x0, 0xa7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r2}}, 0x9) clone3(&(0x7f00000001c0)={0x90040180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 1174.928156] FAULT_INJECTION: forcing a failure. [ 1174.928156] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.929552] CPU: 0 PID: 7745 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1174.930389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.931400] Call Trace: [ 1174.931725] dump_stack+0x107/0x167 [ 1174.932177] should_fail.cold+0x5/0xa [ 1174.932641] ? create_object.isra.0+0x3a/0xa20 [ 1174.933203] should_failslab+0x5/0x20 [ 1174.933669] kmem_cache_alloc+0x5b/0x310 [ 1174.934172] create_object.isra.0+0x3a/0xa20 [ 1174.934712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1174.935343] __kmalloc+0x16e/0x390 [ 1174.935776] ? lock_downgrade+0x6d0/0x6d0 [ 1174.936288] io_setup_async_rw+0x180/0x580 [ 1174.936814] io_read+0xe98/0x11e0 [ 1174.937248] ? kiocb_done+0xc90/0xc90 [ 1174.937709] ? mark_lock+0xf5/0x2df0 [ 1174.938177] ? lock_chain_count+0x20/0x20 [ 1174.938702] ? __lock_acquire+0xbb1/0x5b00 [ 1174.939225] io_issue_sqe+0x2e8a/0x77b0 [ 1174.939710] ? find_held_lock+0x2c/0x110 [ 1174.940209] ? perf_trace_lock+0xac/0x490 [ 1174.940719] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1174.941301] ? io_connect+0x610/0x610 [ 1174.941771] ? lock_acquire+0x197/0x470 [ 1174.942264] ? find_held_lock+0x2c/0x110 [ 1174.942764] ? __fget_files+0x2cf/0x520 [ 1174.943246] ? lock_downgrade+0x6d0/0x6d0 [ 1174.943756] __io_queue_sqe+0x90/0x9d0 [ 1174.944238] ? io_issue_sqe+0x77b0/0x77b0 [ 1174.944742] ? __fget_files+0x2f8/0x520 [ 1174.945228] ? io_prep_rw+0x7f5/0x1050 [ 1174.945708] io_submit_sqes+0x44aa/0x8610 [ 1174.946239] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.946847] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.947439] ? find_held_lock+0x2c/0x110 [ 1174.947945] ? io_submit_sqes+0x8610/0x8610 [ 1174.948481] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.949079] ? wait_for_completion_io+0x270/0x270 [ 1174.949672] ? rcu_read_lock_any_held+0x75/0xa0 [ 1174.950247] ? vfs_write+0x354/0xb10 [ 1174.950700] ? fput_many+0x2f/0x1a0 [ 1174.951145] ? ksys_write+0x1a9/0x260 [ 1174.951611] ? __ia32_sys_read+0xb0/0xb0 [ 1174.952111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.952758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.953391] do_syscall_64+0x33/0x40 [ 1174.953843] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1174.954475] RIP: 0033:0x7f57e5b24b19 [ 1174.954930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.957189] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1174.958129] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1174.959008] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1174.959882] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.960758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.961639] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:34:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x8800) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat(r4, &(0x7f0000000140)='./file0\x00', 0x0, 0x144) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:34:38 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed", 0x1, 0x2100}], 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) lseek(r0, 0x7a4, 0x4) 14:34:38 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:38 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x5, 0x3f, 0x9, 0x3f, 0x0, 0x6, 0x81246, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x100, 0x7, 0xffff8001, 0x2, 0x200, 0x4, 0x0, 0x0, 0x7913, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:34:38 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 14:34:38 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 14:34:38 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1191.100832] FAULT_INJECTION: forcing a failure. [ 1191.100832] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.102440] CPU: 1 PID: 7762 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1191.103370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.104472] Call Trace: [ 1191.104830] dump_stack+0x107/0x167 [ 1191.105315] should_fail.cold+0x5/0xa [ 1191.105818] ? __io_queue_sqe+0x666/0x9d0 [ 1191.106377] should_failslab+0x5/0x20 [ 1191.106903] kmem_cache_alloc_trace+0x55/0x320 [ 1191.107508] ? lock_downgrade+0x6d0/0x6d0 [ 1191.108060] __io_queue_sqe+0x666/0x9d0 [ 1191.108596] ? io_issue_sqe+0x77b0/0x77b0 [ 1191.109153] ? __fget_files+0x2f8/0x520 [ 1191.109686] ? io_prep_rw+0x7f5/0x1050 [ 1191.110199] io_submit_sqes+0x44aa/0x8610 [ 1191.110790] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1191.111458] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1191.112103] ? find_held_lock+0x2c/0x110 [ 1191.112647] ? io_submit_sqes+0x8610/0x8610 [ 1191.113233] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1191.113873] ? wait_for_completion_io+0x270/0x270 [ 1191.114538] ? rcu_read_lock_any_held+0x75/0xa0 [ 1191.115167] ? vfs_write+0x354/0xb10 [ 1191.115659] ? fput_many+0x2f/0x1a0 [ 1191.116142] ? ksys_write+0x1a9/0x260 [ 1191.116647] ? __ia32_sys_read+0xb0/0xb0 [ 1191.117190] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.117881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.118592] do_syscall_64+0x33/0x40 [ 1191.119087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.119763] RIP: 0033:0x7faf61c84b19 [ 1191.120256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.122709] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1191.123719] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1191.124660] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1191.125603] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.126561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.127511] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:34:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x48030, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="2e2f66696c6530005481f2f01edfa2f51763206dc3ff54dc5964f031e57a6cb85e2f707356d219ce7971b9cf"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) openat(r5, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x11000200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="040026bd700039d86758b0c465a576206a5526bc9caa3cb246eb0b9756333fc95a7e00000000", @ANYRES32=r6, @ANYBLOB="1a00c70006015b000006080402010903100117174644ba69289b00003200c7000006ff0420060305340707021f010107fb064002020100033f020603ab030701030020030002507d1592c391b28100002000c700000204067f0575040907b002020200043f068007c1f53b3fe711c8fb"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1191.181747] FAULT_INJECTION: forcing a failure. [ 1191.181747] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.183290] CPU: 1 PID: 7776 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1191.184193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.185286] Call Trace: [ 1191.185639] dump_stack+0x107/0x167 [ 1191.186118] should_fail.cold+0x5/0xa [ 1191.186645] ? __io_queue_sqe+0x666/0x9d0 [ 1191.187194] should_failslab+0x5/0x20 [ 1191.187700] kmem_cache_alloc_trace+0x55/0x320 [ 1191.188305] ? lock_downgrade+0x6d0/0x6d0 [ 1191.188835] __io_queue_sqe+0x666/0x9d0 [ 1191.189344] ? io_issue_sqe+0x77b0/0x77b0 [ 1191.189880] ? __fget_files+0x2f8/0x520 [ 1191.190401] ? io_prep_rw+0x7f5/0x1050 [ 1191.190916] io_submit_sqes+0x44aa/0x8610 [ 1191.191472] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1191.192117] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1191.192737] ? find_held_lock+0x2c/0x110 [ 1191.193259] ? io_submit_sqes+0x8610/0x8610 [ 1191.193813] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1191.194443] ? wait_for_completion_io+0x270/0x270 [ 1191.195081] ? rcu_read_lock_any_held+0x75/0xa0 [ 1191.195688] ? vfs_write+0x354/0xb10 [ 1191.196163] ? fput_many+0x2f/0x1a0 [ 1191.196637] ? ksys_write+0x1a9/0x260 [ 1191.197122] ? __ia32_sys_read+0xb0/0xb0 [ 1191.197649] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.198338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.199008] do_syscall_64+0x33/0x40 [ 1191.199484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.200159] RIP: 0033:0x7f57e5b24b19 [ 1191.200637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.203033] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1191.204004] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1191.204909] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1191.205811] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.206742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.207656] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:34:38 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001500)={0x0, 0x0, "26cfd3af8501db315f29caf120029def10e33c5475c14394efb2763fb5230242e926121d41ef6ae9c4e8147d8c91c79140dadc2c3493f91ddf3c61425be1a583d8f649209d2950da1cc184e1e09bc97ac73d88d292d89631b690567509dfa7ad114c5007c2be6b6354be7a8dd66811c3b843f5b43fc80628cd9763ef6196d8c59036d7ffe67381a0ced2fc6c677a76b377c54a39bc5e1ecb37e0fdf8a5ef0a1cdac98a317e41c5399f87e41dddbd559de4319a5c33f504cdf52932ba2a869cfb48da00e4967fcfbfc3bf70affd83f1f280f6dec2a979138e93e291f45a1a20c34ad2ad59920bd4d91d2f61de7567cfeaec972d96ab6a2591a13bb86024cfb898", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002500)={r2, 0x0, "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", "9899fbaec3bde8db25c7522ed8fd5efdd1583ac82cd1a4a9446a87ecc3919c4bb915c35ada778b8d5aded7ea13c7e14f6366630324038b51affd497ef0899645b379135af0941229313855bf64573976ab64c52abbd0e2de253030e756279f2ec003e67650076a6e2992493c16668294681848c3f2651fdcea00ba1bb45adaa318b412a2d4c31e1d3d54ac7e3ed3005b3e9def49aa666f57aedb004182b7b47d143bb625aa187f243d487007826edabc8ce8fdf6202f3e001ed12c15cbcce44b52fc117d62b95e354533d0f55ade2cf21d154b6eb338f1778353fec11545cb99ba7668cea5f503705cd32713343cf4601ae5a19cabe0fc0d1b54fe4bbef1c77e2e6ebb83bde314b2e904c678b25b052d99eb6b56ecc88cf0b678e1a477eeeb2f1bc0cbda85072346adf248272cc67094c002a1bcbb67da88aba716d13e449a7b19eeff18967aa2a2d355bcfe47ff4b6b49894fb09cba6f213945ad2d60fa8cd5e7d9f9cd1d5b6a2e1a2c0ea5f1b05d90ac86132abe5158d463fa2b2af83c3e83d948b7953ed9d77e64785e2c1e42f962ac4cd002d4d52cbf9949acfb71bc4179878bb4e0ee07d2a2c9a7cf28a1804af2b6e28ad7de8b77659ca3a4a1e38558131f509ecff607120ffde5122720c3cb6a50d74f1bf0472998174227a8a39a31c83aa634f30eff7e24a10bcd2efeb4ca2fed9b5d8988f090e7cbf172287c34a3f8f6f4f1bf8b3c351cf23a108a34118f5abc42400826f2db7af8963e523359c9c5930f7dd882159b32092b30072b4048b2b36343fbef06eb3045b1d61fda60cb32c2fe3abc7aa9be3a278b26670c0c1e852fbd53ebab8bc2e4746cb294da4b4ae3044438126e849695e88b74862bbff85d2d22a2269fc104af98a218d2378dfb17a56fe0eea249dfb2b23be43ff2da8ca1ea3d4bdb99ca2b877badf74fb6b487addcbfa6c096e6ff5df8ee091053ab32eddd4cb670b1d1e6f8d2fa8f264f41ae0bf59d58dade48faa1f8e5e0bb08661ac02c6713913415e4fd0fb800c681fb66e31f627923de0f6467edc3c0657ca4f5706629f0de5a7e572dffa24c50e6b232de6aa4c007a20814cd303cf8f49756f030e1f4eb11eeca3c53ee1f4fdc57195de156cdc0a2c1842721adc98b9930604be7dbdf7d3011748c1e8507ec454df7d902291c32e9f1f37748046cc50a5ccec0e618639be69d76b7d98f25d6e559d38a4cf4ea4011cec03eabe83ae564f0df79e3cf709b24dbfb754c0dca30ec7417ef131ef9fc272dc208b2a1e1ca4598a722bb19472b9c567cd28b5ac90c22838c56a58fe955e1563b6dfedc37ab3e4e011fd1362b70427b050838a3a61b6a0adf801ac7d719d3cb1bff0124e1a081d6add15a9109c7162c361d5d9c2310d8f846e9f409e4fc526b0c9348766ee41f097b5d122fef654df90acefdb199bf3221be1d7cfc1a09dee62d2021d4cfcaeed031a5e8c0f57b9f93196db171d5dddc7aef6a0f8180c3e11900d93a3901466f9f2284adb9a6e9b1eaea1d3f63d4722f336229868d0fd28b2f8f992e295336ebfa1726c79e86a5bad981da43397795413effc7b7db09222722d293aa139fb00bf7e82d468f35f26704aa3a3741278d19bebaa50df24c481e3a762d7e773dd25b2cbcc9a37661f4ec2e19f34e637700a4a564dae4ba5403a54514b6f9168131192fa2128562e3d5016d1820e26b8fcc868a98e524156f3edfc7119af1c3182c472a033dae3c69fdb895d0ca98a33db3d70fd2c477c972f86a600ce9cf98806202b384e7d33154c0951d96930ff66dbd9ad391283ad2d5b0fb34f868c7ecbaa912dd53acfbc8b28bbab0cc25f31b64f5192f7e3c9b8618cf59e88dbb66965190e64295b097779411f7f7fdfde9f239c8c86b0506a31032cac7c04e520b03243aeed328d38fb07ded2c0987bc99d076a31d9d2cf6916b5f8e47c3ee4f0b7f316c2c982f30a9abc61b11f15f2682c9637b082454ca841450d7b3ec2ccce800cdc0be7909a180ec6f7d5993c694b3866483205306bff2bfa84be6dfa661f7ba29825c73664af348553aa11cfdee451fec678aecbaee0770a3f4a4c2abc4091d50f3bc66037bb494b19419da3c5ea8bbf304a05e19165ba838912a7b9d826c796d824b7f318edebef50e4ee633974499a5a3e68f092977bd873616d18a947047a2ab0c9cf3625f6542182b013c310c6d0724b4f25e6d73d2e28656d6afce49d4bce5ccc601d9cea54e2ffc9005eb5789a62a882d2c89b97b74e77d048a467457d758d143c9183692757fc4d18f4c03a4c2575bacf0a5cfaaba5cd4592aa891689a64744e4315b786e6fe2161319fc0e05d0ee61b023fb1296ea83411ca9960830fd21b2aa901832bfe01c29e0a6b30bd73fcf420a2902e90befaace92cf5be07bc4f7e387acd5e7965632568bae99a6e506ac15c3a1d25fc6b7c5d74afa702e5d0f75e731a007e3c620bf94ffce20630aa69b1760b106d01ddd0ce9007bbd6e68e4f305d28bc8dbd9c24bf446eebe6e37a1227b059164832c19b54639d2cadc6cabed288a28f8c5b9389a32ff16dffff132835a4811778cfa421df3d9c2df4249a4f4eb7300da9ddcf9b1b26a14871868893f49e8b79a2419db890087ad583d8eca9dd0c1500bb0e3c0a0413979a3ce115722c626c03ea0b4371b4bc3a5638bd4ed535af58eb6e8235750ca07f1ec4f55eb494f28bde9cd05640e6af1d9736127043507ccc9ab6453b669f320fb38c994cd73e21314c12b6f5c5c210f0156e55f761cf1df43240ac7eeb0434a6c5c535aad9edab2f0c39bd07ac2614b7c568ccda7c03f08ce4c9ec187c6dbc9a32706561d81cb23e9f15ce1416f7251be5e3d3f169e2bb178cfcdc7e37639525bb413a69aea3361d1a7c3509830465a566a60f65d7858efa4c5f9e6c63b75152e34c992d55ab8c77a9ff3050374b4ef4fa8a50f3d08e392036ac2963bdfc1c9c45e9e8293aad68ce8cb5e26efa17b9a90dc1df08d312262c69379850ec9fc39fbf6e297cd338e7368cbd434452db8fa808e2de8d210e1fc4cc692d246f73f1ed46c440e202c8941cccbd51088c4bbc6ec8f380db2b7b96cc5a83ea0052d0eb9a7521dc3cf9717d0686162a2db86a2a78840b64f21d1b073967df8735b997525df3b931ac530ec0c2c3dcfa0852442edc372e609a1e2830c0e6921fbc290e58b378a6c5dac19806303d0d38944c8e3856fbb67f387c03c5b4c1ca13d0d6b501904ba256cfe58a854c461cbbd72b208f8ae4c2fe8ae8e71e047b94e1992eebbf4f40d5f77a2733c0ac2049cb1acad767f954c81d918bc8c68df6e5613b49874831fa2b35b9a5479a498d378af9314d04d7722b78385a98d5255b4952072e3e86a58ff13cf230836c3d759bf933a44f3cf04d8539e84e5cdb76c2e751cce782ccfca808f607c3c68f373c9b0d4f03ac0f1ee26b5e8f31baf8a1c6a98dec24b3ed04e04f7b14cfc9060f6f9b21a3905b4bc11e4d0d861905867dc194523432cc02c5b56520d61e80870a247322f8ea76d1a995b10707e20267ac3145116f15f3c34da02d8d152f11b30f5db6e85fa3d92befea8a16092b3e65a0e683489e347f9eece3940257769e3412c677bfd993e7a617fea099b79f037eb78cf29aa6dc5fc75550196dd77793162a3d399c8ebf42a385b70db0737d17c0a4750c61478887729969ba2af5ad3e0665a3c5fa78326ea22d14ce1c9e9c615e27466ab6c15dc773bf18ad9527dc91b6f0a19152d50b94e4ec4c9e571377bf7eb99c13085ceaf6a1203de6b28e93dbd38475f23889183677c687f8fcc696fce6c6e466ffca4b1f485408cb95993c99888457a8188704dd5cfbc6c0584f27f5f6704707ec0d4254fa0a2f48c9e0bf003b123a04d9a510c2750ba793f242e43e4554735297916bdb64186dd5930acf771f336a824e9ebbd1628c402008b890c5de0d9348b63b308e74a010c7c60f7aa844ebb611b001095ef722f7478720727ed79bf14ead7970e6449ad0304dedc560c5419386fbedeb0b3bfe83b1b38bffa854fcbc5cf5c69c17f61b2b7de8720b8447feb2ada1aed6c0dd6d4fe9f2a7f973f3c82fb796d02d34feeecf6a9e022821ada5430242e1e2ec51578116377d0efa953284822a81c1cbe325c243197e47386b9f02672ed23351eff6e95a783e575969ca6ad72d8110616771f1bcb2a20d314574fd6e6030184ff6bb808004ef3212bee4cea9af47c58a83ebec02b289d293336b0b413a905d7f4447906830183c9a76fefa8cd1c027dcbf1d149d9bb508747582ef81a19b3e7bfa4684cc64c5c5c819e5ddf76f7251a8d542dcbb34d88197d54da9b4eb47967b5093ee1e4de015012505800946e3ce0c23ac88181ea6a0f989fc0e144797ef418fd94bd83730ef2d0cf787a5f610e0af58db2c11c6e29db3b7b1b3a5bc999fc807e0a6418713b070242e81fb4cd62d75acc101524069452d85b940ef9029b8d44bfd8f69213d05a6d93a97dea81e40a942a270eeeeae102424d36b2011eac364509b3272b6969607dce1ac64afb659a5eb59b01350257d5ebf0c8f654f60efb38f7c3f0e5a4e036c588cdfb42fbdf88b0f0f6815a7e081e8026075217fbbdcaa77cf8a44152948514dcf7f149d2487ff9f812e43f7c3f3101fecf03215eaf79ea34616106331b2ee3a59e8ee4bedba87d002121965a15e4e4c708ef57e734fada39c02340a5bce78071d5495c22e9b91867fdbb7fe0ce15014600a59ae56a54317cb407b5a02e4e64dfd4ea6a5b273545afdafdfe306a70f60767ad543b1e1423c98fc35c957a87bc04bf96ae0ed28146817a76d5102bcf45cdb3f32fc56342597a4098972b2e81dc97708ed690010fc6e1c2ddd57e79ecbe76dc192cb94297ca8c653237aee576521e13061e7ad02b9807b191ae5c21bde058f8f4d13857737123b42a3ba49987026efc425357d94eda15ee6de118370b1119c8e219512aa4ae291269f92b6da161a87e29fa24086c0cf3912a3c25c62b4f04f37ade6d17676f589dca6814f1d5cdb89c31eb4254b5f109403c8b27162f86338c8491f643db1425082160997b31d321b1a3e3d44fdd299909eb5bdddef01e3135e8e261faedfd816e80bcf3ba7584e0eecdc1ad63264602b68dc3163775a683d7ef041e42e6d9adec914a4a8cec0f53e6ee947955ab7851853310e4bef7ec86affe5b1776978a75636f54d6603e2fadce58615cb6258d220bc272f13ac7119d88b4f8559429fd6baf4640d4715aac36e13b7a3ac448258d5d7190618a10e17d586ecfa8675099a26bda12e95333f0c878adb2341fa23f9148d830d00771e2a66df544fee51dfea30c8081c162949eba97a3740d6bcecec5380154ea3dbfee986a8f38a65a5d65b01acc93a59643e969db4e6"}) [ 1191.260657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:34:38 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:38 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 14:34:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:34:38 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1191.487029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.487897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.488839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1191.490555] FAULT_INJECTION: forcing a failure. [ 1191.490555] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.491876] CPU: 1 PID: 7790 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1191.492662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.493630] Call Trace: [ 1191.493936] dump_stack+0x107/0x167 [ 1191.494355] should_fail.cold+0x5/0xa [ 1191.494817] ? io_setup_async_rw+0x180/0x580 [ 1191.495328] should_failslab+0x5/0x20 [ 1191.495759] __kmalloc+0x72/0x390 [ 1191.496151] ? mark_lock+0xf5/0x2df0 [ 1191.496574] io_setup_async_rw+0x180/0x580 [ 1191.497075] io_read+0xe98/0x11e0 [ 1191.497483] ? kiocb_done+0xc90/0xc90 [ 1191.497917] ? mark_lock+0xf5/0x2df0 [ 1191.498357] ? lock_chain_count+0x20/0x20 [ 1191.498868] ? __lock_acquire+0xbb1/0x5b00 [ 1191.499350] io_issue_sqe+0x2e8a/0x77b0 [ 1191.499803] ? find_held_lock+0x2c/0x110 [ 1191.500272] ? perf_trace_lock+0xac/0x490 [ 1191.500748] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1191.501303] ? io_connect+0x610/0x610 [ 1191.501749] ? lock_acquire+0x197/0x470 [ 1191.502200] ? find_held_lock+0x2c/0x110 [ 1191.502681] ? __fget_files+0x2cf/0x520 [ 1191.503128] ? lock_downgrade+0x6d0/0x6d0 [ 1191.503604] __io_queue_sqe+0x90/0x9d0 [ 1191.504049] ? io_issue_sqe+0x77b0/0x77b0 [ 1191.504516] ? __fget_files+0x2f8/0x520 [ 1191.504977] ? io_prep_rw+0x7f5/0x1050 [ 1191.505436] io_submit_sqes+0x44aa/0x8610 [ 1191.505922] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1191.506494] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1191.507068] ? find_held_lock+0x2c/0x110 [ 1191.507534] ? io_submit_sqes+0x8610/0x8610 [ 1191.508031] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1191.508592] ? wait_for_completion_io+0x270/0x270 [ 1191.509148] ? rcu_read_lock_any_held+0x75/0xa0 [ 1191.509677] ? vfs_write+0x354/0xb10 [ 1191.510097] ? fput_many+0x2f/0x1a0 [ 1191.510521] ? ksys_write+0x1a9/0x260 [ 1191.510975] ? __ia32_sys_read+0xb0/0xb0 [ 1191.511456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.512066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.512665] do_syscall_64+0x33/0x40 [ 1191.513090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.513670] RIP: 0033:0x7faf61c84b19 [ 1191.514102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.514423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1191.516210] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1191.516224] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1191.516231] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1191.516236] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.516243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.516249] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:34:38 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:38 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x8, 0x0, 0x34, 0x11a, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp, 0x80000, 0x3f, 0x2, 0x5, 0x2, 0xffffff2c, 0x0, 0x0, 0x80, 0x0, 0x7fff}, 0x0, 0x0, r0, 0x1) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x55, 0x6, 0x5, 0xfa, 0x9}) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:34:38 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:38 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10008}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x7c, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x5e, 0x96, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="39c2762ff9ba46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d9", @typed={0x4, 0x2c}, @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99cc}]}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000003cf4f1b0e6b6a0c16e059915612cb5882071d6fc6420d495bd8bb3e1e375", @ANYRES16=0x0, @ANYBLOB="02002abd7000ffdbdf252100000004000400050005000500000008000200010000000800030001000000050005000100000014000100fc010000000000449cd6363fe2c943acdfc6c6a4a4e40000000000000000000500050004000000050005000000000005"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x9bbb) 14:34:38 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 14:34:38 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x6, 0xaa, 0x8, 0x0, 0x4, 0xa00a8, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000000), 0x7}, 0x10800, 0x8, 0x6, 0x2, 0x9, 0x8001, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x0, r2, 0x9) readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r1, r3) openat(r0, &(0x7f0000000240)='./file0\x00', 0x24980, 0x184) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000140)="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") recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1191.846145] FAULT_INJECTION: forcing a failure. [ 1191.846145] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.847521] CPU: 1 PID: 7811 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1191.848289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.849222] Call Trace: [ 1191.849530] dump_stack+0x107/0x167 [ 1191.849948] should_fail.cold+0x5/0xa [ 1191.850395] ? create_object.isra.0+0x3a/0xa20 [ 1191.850942] should_failslab+0x5/0x20 [ 1191.851381] kmem_cache_alloc+0x5b/0x310 [ 1191.851843] create_object.isra.0+0x3a/0xa20 [ 1191.852341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1191.852926] __kmalloc+0x16e/0x390 [ 1191.853340] ? lock_downgrade+0x6d0/0x6d0 [ 1191.853812] io_setup_async_rw+0x180/0x580 [ 1191.854294] io_read+0xe98/0x11e0 [ 1191.854720] ? kiocb_done+0xc90/0xc90 [ 1191.855160] ? mark_lock+0xf5/0x2df0 [ 1191.855593] ? lock_chain_count+0x20/0x20 [ 1191.856090] ? __lock_acquire+0xbb1/0x5b00 [ 1191.856583] io_issue_sqe+0x2e8a/0x77b0 [ 1191.857044] ? find_held_lock+0x2c/0x110 [ 1191.857515] ? perf_trace_lock+0xac/0x490 [ 1191.857988] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1191.858533] ? io_connect+0x610/0x610 [ 1191.858979] ? lock_acquire+0x197/0x470 [ 1191.859446] ? find_held_lock+0x2c/0x110 [ 1191.859907] ? __fget_files+0x2cf/0x520 [ 1191.860372] ? lock_downgrade+0x6d0/0x6d0 [ 1191.860852] __io_queue_sqe+0x90/0x9d0 [ 1191.861309] ? io_issue_sqe+0x77b0/0x77b0 [ 1191.861783] ? __fget_files+0x2f8/0x520 [ 1191.862248] ? io_prep_rw+0x7f5/0x1050 [ 1191.862715] io_submit_sqes+0x44aa/0x8610 [ 1191.863209] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1191.863774] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1191.864326] ? find_held_lock+0x2c/0x110 [ 1191.864796] ? io_submit_sqes+0x8610/0x8610 [ 1191.865301] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1191.865866] ? wait_for_completion_io+0x270/0x270 [ 1191.866426] ? rcu_read_lock_any_held+0x75/0xa0 [ 1191.866981] ? vfs_write+0x354/0xb10 [ 1191.867419] ? fput_many+0x2f/0x1a0 [ 1191.867831] ? ksys_write+0x1a9/0x260 [ 1191.868263] ? __ia32_sys_read+0xb0/0xb0 [ 1191.868723] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1191.869331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.869917] do_syscall_64+0x33/0x40 [ 1191.870347] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1191.870942] RIP: 0033:0x7f57e5b24b19 [ 1191.871373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.873463] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1191.874340] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1191.875267] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1191.876091] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.876910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.877728] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:34:38 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:38 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:39 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000004c0)=""/4096) readv(r1, &(0x7f0000000280), 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000040)={'bond0\x00', {0x2, 0x0, @local}}) 14:34:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="bb", 0x1}], 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 14:34:39 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 14:34:39 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) [ 1192.261019] FAULT_INJECTION: forcing a failure. [ 1192.261019] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.262377] CPU: 1 PID: 7830 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1192.263183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1192.264132] Call Trace: [ 1192.264449] dump_stack+0x107/0x167 [ 1192.264881] should_fail.cold+0x5/0xa [ 1192.265338] ? io_setup_async_rw+0x180/0x580 [ 1192.265859] should_failslab+0x5/0x20 [ 1192.266308] __kmalloc+0x72/0x390 [ 1192.266735] ? lock_downgrade+0x6d0/0x6d0 [ 1192.267207] io_setup_async_rw+0x180/0x580 [ 1192.267690] io_read+0xe98/0x11e0 [ 1192.268091] ? kiocb_done+0xc90/0xc90 [ 1192.268522] ? mark_lock+0xf5/0x2df0 [ 1192.268948] ? lock_chain_count+0x20/0x20 [ 1192.269437] ? __lock_acquire+0xbb1/0x5b00 [ 1192.269923] io_issue_sqe+0x2e8a/0x77b0 [ 1192.270376] ? find_held_lock+0x2c/0x110 [ 1192.270851] ? perf_trace_lock+0xac/0x490 [ 1192.271326] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1192.271863] ? io_connect+0x610/0x610 [ 1192.272297] ? lock_acquire+0x197/0x470 [ 1192.272744] ? find_held_lock+0x2c/0x110 [ 1192.273210] ? __fget_files+0x2cf/0x520 [ 1192.273656] ? lock_downgrade+0x6d0/0x6d0 [ 1192.274134] __io_queue_sqe+0x90/0x9d0 [ 1192.274595] ? io_issue_sqe+0x77b0/0x77b0 [ 1192.275066] ? __fget_files+0x2f8/0x520 [ 1192.275523] ? io_prep_rw+0x7f5/0x1050 [ 1192.275967] io_submit_sqes+0x44aa/0x8610 [ 1192.276451] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1192.277013] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1192.277561] ? find_held_lock+0x2c/0x110 [ 1192.278024] ? io_submit_sqes+0x8610/0x8610 [ 1192.278527] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1192.279089] ? wait_for_completion_io+0x270/0x270 [ 1192.279636] ? rcu_read_lock_any_held+0x75/0xa0 [ 1192.280162] ? vfs_write+0x354/0xb10 [ 1192.280584] ? fput_many+0x2f/0x1a0 [ 1192.280997] ? ksys_write+0x1a9/0x260 [ 1192.281431] ? __ia32_sys_read+0xb0/0xb0 [ 1192.281894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1192.282483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1192.283084] do_syscall_64+0x33/0x40 [ 1192.283503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1192.284084] RIP: 0033:0x7faf61c84b19 [ 1192.284512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1192.286608] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1192.287475] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1192.288277] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1192.289085] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.289890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1192.290719] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1192.293844] FAULT_INJECTION: forcing a failure. [ 1192.293844] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.295180] CPU: 1 PID: 7832 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1192.295954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1192.296886] Call Trace: [ 1192.297184] dump_stack+0x107/0x167 [ 1192.297596] should_fail.cold+0x5/0xa [ 1192.298026] ? io_setup_async_rw+0x180/0x580 [ 1192.298529] should_failslab+0x5/0x20 [ 1192.298976] __kmalloc+0x72/0x390 [ 1192.299379] ? lock_downgrade+0x6d0/0x6d0 [ 1192.299853] io_setup_async_rw+0x180/0x580 [ 1192.300364] io_read+0xe98/0x11e0 [ 1192.300770] ? kiocb_done+0xc90/0xc90 [ 1192.301209] ? mark_lock+0xf5/0x2df0 [ 1192.301639] ? lock_chain_count+0x20/0x20 [ 1192.302138] ? __lock_acquire+0xbb1/0x5b00 [ 1192.302645] io_issue_sqe+0x2e8a/0x77b0 [ 1192.303112] ? find_held_lock+0x2c/0x110 [ 1192.303587] ? perf_trace_lock+0xac/0x490 [ 1192.304076] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1192.304632] ? io_connect+0x610/0x610 [ 1192.305083] ? lock_acquire+0x197/0x470 [ 1192.305542] ? find_held_lock+0x2c/0x110 [ 1192.306026] ? __fget_files+0x2cf/0x520 [ 1192.306491] ? lock_downgrade+0x6d0/0x6d0 [ 1192.306995] __io_queue_sqe+0x90/0x9d0 [ 1192.307460] ? io_issue_sqe+0x77b0/0x77b0 [ 1192.307944] ? __fget_files+0x2f8/0x520 [ 1192.308403] ? io_prep_rw+0x7f5/0x1050 [ 1192.308868] io_submit_sqes+0x44aa/0x8610 [ 1192.309362] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1192.309959] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1192.310510] ? find_held_lock+0x2c/0x110 [ 1192.311018] ? io_submit_sqes+0x8610/0x8610 [ 1192.311515] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1192.312079] ? wait_for_completion_io+0x270/0x270 [ 1192.312642] ? rcu_read_lock_any_held+0x75/0xa0 [ 1192.313194] ? vfs_write+0x354/0xb10 [ 1192.313618] ? fput_many+0x2f/0x1a0 [ 1192.314043] ? ksys_write+0x1a9/0x260 [ 1192.314482] ? __ia32_sys_read+0xb0/0xb0 [ 1192.314975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1192.315599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1192.316203] do_syscall_64+0x33/0x40 [ 1192.316645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1192.317240] RIP: 0033:0x7f57e5b24b19 [ 1192.317683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1192.319882] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1192.320766] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1192.321614] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1192.322458] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.323303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1192.324124] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:34:39 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:39 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x6, 0x1, 0x5, 0x2, 0x0, 0x3fc00, 0x200, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xd2, 0x2}, 0x0, 0x8, 0x1, 0xf, 0x7, 0x8, 0x1f, 0x0, 0x7fffffff, 0x0, 0x8001}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x22000, 0x156, 0x11}, 0x18) openat(r2, 0x0, 0x0, 0x9c) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:34:56 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:56 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 14:34:56 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:56 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:56 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="efb43bae4dbd43db7e07364e0ecb3695a10a9560857a7f2f57fc282abc1d7ce10cde95331be877a2a700d8dc2ff12991ff6baa31513e9e07955f6a1816853112e73b0cf5150cc47c3e5184f44edcc412cf34eb7cbc10293e7ca6b1d1eed84457c256b972379cda5449fce59a52efe7c181c22d70503bed0a0dd6fe509e09b35e671b2aff8f3e20c66f0d90c45d28e33098ab55e934c5f8b76cd8320ad4cf03c324c80977241f7650059c0a318f18e34ec7180e5bc33e0d90e40a1da8853918c3305eb3ae828567e1c27eae3b10eb39", 0xcf}, {&(0x7f00000001c0)="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", 0x116}], 0x2) 14:34:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = io_uring_setup(0x2262, &(0x7f0000000000)={0x0, 0x9217, 0x4, 0x3, 0x1aa, 0x0, r2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001500)) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:34:56 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) [ 1209.196173] FAULT_INJECTION: forcing a failure. [ 1209.196173] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.199020] CPU: 1 PID: 7859 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1209.200687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1209.202741] Call Trace: [ 1209.202821] FAULT_INJECTION: forcing a failure. [ 1209.202821] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.203403] dump_stack+0x107/0x167 [ 1209.203431] should_fail.cold+0x5/0xa [ 1209.207727] ? create_object.isra.0+0x3a/0xa20 [ 1209.208843] should_failslab+0x5/0x20 [ 1209.209758] kmem_cache_alloc+0x5b/0x310 [ 1209.210758] create_object.isra.0+0x3a/0xa20 [ 1209.211884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1209.213140] __kmalloc+0x16e/0x390 [ 1209.214013] io_setup_async_rw+0x180/0x580 [ 1209.215076] io_read+0xe98/0x11e0 [ 1209.215951] ? kiocb_done+0xc90/0xc90 [ 1209.216860] ? mark_lock+0xf5/0x2df0 [ 1209.217813] ? lock_chain_count+0x20/0x20 [ 1209.218865] ? __lock_acquire+0xbb1/0x5b00 [ 1209.219912] io_issue_sqe+0x2e8a/0x77b0 [ 1209.220896] ? find_held_lock+0x2c/0x110 [ 1209.221893] ? perf_trace_lock+0xac/0x490 [ 1209.222900] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1209.224112] ? io_connect+0x610/0x610 [ 1209.225075] ? lock_acquire+0x197/0x470 [ 1209.226069] ? find_held_lock+0x2c/0x110 [ 1209.227099] ? __fget_files+0x2cf/0x520 [ 1209.228114] ? lock_downgrade+0x6d0/0x6d0 [ 1209.229162] __io_queue_sqe+0x90/0x9d0 [ 1209.230118] ? io_issue_sqe+0x77b0/0x77b0 [ 1209.231150] ? __fget_files+0x2f8/0x520 [ 1209.232137] ? io_prep_rw+0x7f5/0x1050 [ 1209.233083] io_submit_sqes+0x44aa/0x8610 [ 1209.234120] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1209.235371] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1209.236536] ? find_held_lock+0x2c/0x110 [ 1209.237524] ? io_submit_sqes+0x8610/0x8610 [ 1209.238589] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1209.239775] ? wait_for_completion_io+0x270/0x270 [ 1209.240957] ? rcu_read_lock_any_held+0x75/0xa0 [ 1209.242074] ? vfs_write+0x354/0xb10 [ 1209.242986] ? fput_many+0x2f/0x1a0 [ 1209.243880] ? ksys_write+0x1a9/0x260 [ 1209.244811] ? __ia32_sys_read+0xb0/0xb0 [ 1209.245843] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1209.247177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1209.248438] do_syscall_64+0x33/0x40 [ 1209.249373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1209.250659] RIP: 0033:0x7f57e5b24b19 [ 1209.251604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1209.256224] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1209.258134] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1209.259877] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1209.261598] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1209.263344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1209.265072] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1209.266845] CPU: 0 PID: 7860 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1209.268433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1209.270302] Call Trace: [ 1209.270906] dump_stack+0x107/0x167 [ 1209.271745] should_fail.cold+0x5/0xa [ 1209.272620] ? create_object.isra.0+0x3a/0xa20 [ 1209.273657] should_failslab+0x5/0x20 [ 1209.274525] kmem_cache_alloc+0x5b/0x310 [ 1209.275462] create_object.isra.0+0x3a/0xa20 [ 1209.276470] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1209.277615] __kmalloc+0x16e/0x390 [ 1209.278414] ? lock_downgrade+0x6d0/0x6d0 [ 1209.279383] io_setup_async_rw+0x180/0x580 [ 1209.280360] io_read+0xe98/0x11e0 [ 1209.281172] ? kiocb_done+0xc90/0xc90 [ 1209.282043] ? mark_lock+0xf5/0x2df0 [ 1209.282905] ? lock_chain_count+0x20/0x20 [ 1209.283899] ? __lock_acquire+0xbb1/0x5b00 [ 1209.284870] io_issue_sqe+0x2e8a/0x77b0 [ 1209.285785] ? find_held_lock+0x2c/0x110 [ 1209.286703] ? perf_trace_lock+0xac/0x490 [ 1209.287668] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1209.288740] ? io_connect+0x610/0x610 [ 1209.289623] ? lock_acquire+0x197/0x470 [ 1209.290531] ? find_held_lock+0x2c/0x110 [ 1209.291478] ? __fget_files+0x2cf/0x520 [ 1209.292388] ? lock_downgrade+0x6d0/0x6d0 [ 1209.293341] __io_queue_sqe+0x90/0x9d0 [ 1209.294243] ? io_issue_sqe+0x77b0/0x77b0 [ 1209.295197] ? __fget_files+0x2f8/0x520 [ 1209.296122] ? io_prep_rw+0x7f5/0x1050 [ 1209.297023] io_submit_sqes+0x44aa/0x8610 [ 1209.298004] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1209.299158] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1209.300270] ? find_held_lock+0x2c/0x110 [ 1209.301205] ? io_submit_sqes+0x8610/0x8610 [ 1209.302204] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1209.303327] ? wait_for_completion_io+0x270/0x270 [ 1209.304435] ? rcu_read_lock_any_held+0x75/0xa0 [ 1209.305494] ? vfs_write+0x354/0xb10 [ 1209.306350] ? fput_many+0x2f/0x1a0 [ 1209.307194] ? ksys_write+0x1a9/0x260 [ 1209.308066] ? __ia32_sys_read+0xb0/0xb0 [ 1209.309000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1209.310202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1209.311392] do_syscall_64+0x33/0x40 [ 1209.312240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1209.313412] RIP: 0033:0x7faf61c84b19 [ 1209.314265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1209.318488] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1209.320221] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1209.321843] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1209.323479] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1209.325113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1209.326743] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:34:56 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:56 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, @in_args={0x2}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r5, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 14:34:56 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:56 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/46, 0x2e) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) copy_file_range(r1, &(0x7f0000000100)=0x100, 0xffffffffffffffff, &(0x7f0000000140)=0xf21a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1209.514570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.516495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.518431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:34:56 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:34:56 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) write$binfmt_elf64(r2, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x4, 0x57, 0x1, 0x5b44, 0x2, 0x3e, 0x80000001, 0x80, 0x40, 0x17, 0x68, 0x7, 0x38, 0x1, 0x85, 0x0, 0x8001}, [{0x6474e551, 0x7ff, 0x100000000, 0x8, 0x13000000000, 0xa5, 0xfffffffffffffffb, 0x1}], "4699590a0fed07653ca203c200851b2550df6daaad6c25b898267e293654179199a75dd1ff612ba4cefc9c3b999d97b5b8b5b11c8cc881f2431ece42a529b4b4e74a287d5370a51c1e2b71d0b3796a936836fe27380eeba47ecfc0612ba36af159c261697668e823e70e210bfd356fce7f83f8ef74028464d427060b414165b48c35bc09f6c12d2b8c719671", ['\x00', '\x00', '\x00']}, 0x404) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:34:56 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @local, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@empty, 0x100000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@multicast1, @empty, @rand_addr, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x4b, &(0x7f00000000c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0xab, "b2", "4ae25c", 0x9100, "555172ca338e0e8a58deff5e43f2aa7cc5c56392e5615b95e4703f8576f6142bd0689d0ff40bc81e76ae112771dd1c3de2"}}}}}, &(0x7f0000000000)={0x1, 0x1, [0xc9e, 0xed, 0x32800, 0xb8c]}) 14:35:11 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:11 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:11 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:11 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 14:35:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0xd2b, 0x4) clone3(&(0x7f0000000400)={0x20220480, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x24}, &(0x7f0000000280)=""/176, 0xb0, &(0x7f0000000340)=""/109, &(0x7f00000003c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) r2 = creat(&(0x7f0000000480)='./file0\x00', 0x5) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x81, 0xc2, 0x8, 0xb0, 0x0, 0xffffffffffffffff, 0x4, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x1, 0x100000001}, 0x6168, 0xf704, 0xf81, 0x2, 0x2, 0x6f980657, 0xff00, 0x0, 0x3, 0x0, 0x66}, r1, 0xf, r2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x6359, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000c0}, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 14:35:11 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 14:35:11 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x0, 0xe1, 0x53, 0x0, 0x1, 0x1a00c, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101, 0x1, @perf_config_ext={0x1, 0x4}, 0x0, 0x6, 0x4, 0x2, 0x8e31, 0x74800000, 0x9, 0x0, 0xfc17, 0x0, 0x1ff}, r1, 0xffffffffffffffff, r0, 0x8) 14:35:11 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1224.190222] FAULT_INJECTION: forcing a failure. [ 1224.190222] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.192734] CPU: 1 PID: 7900 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1224.193367] FAULT_INJECTION: forcing a failure. [ 1224.193367] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.194176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1224.194183] Call Trace: [ 1224.194207] dump_stack+0x107/0x167 [ 1224.194232] should_fail.cold+0x5/0xa [ 1224.200600] ? __io_queue_sqe+0x666/0x9d0 [ 1224.201481] should_failslab+0x5/0x20 [ 1224.202285] kmem_cache_alloc_trace+0x55/0x320 [ 1224.203252] ? lock_downgrade+0x6d0/0x6d0 [ 1224.204140] __io_queue_sqe+0x666/0x9d0 [ 1224.204987] ? io_issue_sqe+0x77b0/0x77b0 [ 1224.205861] ? __fget_files+0x2f8/0x520 [ 1224.206707] ? io_prep_rw+0x7f5/0x1050 [ 1224.207539] io_submit_sqes+0x44aa/0x8610 [ 1224.208455] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1224.209505] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1224.210528] ? find_held_lock+0x2c/0x110 [ 1224.211394] ? io_submit_sqes+0x8610/0x8610 [ 1224.212324] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1224.213347] ? wait_for_completion_io+0x270/0x270 [ 1224.214367] ? rcu_read_lock_any_held+0x75/0xa0 [ 1224.215346] ? vfs_write+0x354/0xb10 [ 1224.216140] ? fput_many+0x2f/0x1a0 [ 1224.216913] ? ksys_write+0x1a9/0x260 [ 1224.217716] ? __ia32_sys_read+0xb0/0xb0 [ 1224.218577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1224.219687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1224.220777] do_syscall_64+0x33/0x40 [ 1224.221563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1224.222641] RIP: 0033:0x7f57e5b24b19 [ 1224.223427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1224.227313] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1224.228929] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1224.230442] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1224.231953] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1224.233456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1224.234962] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1224.236534] CPU: 0 PID: 7901 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1224.238135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1224.240022] Call Trace: [ 1224.240635] dump_stack+0x107/0x167 [ 1224.241458] should_fail.cold+0x5/0xa [ 1224.242328] ? __io_queue_sqe+0x666/0x9d0 [ 1224.243270] should_failslab+0x5/0x20 [ 1224.244140] kmem_cache_alloc_trace+0x55/0x320 [ 1224.245177] ? lock_downgrade+0x6d0/0x6d0 [ 1224.246124] __io_queue_sqe+0x666/0x9d0 [ 1224.247029] ? io_issue_sqe+0x77b0/0x77b0 [ 1224.247978] ? __fget_files+0x2f8/0x520 [ 1224.248883] ? io_prep_rw+0x7f5/0x1050 [ 1224.249769] io_submit_sqes+0x44aa/0x8610 [ 1224.250739] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1224.251882] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1224.252981] ? find_held_lock+0x2c/0x110 [ 1224.253904] ? io_submit_sqes+0x8610/0x8610 [ 1224.254894] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1224.255998] ? wait_for_completion_io+0x270/0x270 [ 1224.257093] ? rcu_read_lock_any_held+0x75/0xa0 [ 1224.258152] ? vfs_write+0x354/0xb10 [ 1224.258991] ? fput_many+0x2f/0x1a0 [ 1224.259830] ? ksys_write+0x1a9/0x260 [ 1224.260694] ? __ia32_sys_read+0xb0/0xb0 [ 1224.261630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1224.262813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1224.264000] do_syscall_64+0x33/0x40 [ 1224.264863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1224.266022] RIP: 0033:0x7faf61c84b19 [ 1224.266862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1224.271036] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1224.272781] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1224.274398] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1224.276027] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1224.277643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1224.279262] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:35:11 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff) 14:35:11 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:11 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:35:11 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:11 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="bf8316d98dae932f67fde9e1ece6505be544219ca57d73e335250caf316ed4381e8af4ada86d740bf072e51c2c5e2a3b4251040f18de4c4dc7cf4b615c3884140190f75e87b95f6ed3c8d086c4a3d5a1052e536723d5", 0x56) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0xe3d5, 0x5, 0x1, 'queue0\x00', 0x9}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xfc, 0x20, 0xab, 0x3}, {0x0, 0x3f, 0x5, 0x1f}, {0xfcbd, 0x40, 0x7, 0x9}]}) signalfd4(r3, &(0x7f0000000200)={[0x6]}, 0x8, 0x80800) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:35:11 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:11 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:11 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) [ 1224.970183] FAULT_INJECTION: forcing a failure. [ 1224.970183] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.972964] CPU: 1 PID: 7931 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1224.974630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1224.976655] Call Trace: [ 1224.977302] dump_stack+0x107/0x167 [ 1224.978191] should_fail.cold+0x5/0xa [ 1224.979122] ? io_setup_async_rw+0x180/0x580 [ 1224.980211] should_failslab+0x5/0x20 [ 1224.981142] __kmalloc+0x72/0x390 [ 1224.981991] ? lock_downgrade+0x6d0/0x6d0 [ 1224.982996] io_setup_async_rw+0x180/0x580 [ 1224.984214] io_read+0xe98/0x11e0 [ 1224.985365] ? kiocb_done+0xc90/0xc90 [ 1224.986571] ? mark_lock+0xf5/0x2df0 [ 1224.987797] ? lock_chain_count+0x20/0x20 [ 1224.989050] ? __lock_acquire+0xbb1/0x5b00 [ 1224.990203] io_issue_sqe+0x2e8a/0x77b0 [ 1224.991281] ? find_held_lock+0x2c/0x110 [ 1224.992396] ? perf_trace_lock+0xac/0x490 [ 1224.993523] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1224.994806] ? io_connect+0x610/0x610 [ 1224.995866] ? lock_acquire+0x197/0x470 [ 1224.996944] ? find_held_lock+0x2c/0x110 [ 1224.998061] ? __fget_files+0x2cf/0x520 [ 1224.999136] ? lock_downgrade+0x6d0/0x6d0 [ 1225.000386] __io_queue_sqe+0x90/0x9d0 [ 1225.001548] ? io_issue_sqe+0x77b0/0x77b0 [ 1225.002750] ? __fget_files+0x2f8/0x520 [ 1225.003935] ? io_prep_rw+0x7f5/0x1050 [ 1225.005001] io_submit_sqes+0x44aa/0x8610 [ 1225.006068] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.007308] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.008527] ? find_held_lock+0x2c/0x110 [ 1225.009545] ? io_submit_sqes+0x8610/0x8610 [ 1225.010634] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1225.011850] ? wait_for_completion_io+0x270/0x270 [ 1225.013049] ? rcu_read_lock_any_held+0x75/0xa0 [ 1225.014196] ? vfs_write+0x354/0xb10 [ 1225.015114] ? fput_many+0x2f/0x1a0 [ 1225.016020] ? ksys_write+0x1a9/0x260 [ 1225.016966] ? __ia32_sys_read+0xb0/0xb0 [ 1225.017976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.019268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.020553] do_syscall_64+0x33/0x40 [ 1225.021472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.022736] RIP: 0033:0x7f57e5b24b19 [ 1225.023657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.028210] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1225.030090] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1225.031860] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1225.033615] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1225.035370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1225.037134] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:35:28 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 14:35:28 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:28 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:28 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) socketpair(0x2b, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r3, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x800) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x8, 0x10000, 0xfffffffffffffffa, 0x5, 0xffffffffffffffc3, 0x4}, {0x80, 0x4, 0x5, 0x8709, 0x7, 0x9}], ['\x00']}) 14:35:28 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:28 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 14:35:28 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0xd2b, 0x4) clone3(&(0x7f0000000400)={0x20220480, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x24}, &(0x7f0000000280)=""/176, 0xb0, &(0x7f0000000340)=""/109, &(0x7f00000003c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) r2 = creat(&(0x7f0000000480)='./file0\x00', 0x5) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x81, 0xc2, 0x8, 0xb0, 0x0, 0xffffffffffffffff, 0x4, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x1, 0x100000001}, 0x6168, 0xf704, 0xf81, 0x2, 0x2, 0x6f980657, 0xff00, 0x0, 0x3, 0x0, 0x66}, r1, 0xf, r2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x6359, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000c0}, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) [ 1241.892319] FAULT_INJECTION: forcing a failure. [ 1241.892319] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.893965] CPU: 0 PID: 7943 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1241.894952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1241.896144] Call Trace: [ 1241.896527] dump_stack+0x107/0x167 [ 1241.897052] should_fail.cold+0x5/0xa [ 1241.897594] ? io_setup_async_rw+0x180/0x580 [ 1241.898224] should_failslab+0x5/0x20 [ 1241.898760] __kmalloc+0x72/0x390 [ 1241.899280] ? lock_downgrade+0x6d0/0x6d0 [ 1241.899871] io_setup_async_rw+0x180/0x580 [ 1241.900445] io_read+0xe98/0x11e0 [ 1241.900951] ? kiocb_done+0xc90/0xc90 [ 1241.901489] ? mark_lock+0xf5/0x2df0 [ 1241.902014] ? lock_chain_count+0x20/0x20 [ 1241.902618] ? __lock_acquire+0xbb1/0x5b00 [ 1241.903234] io_issue_sqe+0x2e8a/0x77b0 [ 1241.903789] ? find_held_lock+0x2c/0x110 [ 1241.904377] ? perf_trace_lock+0xac/0x490 [ 1241.904954] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1241.905630] ? io_connect+0x610/0x610 [ 1241.906181] ? lock_acquire+0x197/0x470 [ 1241.906743] ? find_held_lock+0x2c/0x110 [ 1241.907323] ? __fget_files+0x2cf/0x520 [ 1241.907889] ? lock_downgrade+0x6d0/0x6d0 [ 1241.908497] __io_queue_sqe+0x90/0x9d0 [ 1241.909060] ? io_issue_sqe+0x77b0/0x77b0 [ 1241.909641] ? __fget_files+0x2f8/0x520 [ 1241.910201] ? io_prep_rw+0x7f5/0x1050 [ 1241.910750] io_submit_sqes+0x44aa/0x8610 [ 1241.911363] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.912064] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.912750] ? find_held_lock+0x2c/0x110 [ 1241.913322] ? io_submit_sqes+0x8610/0x8610 [ 1241.913893] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1241.914575] ? wait_for_completion_io+0x270/0x270 [ 1241.915265] ? rcu_read_lock_any_held+0x75/0xa0 [ 1241.915938] ? vfs_write+0x354/0xb10 [ 1241.916466] ? fput_many+0x2f/0x1a0 [ 1241.916986] ? ksys_write+0x1a9/0x260 [ 1241.917523] ? __ia32_sys_read+0xb0/0xb0 [ 1241.918109] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1241.918845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1241.919579] do_syscall_64+0x33/0x40 [ 1241.920104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1241.920777] RIP: 0033:0x7f57e5b24b19 [ 1241.921271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.923698] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1241.924702] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1241.925633] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1241.926576] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.927507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1241.928438] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1241.932246] FAULT_INJECTION: forcing a failure. [ 1241.932246] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.934709] CPU: 1 PID: 7946 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1241.936172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1241.937945] Call Trace: [ 1241.938513] dump_stack+0x107/0x167 [ 1241.939294] should_fail.cold+0x5/0xa [ 1241.940116] ? create_object.isra.0+0x3a/0xa20 [ 1241.941098] should_failslab+0x5/0x20 [ 1241.941910] kmem_cache_alloc+0x5b/0x310 [ 1241.942775] create_object.isra.0+0x3a/0xa20 [ 1241.943702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1241.944786] kmem_cache_alloc_trace+0x151/0x320 [ 1241.945779] ? lock_downgrade+0x6d0/0x6d0 [ 1241.946672] __io_queue_sqe+0x666/0x9d0 [ 1241.947523] ? io_issue_sqe+0x77b0/0x77b0 [ 1241.948404] ? __fget_files+0x2f8/0x520 [ 1241.949261] ? io_prep_rw+0x7f5/0x1050 [ 1241.950091] io_submit_sqes+0x44aa/0x8610 [ 1241.950999] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.952056] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.953089] ? find_held_lock+0x2c/0x110 [ 1241.953957] ? io_submit_sqes+0x8610/0x8610 [ 1241.954885] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1241.955911] ? wait_for_completion_io+0x270/0x270 [ 1241.956942] ? rcu_read_lock_any_held+0x75/0xa0 [ 1241.957932] ? vfs_write+0x354/0xb10 [ 1241.958729] ? fput_many+0x2f/0x1a0 [ 1241.959503] ? ksys_write+0x1a9/0x260 [ 1241.960319] ? __ia32_sys_read+0xb0/0xb0 [ 1241.961195] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1241.962310] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1241.963409] do_syscall_64+0x33/0x40 [ 1241.964210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1241.965311] RIP: 0033:0x7faf61c84b19 [ 1241.966112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.970027] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1241.971649] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1241.973170] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1241.974679] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.976182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1241.977696] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:35:28 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:28 executing program 0: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000200)={0x4, 0x80, 0x1000, 0x8000}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) perf_event_open(&(0x7f0000001580)={0x2, 0x80, 0x20, 0x3f, 0x8, 0x7f, 0x0, 0xbaf, 0x8000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0xfeb3, 0x8000}, 0x4410, 0x2, 0xf3, 0x8, 0x0, 0x7, 0x1, 0x0, 0x263, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x50}, 0x800) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x9, 0xfe, 0x5, 0x0, 0x6, 0x41000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x40, 0x3, 0x3f, 0x4, 0xffffffffffff8000, 0x3f, 0x8000, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x10, r1, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9, 0xc4, 0x17, 0x1c, 0x0, 0x40, 0x40102, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe2, 0x0, @perf_config_ext={0x3d025d68, 0x7}, 0x10, 0xe6, 0x2, 0x5, 0x8, 0xffff, 0x0, 0x0, 0xffff, 0x0, 0xffffffff}, r2, 0xf, r3, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x600003, 0x0) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000001540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f0000000380)={0x94, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff7fff}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7fff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x900}, 0x8000) signalfd4(r4, &(0x7f00000001c0)={[0x3]}, 0x8, 0x40800) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:35:29 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd_index=0x8, 0x0, 0x8, 0x373, 0x6, 0x1}, 0x1) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:35:29 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2000, @fd_index=0x7, 0x7ff, 0x1ff, 0x7, 0x0, 0x0, {0x1}}, 0x3) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:35:46 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:46 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:46 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 14:35:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1a5002, 0x0) sendto$inet6(r2, &(0x7f0000000140)="20c53a94b21646f7fb95fb227f36a76968658ffc218c1e52ba6601c28d7c3ed8d48ed52d237b72de0d6439c75760997dc752eec680", 0x35, 0x50, &(0x7f0000000180)={0xa, 0x4e24, 0x7, @remote, 0x26a}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xd2}}, './file0\x00'}) read(r3, &(0x7f00000000c0)=""/126, 0x7e) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:35:46 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:46 executing program 4: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:35:46 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 14:35:46 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1259.279815] FAULT_INJECTION: forcing a failure. [ 1259.279815] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.282360] CPU: 0 PID: 7991 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1259.283860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.285698] Call Trace: [ 1259.286283] dump_stack+0x107/0x167 [ 1259.287084] should_fail.cold+0x5/0xa [ 1259.287922] ? io_setup_async_rw+0x180/0x580 [ 1259.288907] should_failslab+0x5/0x20 [ 1259.289745] __kmalloc+0x72/0x390 [ 1259.290511] ? lock_downgrade+0x6d0/0x6d0 [ 1259.291430] io_setup_async_rw+0x180/0x580 [ 1259.292363] io_read+0xe98/0x11e0 [ 1259.293159] ? kiocb_done+0xc90/0xc90 [ 1259.293996] ? mark_lock+0xf5/0x2df0 [ 1259.294824] ? lock_chain_count+0x20/0x20 [ 1259.295768] ? __lock_acquire+0xbb1/0x5b00 [ 1259.296703] io_issue_sqe+0x2e8a/0x77b0 [ 1259.297591] ? find_held_lock+0x2c/0x110 [ 1259.298488] ? perf_trace_lock+0xac/0x490 [ 1259.299402] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1259.300434] ? io_connect+0x610/0x610 [ 1259.301282] ? lock_acquire+0x197/0x470 [ 1259.302165] ? find_held_lock+0x2c/0x110 [ 1259.302668] FAULT_INJECTION: forcing a failure. [ 1259.302668] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.303058] ? __fget_files+0x2cf/0x520 [ 1259.303077] ? lock_downgrade+0x6d0/0x6d0 [ 1259.303104] __io_queue_sqe+0x90/0x9d0 [ 1259.308070] ? io_issue_sqe+0x77b0/0x77b0 [ 1259.308977] ? __fget_files+0x2f8/0x520 [ 1259.309850] ? io_prep_rw+0x7f5/0x1050 [ 1259.310703] io_submit_sqes+0x44aa/0x8610 [ 1259.311638] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1259.312727] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1259.313790] ? find_held_lock+0x2c/0x110 [ 1259.314679] ? io_submit_sqes+0x8610/0x8610 [ 1259.315634] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1259.316688] ? wait_for_completion_io+0x270/0x270 [ 1259.317750] ? rcu_read_lock_any_held+0x75/0xa0 [ 1259.318764] ? vfs_write+0x354/0xb10 [ 1259.319581] ? fput_many+0x2f/0x1a0 [ 1259.320379] ? ksys_write+0x1a9/0x260 [ 1259.321217] ? __ia32_sys_read+0xb0/0xb0 [ 1259.322105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.323244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1259.324370] do_syscall_64+0x33/0x40 [ 1259.325188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1259.326298] RIP: 0033:0x7faf61c84b19 [ 1259.327109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.331100] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1259.332738] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1259.334281] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1259.335815] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.337354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1259.338887] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1259.340452] CPU: 1 PID: 7990 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1259.341938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.343685] Call Trace: [ 1259.344252] dump_stack+0x107/0x167 [ 1259.345038] should_fail.cold+0x5/0xa [ 1259.345846] ? create_object.isra.0+0x3a/0xa20 [ 1259.346818] should_failslab+0x5/0x20 [ 1259.347622] kmem_cache_alloc+0x5b/0x310 [ 1259.348493] create_object.isra.0+0x3a/0xa20 [ 1259.349445] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1259.350524] __kmalloc+0x16e/0x390 [ 1259.351284] io_setup_async_rw+0x180/0x580 [ 1259.352181] io_read+0xe98/0x11e0 [ 1259.352943] ? kiocb_done+0xc90/0xc90 [ 1259.353746] ? mark_lock+0xf5/0x2df0 [ 1259.354546] ? lock_chain_count+0x20/0x20 [ 1259.355462] ? __lock_acquire+0xbb1/0x5b00 [ 1259.356367] io_issue_sqe+0x2e8a/0x77b0 [ 1259.357234] ? find_held_lock+0x2c/0x110 [ 1259.358097] ? perf_trace_lock+0xac/0x490 [ 1259.358983] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1259.359998] ? io_connect+0x610/0x610 [ 1259.360809] ? lock_acquire+0x197/0x470 [ 1259.361661] ? find_held_lock+0x2c/0x110 [ 1259.362531] ? __fget_files+0x2cf/0x520 [ 1259.363374] ? lock_downgrade+0x6d0/0x6d0 [ 1259.364255] __io_queue_sqe+0x90/0x9d0 [ 1259.365098] ? io_issue_sqe+0x77b0/0x77b0 [ 1259.365998] ? __fget_files+0x2f8/0x520 [ 1259.366864] ? io_prep_rw+0x7f5/0x1050 [ 1259.367716] io_submit_sqes+0x44aa/0x8610 [ 1259.368644] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1259.369722] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1259.370765] ? find_held_lock+0x2c/0x110 [ 1259.371647] ? io_submit_sqes+0x8610/0x8610 [ 1259.372586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1259.373645] ? wait_for_completion_io+0x270/0x270 [ 1259.374690] ? rcu_read_lock_any_held+0x75/0xa0 [ 1259.375689] ? vfs_write+0x354/0xb10 [ 1259.376496] ? fput_many+0x2f/0x1a0 [ 1259.377293] ? ksys_write+0x1a9/0x260 [ 1259.378123] ? __ia32_sys_read+0xb0/0xb0 [ 1259.379009] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.380145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1259.381275] do_syscall_64+0x33/0x40 [ 1259.382085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1259.383184] RIP: 0033:0x7f57e5b24b19 [ 1259.383985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.387962] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1259.389629] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1259.391177] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1259.392712] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.394259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1259.395800] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1259.408374] perf: interrupt took too long (9710 > 9702), lowering kernel.perf_event_max_sample_rate to 20000 14:35:46 executing program 4: creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000}, 0x602, 0x7f, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001400)=""/226) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/255) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) 14:36:02 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10000040, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(r0, 0x0, 0x599046, 0x100) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000100), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000000)=""/110, 0x6e}) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:02 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:02 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:02 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) write(r3, &(0x7f0000000340)='m', 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f00000003c0)="fee66d7a66c2c48ba1a85bc0d20c7befd05483c268c826fc8dfed85b301c3427799e9ac3f1a82ae1e7991a2a40bd8f7e6044dbc57f1d062f21f85e4e9ad6253c17e979", 0x43, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x5166, 0xb3ad, 0x3, &(0x7f0000000280)={[0x3a]}, 0x8) getsockopt(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2a73, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:02 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:02 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 14:36:02 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) [ 1275.181538] FAULT_INJECTION: forcing a failure. [ 1275.181538] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.183181] CPU: 0 PID: 8014 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1275.184153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1275.185261] Call Trace: [ 1275.185652] dump_stack+0x107/0x167 [ 1275.186169] should_fail.cold+0x5/0xa [ 1275.186721] ? __io_queue_sqe+0x666/0x9d0 [ 1275.187319] should_failslab+0x5/0x20 [ 1275.187861] kmem_cache_alloc_trace+0x55/0x320 [ 1275.188506] ? lock_downgrade+0x6d0/0x6d0 [ 1275.189106] __io_queue_sqe+0x666/0x9d0 [ 1275.189686] ? io_issue_sqe+0x77b0/0x77b0 [ 1275.190286] ? __fget_files+0x2f8/0x520 [ 1275.190851] ? io_prep_rw+0x7f5/0x1050 [ 1275.191407] io_submit_sqes+0x44aa/0x8610 [ 1275.192014] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1275.192719] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1275.193403] ? find_held_lock+0x2c/0x110 [ 1275.193997] ? io_submit_sqes+0x8610/0x8610 [ 1275.194618] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1275.195307] ? wait_for_completion_io+0x270/0x270 [ 1275.195960] ? rcu_read_lock_any_held+0x75/0xa0 [ 1275.196633] ? vfs_write+0x354/0xb10 [ 1275.197155] ? fput_many+0x2f/0x1a0 [ 1275.197674] ? ksys_write+0x1a9/0x260 [ 1275.198219] ? __ia32_sys_read+0xb0/0xb0 [ 1275.198802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1275.199544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1275.200271] do_syscall_64+0x33/0x40 [ 1275.200796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1275.201529] RIP: 0033:0x7f57e5b24b19 [ 1275.202027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1275.204628] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1275.205728] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1275.206725] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1275.207752] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1275.208759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1275.209787] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1275.216872] FAULT_INJECTION: forcing a failure. [ 1275.216872] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.219355] CPU: 1 PID: 8021 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1275.220790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1275.222543] Call Trace: [ 1275.223102] dump_stack+0x107/0x167 [ 1275.223879] should_fail.cold+0x5/0xa [ 1275.224682] ? create_object.isra.0+0x3a/0xa20 [ 1275.225656] should_failslab+0x5/0x20 [ 1275.226454] kmem_cache_alloc+0x5b/0x310 [ 1275.227311] create_object.isra.0+0x3a/0xa20 [ 1275.228229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1275.229296] __kmalloc+0x16e/0x390 [ 1275.230066] ? lock_downgrade+0x6d0/0x6d0 [ 1275.230949] io_setup_async_rw+0x180/0x580 [ 1275.231841] io_read+0xe98/0x11e0 [ 1275.232584] ? kiocb_done+0xc90/0xc90 [ 1275.233382] ? mark_lock+0xf5/0x2df0 [ 1275.234183] ? lock_chain_count+0x20/0x20 [ 1275.235090] ? __lock_acquire+0xbb1/0x5b00 [ 1275.235982] io_issue_sqe+0x2e8a/0x77b0 [ 1275.236820] ? find_held_lock+0x2c/0x110 [ 1275.237684] ? perf_trace_lock+0xac/0x490 [ 1275.238554] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1275.239556] ? io_connect+0x610/0x610 [ 1275.240362] ? lock_acquire+0x197/0x470 [ 1275.241201] ? find_held_lock+0x2c/0x110 [ 1275.242072] ? __fget_files+0x2cf/0x520 [ 1275.242904] ? lock_downgrade+0x6d0/0x6d0 [ 1275.243783] __io_queue_sqe+0x90/0x9d0 [ 1275.244601] ? io_issue_sqe+0x77b0/0x77b0 [ 1275.245477] ? __fget_files+0x2f8/0x520 [ 1275.246315] ? io_prep_rw+0x7f5/0x1050 [ 1275.247138] io_submit_sqes+0x44aa/0x8610 [ 1275.248045] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1275.249089] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1275.250120] ? find_held_lock+0x2c/0x110 [ 1275.250977] ? io_submit_sqes+0x8610/0x8610 [ 1275.251892] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1275.252905] ? wait_for_completion_io+0x270/0x270 [ 1275.253927] ? rcu_read_lock_any_held+0x75/0xa0 [ 1275.254898] ? vfs_write+0x354/0xb10 [ 1275.255682] ? fput_many+0x2f/0x1a0 [ 1275.256447] ? ksys_write+0x1a9/0x260 [ 1275.257246] ? __ia32_sys_read+0xb0/0xb0 [ 1275.258111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1275.259207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1275.260292] do_syscall_64+0x33/0x40 [ 1275.261072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1275.262157] RIP: 0033:0x7faf61c84b19 [ 1275.262944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1275.266815] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1275.268423] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1275.269927] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1275.271427] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1275.272936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1275.274451] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:36:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10840, 0x12) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x60, 0x8, 0x51, 0x5f, 0x0, 0x1d, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0xa1}, 0x100, 0x5, 0x4, 0x1, 0x1, 0x5, 0x40, 0x0, 0x5, 0x0, 0x1000}, 0x0, 0x4, r0, 0x8) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 14:36:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(r0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:02 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x52c, 0x8000) openat(r1, &(0x7f0000000100)='./file0\x00', 0x12a03, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) open_by_handle_at(r2, &(0x7f0000000140)=@reiserfs_4={0x10, 0x4, {0x4b, 0x3, 0xfffffffe, 0x1000}}, 0x101002) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:02 executing program 4: ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x7f}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x6, {{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc5b4}}, {{0xa, 0x4e20, 0x7, @mcast2, 0x2}}}, 0x108) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffff71f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="6f050a26bd4219ded73abf89b755760004144c845cb54d9b1640fc2ecf7787f0f8d17f8ee7093fe8b8f88c283a6abf3e7ef4b09ce06e753b13adc8fb7668be7f097154c0e6683981455c1ff2d321f4b2f2d802d3eadccd55164c191370ebc497fbfbceba3dde95d60ac2ef12c596d58f1bc47a5b4ba66e2c10644b9cd9da5645eed4fed6385d073f26118cd1f81be21e6ad42913efba922c827f087d229e57bcc2e8210296fd5a6f7180e41b9db2d45b90a229f64d5b2193f2f723c46307fe90788299bc317a28044a87c87294a1e0dca1c105", 0xd3}, {&(0x7f0000000400)="12ab456d6049c3adfcf0cb0af4bfbc5736ab500112cc6675f544768c0df0aba2efa4efcc4e65d0766452f60f8713584416ccf144013ba20a94f3d8c8baa839d94723bb94abea242a0418f9e9897dfb2999681a5c6f76b6c9ae3760af86f47ff305eb2ca52d922ce373c62fb9fea944c6850d439f722b4968e5e40194ac413cd30a3c5133eb05bfa71e8be5e73355be0f57aed73533aae38f87b8c6bcae5a729f1d8a10f357", 0xa5}], 0x2}, 0x4008091) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) 14:36:02 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) [ 1275.700513] FAULT_INJECTION: forcing a failure. [ 1275.700513] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.701989] CPU: 0 PID: 8045 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1275.702779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1275.703734] Call Trace: [ 1275.704042] dump_stack+0x107/0x167 [ 1275.704460] should_fail.cold+0x5/0xa [ 1275.704899] ? create_object.isra.0+0x3a/0xa20 [ 1275.705433] should_failslab+0x5/0x20 [ 1275.705884] kmem_cache_alloc+0x5b/0x310 [ 1275.706358] create_object.isra.0+0x3a/0xa20 [ 1275.706861] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1275.707446] kmem_cache_alloc_trace+0x151/0x320 [ 1275.707979] ? lock_downgrade+0x6d0/0x6d0 [ 1275.708457] __io_queue_sqe+0x666/0x9d0 [ 1275.708918] ? io_issue_sqe+0x77b0/0x77b0 [ 1275.709391] ? __fget_files+0x2f8/0x520 [ 1275.709866] ? io_prep_rw+0x7f5/0x1050 [ 1275.710324] io_submit_sqes+0x44aa/0x8610 [ 1275.710820] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1275.711390] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1275.711944] ? find_held_lock+0x2c/0x110 [ 1275.712411] ? io_submit_sqes+0x8610/0x8610 [ 1275.712915] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1275.713479] ? wait_for_completion_io+0x270/0x270 [ 1275.714037] ? rcu_read_lock_any_held+0x75/0xa0 [ 1275.714569] ? vfs_write+0x354/0xb10 [ 1275.714997] ? fput_many+0x2f/0x1a0 [ 1275.715414] ? ksys_write+0x1a9/0x260 [ 1275.715851] ? __ia32_sys_read+0xb0/0xb0 [ 1275.716319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1275.716934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1275.717539] do_syscall_64+0x33/0x40 [ 1275.717968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1275.718558] RIP: 0033:0x7faf61c84b19 [ 1275.718984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1275.721077] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1275.721954] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1275.722774] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1275.723591] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1275.724405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1275.725218] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:36:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000640)='net/hci\x00') fcntl$setown(r0, 0x8, r2) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f0000000640)='net/hci\x00') sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1f4, 0x1c, 0x2, 0x70bd27, 0x25dfdbfb, {0xc}, [@generic="b9599699134cd9d57732cb5c5661c86cb3c49d4ae19b64c246c1e4765d0319a269556a74b465de8b5ed068c34e7c083865c6e4ebf2493085b532a9acd1ba8e9af384ea0d52fcf23bfa931455896cc784d8a9cd83f83f1f70f9683521f096eeea9eb33e30e4ba29519a555d1844b6f9f0fc2c9148a2f863a3ff7a6b94ffbfa5507164a055d88cdbee0d2fd59ba9914e08c99ebb0bb04246b97d0ef05f06410c044db4c1e72a0304ca40bb9e38f8614734873fa746c64bd47dad80781bc1246332d8dbbe680a32b0c3efcf13f6e2010bab0f84d43efb60967023d33d02aa1aa531b3645ba6", @generic="02173ab8b3312eaae5035b81af9edbb1ee23adcb2bf6164bccb604b1ff10d4fd0f93c16c26e52a3bfa395e00d0e0f12bc6e17f7789e0a91af2c627e3cbcf795a15be90c28dbd67a6b7ed2326a89f6dcc1cecc8d31dd44d526e2b733a2709309eab9dec4d0b7d0dfb714c29b519b25f9fac9ac9de9e58ce40bb18e728de5d881199b3a6efe2a6f7b6ad1779128483db5f52c5d3ddb0aa5857dcc9c39bd80ac75f36ceef710a26eb3e07a9da21071844351e0cf63bc003a7dbe0dafcd9803feae66caa15dbaf838b7e77deed9a3557310bd680bf21cd577cab89c477db6851d63a220ed928deca2c7e8879710da5fc6725599e", @typed={0x8, 0x34, 0x0, 0x0, @pid=r3}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x24048005}, 0x4000800) fallocate(r1, 0x3, 0xebaa, 0x8000) 14:36:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x81, 0x650, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/171, 0xab}, {&(0x7f0000000180)=""/236, 0xec}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000001500)=""/217, 0xd9}, {&(0x7f0000001600)=""/155, 0x9b}], 0x5) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000640)='net/hci\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) clone3(&(0x7f0000002840)={0x200100, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000016c0), {0x6}, &(0x7f0000001700)=""/4096, 0x1000, &(0x7f0000002700)=""/238, &(0x7f0000002800)=[0x0, 0xffffffffffffffff, r2], 0x3, {r3}}, 0x58) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000028c0), 0x40000, 0x0) readv(r4, 0xfffffffffffffffd, 0x0) [ 1275.848391] kauditd_printk_skb: 8 callbacks suppressed [ 1275.848402] audit: type=1400 audit(1735914962.769:243): avc: denied { tracepoint } for pid=8047 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:36:17 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 14:36:17 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:17 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000009000000bc1bfe58000000000600000000000000555a000000000000f40500000000000000000000deff0000000000000000000000000000000000005d0c0000000000000600800000000000050000000000000001000000000000007f00"/384]) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:17 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 14:36:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x81, 0x650, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/171, 0xab}, {&(0x7f0000000180)=""/236, 0xec}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000001500)=""/217, 0xd9}, {&(0x7f0000001600)=""/155, 0x9b}], 0x5) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000640)='net/hci\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) clone3(&(0x7f0000002840)={0x200100, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000016c0), {0x6}, &(0x7f0000001700)=""/4096, 0x1000, &(0x7f0000002700)=""/238, &(0x7f0000002800)=[0x0, 0xffffffffffffffff, r2], 0x3, {r3}}, 0x58) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000028c0), 0x40000, 0x0) readv(r4, 0xfffffffffffffffd, 0x0) 14:36:17 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:17 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1290.915025] FAULT_INJECTION: forcing a failure. [ 1290.915025] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.916202] FAULT_INJECTION: forcing a failure. [ 1290.916202] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.917568] CPU: 1 PID: 8071 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1290.920761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1290.922508] Call Trace: [ 1290.923067] dump_stack+0x107/0x167 [ 1290.923834] should_fail.cold+0x5/0xa [ 1290.924638] ? create_object.isra.0+0x3a/0xa20 [ 1290.925623] should_failslab+0x5/0x20 [ 1290.926440] kmem_cache_alloc+0x5b/0x310 [ 1290.927299] create_object.isra.0+0x3a/0xa20 [ 1290.928219] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1290.929293] kmem_cache_alloc_trace+0x151/0x320 [ 1290.930278] ? lock_downgrade+0x6d0/0x6d0 [ 1290.931155] __io_queue_sqe+0x666/0x9d0 [ 1290.931999] ? io_issue_sqe+0x77b0/0x77b0 [ 1290.932874] ? __fget_files+0x2f8/0x520 [ 1290.933716] ? io_prep_rw+0x7f5/0x1050 [ 1290.934554] io_submit_sqes+0x44aa/0x8610 [ 1290.935460] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.936503] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.937516] ? find_held_lock+0x2c/0x110 [ 1290.938384] ? io_submit_sqes+0x8610/0x8610 [ 1290.939304] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1290.940322] ? wait_for_completion_io+0x270/0x270 [ 1290.941337] ? rcu_read_lock_any_held+0x75/0xa0 [ 1290.942324] ? vfs_write+0x354/0xb10 [ 1290.943108] ? fput_many+0x2f/0x1a0 [ 1290.943877] ? ksys_write+0x1a9/0x260 [ 1290.944676] ? __ia32_sys_read+0xb0/0xb0 [ 1290.945535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1290.946647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1290.947729] do_syscall_64+0x33/0x40 [ 1290.948509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1290.949582] RIP: 0033:0x7f57e5b24b19 [ 1290.950369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1290.954225] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1290.955822] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1290.957317] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1290.958823] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1290.960316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1290.961810] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1290.963342] CPU: 0 PID: 8068 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1290.964456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1290.965783] Call Trace: [ 1290.966216] dump_stack+0x107/0x167 [ 1290.966804] should_fail.cold+0x5/0xa [ 1290.967418] ? create_object.isra.0+0x3a/0xa20 [ 1290.968165] should_failslab+0x5/0x20 [ 1290.968767] kmem_cache_alloc+0x5b/0x310 [ 1290.969425] create_object.isra.0+0x3a/0xa20 [ 1290.970135] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1290.970961] kmem_cache_alloc_trace+0x151/0x320 [ 1290.971710] ? lock_downgrade+0x6d0/0x6d0 [ 1290.972393] __io_queue_sqe+0x666/0x9d0 [ 1290.973039] ? io_issue_sqe+0x77b0/0x77b0 [ 1290.973689] ? __fget_files+0x2f8/0x520 [ 1290.974342] ? io_prep_rw+0x7f5/0x1050 [ 1290.974966] io_submit_sqes+0x44aa/0x8610 [ 1290.975654] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.976456] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.977230] ? find_held_lock+0x2c/0x110 [ 1290.977887] ? io_submit_sqes+0x8610/0x8610 [ 1290.978598] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1290.979378] ? wait_for_completion_io+0x270/0x270 [ 1290.980155] ? rcu_read_lock_any_held+0x75/0xa0 [ 1290.980899] ? vfs_write+0x354/0xb10 [ 1290.981503] ? fput_many+0x2f/0x1a0 [ 1290.982094] ? ksys_write+0x1a9/0x260 [ 1290.982709] ? __ia32_sys_read+0xb0/0xb0 [ 1290.983358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1290.984195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1290.985015] do_syscall_64+0x33/0x40 [ 1290.985599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1290.986433] RIP: 0033:0x7faf61c84b19 [ 1290.987027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1290.989947] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1290.991167] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1290.992278] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1290.993407] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1290.994536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1290.995678] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:36:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x81, 0x650, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/171, 0xab}, {&(0x7f0000000180)=""/236, 0xec}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000001500)=""/217, 0xd9}, {&(0x7f0000001600)=""/155, 0x9b}], 0x5) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000640)='net/hci\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) clone3(&(0x7f0000002840)={0x200100, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000016c0), {0x6}, &(0x7f0000001700)=""/4096, 0x1000, &(0x7f0000002700)=""/238, &(0x7f0000002800)=[0x0, 0xffffffffffffffff, r2], 0x3, {r3}}, 0x58) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000028c0), 0x40000, 0x0) readv(r4, 0xfffffffffffffffd, 0x0) 14:36:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x4400, 0x19) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4091, 0xffb}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 14:36:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x81, 0x650, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/171, 0xab}, {&(0x7f0000000180)=""/236, 0xec}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000001500)=""/217, 0xd9}, {&(0x7f0000001600)=""/155, 0x9b}], 0x5) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000640)='net/hci\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) clone3(&(0x7f0000002840)={0x200100, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000016c0), {0x6}, &(0x7f0000001700)=""/4096, 0x1000, &(0x7f0000002700)=""/238, &(0x7f0000002800)=[0x0, 0xffffffffffffffff, r2], 0x3, {r3}}, 0x58) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000028c0), 0x40000, 0x0) readv(r4, 0xfffffffffffffffd, 0x0) 14:36:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:18 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 14:36:18 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) [ 1291.407724] FAULT_INJECTION: forcing a failure. [ 1291.407724] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.409257] CPU: 0 PID: 8090 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1291.410141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1291.411206] Call Trace: [ 1291.411550] dump_stack+0x107/0x167 [ 1291.412016] should_fail.cold+0x5/0xa [ 1291.412509] ? io_setup_async_rw+0x180/0x580 [ 1291.413072] should_failslab+0x5/0x20 [ 1291.413556] __kmalloc+0x72/0x390 [ 1291.413996] ? lock_downgrade+0x6d0/0x6d0 [ 1291.414543] io_setup_async_rw+0x180/0x580 [ 1291.415089] io_read+0xe98/0x11e0 [ 1291.415559] ? kiocb_done+0xc90/0xc90 [ 1291.416047] ? mark_lock+0xf5/0x2df0 [ 1291.416531] ? lock_chain_count+0x20/0x20 [ 1291.417088] ? __lock_acquire+0xbb1/0x5b00 [ 1291.417649] io_issue_sqe+0x2e8a/0x77b0 [ 1291.418172] ? find_held_lock+0x2c/0x110 [ 1291.418692] ? perf_trace_lock+0xac/0x490 [ 1291.419217] ? SOFTIRQ_verbose+0x10/0x10 [ 1291.419730] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1291.420342] ? io_connect+0x610/0x610 [ 1291.420829] ? lock_acquire+0x197/0x470 [ 1291.421334] ? find_held_lock+0x2c/0x110 [ 1291.421855] ? __fget_files+0x2cf/0x520 [ 1291.422367] ? lock_downgrade+0x6d0/0x6d0 [ 1291.422898] __io_queue_sqe+0x90/0x9d0 [ 1291.423399] ? io_issue_sqe+0x77b0/0x77b0 [ 1291.423924] ? __fget_files+0x2f8/0x520 [ 1291.424449] ? io_prep_rw+0x7f5/0x1050 [ 1291.424949] io_submit_sqes+0x44aa/0x8610 [ 1291.425504] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1291.426139] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1291.426757] ? find_held_lock+0x2c/0x110 [ 1291.427275] ? io_submit_sqes+0x8610/0x8610 [ 1291.427830] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1291.428449] ? wait_for_completion_io+0x270/0x270 [ 1291.429062] ? rcu_read_lock_any_held+0x75/0xa0 [ 1291.429651] ? vfs_write+0x354/0xb10 [ 1291.430129] ? fput_many+0x2f/0x1a0 [ 1291.430593] ? ksys_write+0x1a9/0x260 [ 1291.431077] ? __ia32_sys_read+0xb0/0xb0 [ 1291.431601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1291.432271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1291.432929] do_syscall_64+0x33/0x40 [ 1291.433403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1291.434058] RIP: 0033:0x7f57e5b24b19 [ 1291.434527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1291.436846] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1291.437809] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1291.438707] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1291.439610] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1291.440510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1291.441406] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1291.449668] FAULT_INJECTION: forcing a failure. [ 1291.449668] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.451128] CPU: 0 PID: 8091 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1291.451984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1291.453009] Call Trace: [ 1291.453335] dump_stack+0x107/0x167 [ 1291.453785] should_fail.cold+0x5/0xa [ 1291.454270] ? io_setup_async_rw+0x180/0x580 [ 1291.454820] should_failslab+0x5/0x20 [ 1291.455299] __kmalloc+0x72/0x390 [ 1291.455736] ? lock_downgrade+0x6d0/0x6d0 [ 1291.456267] io_setup_async_rw+0x180/0x580 [ 1291.456797] io_read+0xe98/0x11e0 [ 1291.457246] ? kiocb_done+0xc90/0xc90 [ 1291.457716] ? mark_lock+0xf5/0x2df0 [ 1291.458191] ? lock_chain_count+0x20/0x20 [ 1291.458727] ? __lock_acquire+0xbb1/0x5b00 [ 1291.459262] io_issue_sqe+0x2e8a/0x77b0 [ 1291.459756] ? find_held_lock+0x2c/0x110 [ 1291.460270] ? perf_trace_lock+0xac/0x490 [ 1291.460780] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1291.461380] ? io_connect+0x610/0x610 [ 1291.461859] ? lock_acquire+0x197/0x470 [ 1291.462364] ? find_held_lock+0x2c/0x110 [ 1291.462874] ? __fget_files+0x2cf/0x520 [ 1291.463372] ? lock_downgrade+0x6d0/0x6d0 [ 1291.463892] __io_queue_sqe+0x90/0x9d0 [ 1291.464384] ? io_issue_sqe+0x77b0/0x77b0 [ 1291.464904] ? __fget_files+0x2f8/0x520 [ 1291.465415] ? io_prep_rw+0x7f5/0x1050 [ 1291.465897] io_submit_sqes+0x44aa/0x8610 [ 1291.466492] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1291.467223] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1291.467933] ? find_held_lock+0x2c/0x110 [ 1291.468446] ? io_submit_sqes+0x8610/0x8610 [ 1291.468985] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1291.469582] ? wait_for_completion_io+0x270/0x270 [ 1291.470186] ? rcu_read_lock_any_held+0x75/0xa0 [ 1291.470764] ? vfs_write+0x354/0xb10 [ 1291.471230] ? fput_many+0x2f/0x1a0 [ 1291.471684] ? ksys_write+0x1a9/0x260 [ 1291.472156] ? __ia32_sys_read+0xb0/0xb0 [ 1291.472667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1291.473317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1291.473969] do_syscall_64+0x33/0x40 [ 1291.474435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1291.475064] RIP: 0033:0x7faf61c84b19 [ 1291.475529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1291.477801] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1291.478742] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1291.479622] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1291.480500] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1291.481372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1291.482257] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:36:18 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:18 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5000005, 0x30, r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r2, 0x8000000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fcntl$dupfd(r4, 0x0, r3) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) 14:36:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="2e2f3dc9eda93000"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRES16]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) openat(r6, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) fsetxattr$security_selinux(r5, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:file_context_t:s0\x00', 0x24, 0x3) r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x4, 0x100) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x208, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3, 0x1, 0x2, 0x3f, 0x0, 0x1, 0x202, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffeff, 0xbc7}, 0xc000, 0x5, 0x1ff, 0x2, 0x554, 0x8, 0x9, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x2, r7, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x8, 'batadv_slave_1\x00', {'batadv_slave_0\x00'}, 0x7fd}) 14:36:32 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:32 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:32 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa0003, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000002880)=""/4089, 0xff9}], 0x1) r5 = open(&(0x7f00000015c0)='./file0\x00', 0x8000, 0x100) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000002700)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) io_submit(0x0, 0x7, &(0x7f0000002840)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0xa0316326b74a83cd, 0x7fff, r2, &(0x7f0000000100)="862aa4a6c03d95e0df99ba62aadc13e38e540adbb467b66fddd334fe0051c3a59e04be41d996b89d3bec1f59c6a5c2de8bf5995d4c4386d00ab94e8f1d410499ec097097f150c40b603690d1cff041f31d85162ac4ac7f51d0576b4ef5fa80e5d456929fc35d9cba1b69c858fe968270e63bd7307c6bf856db5b6f432deb5c46380419427ef42ce31551480282f1b5beb0166355faadc57e3a9afabfc260e5f4d40b34764c1e183f7c98056dfc4b805adb82acbb354f77ea7de3e714ed1922c91d", 0xc1, 0x101, 0x0, 0x2, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x3, r3, &(0x7f00000002c0), 0x0, 0x4c, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x1f, r1, &(0x7f0000000340)="c565662cc629486a86439fdb18ae3128b52d4048cc9ad9a9afbd6622b3d77aa26556b56a5894cfe7a2aa63b82b11d42d2b54044ba7fadbed995a0356de631cca675be99e92f8b9eb354135e5940178f911a4d97b38877ec68fc983088cfe2d79c8e429f18969ec47b849118972cfd1d909d87a3b597f0282755a03881a3989de21af769776a6623e655015af67c5ff425b87d84c1b491251174b000bc7cde60052ce58dcad69", 0xa6, 0x4f551ba0, 0x0, 0x3, r1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x8, r4, &(0x7f0000001500)="769097d2858d0827ccf99b087f9a91f8cf45822661bad7db4a764eeefdb95804184b19adcc37f0930fefa28041c6698e2a7e0de665f535a6cbc94743244a7bf2f5377812c6e40e5bda281e0513eddb8a169ba5229de86c78d09f79fb25c97a385df2a29d7216a9586ad9dce563f473740dbb1971c9a43037e6722744c0759e0745f735185f74747506057f2a16", 0x8d, 0x4, 0x0, 0x1, r5}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x52b926cb681701d8, 0x7, r0, &(0x7f0000001640)="7f9392bf11cf3fc4ce49b725ab9c8d12d4e02935db492f27c26bb64fad04c5ccb4bf05d7fd7714fd3022b45126cbef4dbc74f85c0366418344483d1b8cb10f57cb", 0x41, 0x2, 0x0, 0x3}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x3, 0x3, r6, &(0x7f0000001700)="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", 0x1000, 0x6, 0x0, 0x2, r7}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x7, 0x800, 0xffffffffffffffff, &(0x7f0000002780)="eab6bb7189e11f5f6cd87ec18b77496911f5bd08517d09b851bcbc6c38ca9696e82738316b2c9d407551e086c3e15b3197b657f218e0b4a3f43cb0f2f3319764a3f195b5662ff66a018da4c913d70769410496cd30b4c7088757b110987ecd2ca6e950b6d19a", 0x66, 0x10001, 0x0, 0x3, r2}]) readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r8 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x802, 0x2) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r2, r8, 0x61}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r9, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:32 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:32 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 14:36:32 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:32 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) [ 1305.422467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1305.430322] FAULT_INJECTION: forcing a failure. [ 1305.430322] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.432852] CPU: 1 PID: 8115 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1305.434342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.436167] Call Trace: [ 1305.436744] dump_stack+0x107/0x167 [ 1305.437539] should_fail.cold+0x5/0xa [ 1305.438376] ? create_object.isra.0+0x3a/0xa20 [ 1305.439384] should_failslab+0x5/0x20 [ 1305.440214] kmem_cache_alloc+0x5b/0x310 [ 1305.441115] create_object.isra.0+0x3a/0xa20 [ 1305.442085] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1305.443219] __kmalloc+0x16e/0x390 [ 1305.443999] ? lock_downgrade+0x6d0/0x6d0 [ 1305.444918] io_setup_async_rw+0x180/0x580 [ 1305.445853] io_read+0xe98/0x11e0 [ 1305.446640] ? kiocb_done+0xc90/0xc90 [ 1305.447474] ? mark_lock+0xf5/0x2df0 [ 1305.448300] ? lock_chain_count+0x20/0x20 [ 1305.449248] ? __lock_acquire+0xbb1/0x5b00 [ 1305.450179] io_issue_sqe+0x2e8a/0x77b0 [ 1305.451057] ? find_held_lock+0x2c/0x110 [ 1305.451949] ? perf_trace_lock+0xac/0x490 [ 1305.452858] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1305.453897] ? io_connect+0x610/0x610 [ 1305.454748] ? lock_acquire+0x197/0x470 [ 1305.455620] ? find_held_lock+0x2c/0x110 [ 1305.456517] ? __fget_files+0x2cf/0x520 [ 1305.457388] ? lock_downgrade+0x6d0/0x6d0 [ 1305.458303] __io_queue_sqe+0x90/0x9d0 [ 1305.459175] ? io_issue_sqe+0x77b0/0x77b0 [ 1305.460080] ? __fget_files+0x2f8/0x520 [ 1305.460954] ? io_prep_rw+0x7f5/0x1050 [ 1305.461816] io_submit_sqes+0x44aa/0x8610 [ 1305.462762] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1305.463853] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1305.464914] ? find_held_lock+0x2c/0x110 [ 1305.465804] ? io_submit_sqes+0x8610/0x8610 [ 1305.466776] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1305.467837] ? wait_for_completion_io+0x270/0x270 [ 1305.468893] ? rcu_read_lock_any_held+0x75/0xa0 [ 1305.469906] ? vfs_write+0x354/0xb10 [ 1305.470733] ? fput_many+0x2f/0x1a0 [ 1305.471522] ? ksys_write+0x1a9/0x260 [ 1305.472364] ? __ia32_sys_read+0xb0/0xb0 [ 1305.473262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.474410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.475545] do_syscall_64+0x33/0x40 [ 1305.476360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.477477] RIP: 0033:0x7f57e5b24b19 [ 1305.477628] audit: type=1400 audit(1735914992.398:244): avc: denied { relabelto } for pid=8114 comm="syz-executor.4" name="NETLINK" dev="sockfs" ino=30910 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=netlink_generic_socket permissive=1 [ 1305.478286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.478298] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1305.482687] FAULT_INJECTION: forcing a failure. [ 1305.482687] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.485747] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1305.485759] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1305.485771] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.485787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1305.495359] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1305.496940] CPU: 0 PID: 8123 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1305.497879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.499013] Call Trace: [ 1305.499369] dump_stack+0x107/0x167 [ 1305.499864] should_fail.cold+0x5/0xa [ 1305.500382] ? create_object.isra.0+0x3a/0xa20 [ 1305.501004] should_failslab+0x5/0x20 [ 1305.501527] kmem_cache_alloc+0x5b/0x310 [ 1305.502077] ? mark_held_locks+0x9e/0xe0 [ 1305.502631] create_object.isra.0+0x3a/0xa20 [ 1305.503222] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1305.503913] kmem_cache_alloc_bulk+0x168/0x320 [ 1305.504537] io_submit_sqes+0x6fe6/0x8610 [ 1305.505105] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1305.505779] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1305.506457] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1305.507110] ? find_held_lock+0x2c/0x110 [ 1305.507658] ? io_submit_sqes+0x8610/0x8610 [ 1305.508242] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1305.508891] ? wait_for_completion_io+0x270/0x270 [ 1305.509556] ? rcu_read_lock_any_held+0x75/0xa0 [ 1305.510178] ? vfs_write+0x354/0xb10 [ 1305.510683] ? fput_many+0x2f/0x1a0 [ 1305.511172] ? ksys_write+0x1a9/0x260 [ 1305.511686] ? __ia32_sys_read+0xb0/0xb0 [ 1305.512238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.512944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.513636] do_syscall_64+0x33/0x40 [ 1305.514134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.514828] RIP: 0033:0x7faf61c84b19 [ 1305.515326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.517794] RSP: 002b:00007faf5f1d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1305.518829] RAX: ffffffffffffffda RBX: 00007faf61d98020 RCX: 00007faf61c84b19 [ 1305.519769] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1305.520729] RBP: 00007faf5f1d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.521686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1305.522633] R13: 00007ffe9c062b8f R14: 00007faf5f1d9300 R15: 0000000000022000 14:36:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x9, &(0x7f0000002dc0)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESOCT=r1, @ANYBLOB="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"], 0x148}}, 0x4c804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup2(r2, r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, r1, 0x0) fork() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'sit0\x00'}) r5 = fork() ptrace(0x10, r5) ptrace$cont(0x1f, r5, 0x68c, 0x0) 14:36:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) fcntl$addseals(r1, 0x409, 0x6) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000100)=@v3={0x3000000, [{0x2, 0x4}, {0x81, 0x8001}], r2}, 0x18, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = timerfd_create(0x9, 0x80800) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fcntl$dupfd(r3, 0x406, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:32 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) [ 1305.799630] FAULT_INJECTION: forcing a failure. [ 1305.799630] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.801134] CPU: 0 PID: 8135 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1305.801992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.803014] Call Trace: [ 1305.803350] dump_stack+0x107/0x167 [ 1305.803810] should_fail.cold+0x5/0xa [ 1305.804289] ? __io_queue_sqe+0x666/0x9d0 [ 1305.804814] should_failslab+0x5/0x20 [ 1305.805292] kmem_cache_alloc_trace+0x55/0x320 [ 1305.805866] ? lock_downgrade+0x6d0/0x6d0 [ 1305.806396] __io_queue_sqe+0x666/0x9d0 [ 1305.806907] ? io_issue_sqe+0x77b0/0x77b0 [ 1305.807424] ? __fget_files+0x2f8/0x520 [ 1305.807933] ? io_prep_rw+0x7f5/0x1050 [ 1305.808426] io_submit_sqes+0x44aa/0x8610 [ 1305.808962] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1305.809599] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1305.810216] ? find_held_lock+0x2c/0x110 [ 1305.810737] ? io_submit_sqes+0x8610/0x8610 [ 1305.811290] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1305.811902] ? wait_for_completion_io+0x270/0x270 [ 1305.812495] ? rcu_read_lock_any_held+0x75/0xa0 [ 1305.813079] ? vfs_write+0x354/0xb10 [ 1305.813545] ? fput_many+0x2f/0x1a0 [ 1305.814006] ? ksys_write+0x1a9/0x260 [ 1305.814487] ? __ia32_sys_read+0xb0/0xb0 [ 1305.815005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.815666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.816322] do_syscall_64+0x33/0x40 [ 1305.816790] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.817447] RIP: 0033:0x7faf61c84b19 [ 1305.817904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.820226] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1305.821160] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1305.822060] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1305.822954] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.823870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1305.824774] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:36:32 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x81fcf07b1d159a7b, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x2a, 0x4, 0x0, 0x0, 0x0, 0x808c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x24e042, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r3, 0x9, 0x400, 0x200}) openat(r4, 0x0, 0x10000, 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r7, 0x401, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x46}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4055) 14:36:52 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5327, &(0x7f0000000440)=@disckey={0x2, 0x0, "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"}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x2, '\x00', @d}) write$hidraw(r1, &(0x7f0000000240), 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x12, 0x1, @tid=r2}, &(0x7f0000000340)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="14fffbffffffffffff000000fdffffff110000001157ca15f306c76e877649e51413ddbed6ad4bc02ca64aa2e43ec660beac3cc2661e5a184effef089e781fe75dc2cd7bea55af6faa9a01bdfa544b047fcfc753e54996fbe6ec6ed63e2bf42bc0e2ae6a2e35015fc4484d046c78f640e815d1289ab53c22dde60f55b4c200109129a4d7c7df00020000000000004248a3cfba438086d356646591de0c3c479bfd41dd3d0a979b600f10a8760e261a44c496e0879aff2db9eacfdc22c7745035b50d2aca6f253afea3461ea03616d35afa2c38fec08174aaca98"], 0x44}}, 0x840) read(r4, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r3, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:36:52 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 14:36:52 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 14:36:52 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1325.376038] FAULT_INJECTION: forcing a failure. [ 1325.376038] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.379409] CPU: 0 PID: 8160 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1325.380965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1325.382843] Call Trace: [ 1325.383466] dump_stack+0x107/0x167 [ 1325.384301] should_fail.cold+0x5/0xa [ 1325.385169] ? __io_queue_sqe+0x666/0x9d0 [ 1325.386112] should_failslab+0x5/0x20 [ 1325.386978] kmem_cache_alloc_trace+0x55/0x320 [ 1325.388034] ? lock_downgrade+0x6d0/0x6d0 [ 1325.388983] __io_queue_sqe+0x666/0x9d0 [ 1325.389945] ? io_issue_sqe+0x77b0/0x77b0 [ 1325.391012] ? __fget_files+0x2f8/0x520 [ 1325.392128] ? io_prep_rw+0x7f5/0x1050 [ 1325.393106] io_submit_sqes+0x44aa/0x8610 [ 1325.394168] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1325.395432] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1325.396642] ? find_held_lock+0x2c/0x110 [ 1325.397628] ? io_submit_sqes+0x8610/0x8610 [ 1325.398685] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1325.399873] ? wait_for_completion_io+0x270/0x270 [ 1325.401060] ? rcu_read_lock_any_held+0x75/0xa0 [ 1325.401575] FAULT_INJECTION: forcing a failure. [ 1325.401575] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.402130] ? vfs_write+0x354/0xb10 [ 1325.402152] ? fput_many+0x2f/0x1a0 [ 1325.402182] ? ksys_write+0x1a9/0x260 [ 1325.407289] ? __ia32_sys_read+0xb0/0xb0 [ 1325.408188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1325.409379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1325.410550] do_syscall_64+0x33/0x40 [ 1325.411395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1325.412539] RIP: 0033:0x7f57e5b24b19 [ 1325.413370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.417463] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1325.419164] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1325.420774] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1325.422371] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.423976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1325.425565] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1325.427194] CPU: 1 PID: 8164 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1325.428663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1325.430403] Call Trace: [ 1325.430960] dump_stack+0x107/0x167 [ 1325.431727] should_fail.cold+0x5/0xa [ 1325.432551] ? create_object.isra.0+0x3a/0xa20 [ 1325.433532] should_failslab+0x5/0x20 [ 1325.434328] kmem_cache_alloc+0x5b/0x310 [ 1325.435204] create_object.isra.0+0x3a/0xa20 [ 1325.436130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1325.437205] kmem_cache_alloc_trace+0x151/0x320 [ 1325.438187] ? lock_downgrade+0x6d0/0x6d0 [ 1325.439058] __io_queue_sqe+0x666/0x9d0 [ 1325.439903] ? io_issue_sqe+0x77b0/0x77b0 [ 1325.440769] ? __fget_files+0x2f8/0x520 [ 1325.441610] ? io_prep_rw+0x7f5/0x1050 [ 1325.442437] io_submit_sqes+0x44aa/0x8610 [ 1325.443360] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1325.444401] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1325.445404] ? find_held_lock+0x2c/0x110 [ 1325.446266] ? io_submit_sqes+0x8610/0x8610 [ 1325.447176] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1325.448191] ? wait_for_completion_io+0x270/0x270 [ 1325.449207] ? rcu_read_lock_any_held+0x75/0xa0 [ 1325.450186] ? vfs_write+0x354/0xb10 [ 1325.450973] ? fput_many+0x2f/0x1a0 [ 1325.451757] ? ksys_write+0x1a9/0x260 [ 1325.452566] ? __ia32_sys_read+0xb0/0xb0 [ 1325.453440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1325.454549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1325.455659] do_syscall_64+0x33/0x40 [ 1325.456446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1325.457526] RIP: 0033:0x7faf61c84b19 [ 1325.458316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.462213] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1325.463829] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1325.465347] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1325.466851] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.468374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1325.469886] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:36:52 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 4: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = epoll_create(0x6) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 14:36:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x1e, 0x300, 0x70bd26, 0x25dfdbfe, {0x5}, [@typed={0x5d, 0x11, 0x0, 0x0, @binary="ba10a1ba1f11f6729765f059c45b60a96c2184c4ddfcf7c07e32f271aacdd39e9648e3ae6f08eefcd562b25c915f377588dd4c6ba664e28798db556bfad3a268b8dde3df8d8504fbe33c5bf83947c56b016d8f1c0c24e3c5e3"}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x200, &(0x7f00000000c0)={[0x6]}, 0x8) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:52 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x6, &(0x7f0000002700)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000340)="2d30aa86637707e9fa767b6c1745c05e9a559deed8ec58add54d857a0e033e081224ea1c45fdcb37a82e7d5d3f19a240a299e5e249f172f6e47baa8c827be9f70b5e1d1062b2166f156b00e3c96175660ac84439a68b9392260e4013bff5f0aad180fa90ad91657b4fae372f886835e9c75bd31a44d1efb59d2bdd8e4a88a45340427ee14f715d7fe384699c7269913c40d7b78f9b0c8d1f009cf2ca53de0cb0cc3656ed10b23e4215f690642e73307b1c0c753e9a33c48ca97ec5dfd6b7085e41aed7ab1ad46278d3f7e40af9ba99f6d376f2eb7a9b33de914d2a754ff61086a2a9278f0cd00d216a0c30e48e19", 0xee}, {&(0x7f0000002540)="c7d154b07b3b505a49555216ad2e286cdb98942e1e24a6a7f6be6b2524c234ebc5dfc59e5a75e89db29109eed5fa5d25742297d0443731ecb0e37427a528ae8fff01300f8d7f0b057c5f89cdab02ed7e8e903c72ad5f46dae1306e5c9dee8cf9537b17385fc20548088e394c71c94340b0549e127913c7dc5a1df3befb2425ff593f3213e7ff435560f0e01bcd21be98f88cc68e9e88f6d256520bc449af01ba19917f76c1b2a5f3e58f7207f28b442e75b2b563b880f2c80146fe8d52d81ffb73e2b2af1ff6c3f9b1522ee075fe97804c3ace0c9f637e532e5d63cefd2d", 0xde}, {&(0x7f0000002640)="1647222631a12c442c19174f3c3be2f35bbe0cb0d71f7671945291825fc12e8b4793623bf1fff0b20b30feb7261ef428e2b5a7614dcb7b8c1b4f2e52af9106f353368739eff8f9d2b90e6b5420994ec6bd3d23e8c6e6a63851f28e0c55a4cf089a30ed1cfe1681ce8508e4f5fb6c6d1b76c04f438aea3ac3afeb0d1df311039f9c2c9c8f150a75479dffccac8b1bbda4d9df8f3f48bc7cc474a67f", 0x9b}, {&(0x7f0000000180)="98dd9f2c8a6a26e91462d42cf6fd043749ea768430de1fa772d3bd2ff9be0ec3587edad5b700956c717ce3d586ad40bb60d72af4318c31c811f3c959d47c58960d73ae5840f64ba700081506f47efca9a0f5048f44149a457131e1da96165fc5f254667e", 0x64}], 0x5}, 0x5) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r5}}, 0xfffffffb) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r1, 0x5, 0x0, 0x7, 0x6, 0x0, {0x0, r5}}, 0x6f8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:52 executing program 4: r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x10844, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x10000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) eventfd(0x80) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x7, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012103, 0x1}, 0x80000001) io_uring_enter(r1, 0x58a7, 0xf6f4, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x810, r1, 0x8000000) r6 = creat(&(0x7f0000000040)='./file2\x00', 0xa0) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r8, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) r10 = openat$cgroup_ro(r6, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000240)=0x4) syz_io_uring_submit(r5, r9, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x8) 14:36:53 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:53 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x68]}, 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:36:53 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 14:36:53 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 14:36:53 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1326.334060] FAULT_INJECTION: forcing a failure. [ 1326.334060] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.334512] FAULT_INJECTION: forcing a failure. [ 1326.334512] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.336200] CPU: 0 PID: 8202 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1326.336211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1326.336223] Call Trace: [ 1326.341305] dump_stack+0x107/0x167 [ 1326.341976] should_fail.cold+0x5/0xa [ 1326.342688] should_failslab+0x5/0x20 [ 1326.343403] kmem_cache_alloc_bulk+0x4b/0x320 [ 1326.344231] io_submit_sqes+0x6fe6/0x8610 [ 1326.345019] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1326.345939] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1326.346832] ? find_held_lock+0x2c/0x110 [ 1326.347592] ? io_submit_sqes+0x8610/0x8610 [ 1326.348393] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1326.349283] ? wait_for_completion_io+0x270/0x270 [ 1326.350163] ? rcu_read_lock_any_held+0x75/0xa0 [ 1326.351010] ? vfs_write+0x354/0xb10 [ 1326.351700] ? fput_many+0x2f/0x1a0 [ 1326.352361] ? ksys_write+0x1a9/0x260 [ 1326.353051] ? __ia32_sys_read+0xb0/0xb0 [ 1326.353793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1326.354745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1326.355693] do_syscall_64+0x33/0x40 [ 1326.356370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1326.357304] RIP: 0033:0x7faf61c84b19 [ 1326.357980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1326.361332] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1326.362725] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1326.363998] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1326.365286] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1326.366574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1326.367871] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1326.369187] CPU: 1 PID: 8204 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1326.370321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1326.371700] Call Trace: [ 1326.372141] dump_stack+0x107/0x167 [ 1326.372737] should_fail.cold+0x5/0xa [ 1326.373366] ? create_object.isra.0+0x3a/0xa20 [ 1326.374119] should_failslab+0x5/0x20 [ 1326.374743] kmem_cache_alloc+0x5b/0x310 [ 1326.375421] create_object.isra.0+0x3a/0xa20 [ 1326.376142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1326.376981] kmem_cache_alloc_trace+0x151/0x320 [ 1326.377746] ? lock_downgrade+0x6d0/0x6d0 [ 1326.378440] __io_queue_sqe+0x666/0x9d0 [ 1326.379099] ? io_issue_sqe+0x77b0/0x77b0 [ 1326.379784] ? __fget_files+0x2f8/0x520 [ 1326.380439] ? io_prep_rw+0x7f5/0x1050 [ 1326.381090] io_submit_sqes+0x44aa/0x8610 [ 1326.381800] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1326.382628] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1326.383437] ? find_held_lock+0x2c/0x110 [ 1326.384114] ? io_submit_sqes+0x8610/0x8610 [ 1326.384825] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1326.385630] ? wait_for_completion_io+0x270/0x270 [ 1326.386433] ? rcu_read_lock_any_held+0x75/0xa0 [ 1326.387196] ? vfs_write+0x354/0xb10 [ 1326.387805] ? fput_many+0x2f/0x1a0 [ 1326.388396] ? ksys_write+0x1a9/0x260 [ 1326.389018] ? __ia32_sys_read+0xb0/0xb0 [ 1326.389689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1326.390553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1326.391407] do_syscall_64+0x33/0x40 [ 1326.392031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1326.392883] RIP: 0033:0x7f57e5b24b19 [ 1326.393501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1326.396575] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1326.397833] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1326.399014] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1326.400206] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1326.401398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1326.402566] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:36:53 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:36:53 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:09 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:09 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:09 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x105800, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') syz_open_procfs(0x0, &(0x7f0000000640)='net/hci\x00') stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r4, r5, 0x100) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000007fc0), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000008000)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000008040)={0x0, 0x0, 0x0}, &(0x7f0000008080)=0xc) sendmsg$netlink(r1, &(0x7f0000008140)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007f40)=[{&(0x7f0000000040)={0x18, 0x1a, 0x1, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x34, 0x0, 0x0, @u32=0x7}]}, 0x18}, {&(0x7f00000000c0)={0x17c, 0x18, 0x8, 0x70bd26, 0x25dfdbfd, "", [@typed={0xc, 0x3a, 0x0, 0x0, @u64=0x1f}, @generic="783a0428e66f0dce637b796af5d8bb747070c29c129af7d6fbd11fac93364b1a8511afea2424d25d8adbfcab8c52e9ba4d8316476f4ea1ea3f72753a3a0edbef6254f49279d09f2d15ca9ec099466111c1d254bd27011efcd30118a3fc03df2817774358f0a66111fd", @generic="f7be7e1af51d28f22757fd3c81f19b730b878109f3276c2699fab507e8920eeebaf1c54fe7b04c8c98d90267c93a09bd2d9fda3728773c6378b848aff7aea2c6b38e6538741d4cea4125a7a43af034e3bd8c5725c2943c8bde061cf8f40205402de76b00bee8b1763cc9c82340224860c182958af9e1f3f92f1b2de3b2cb47b4e50217f4188889560f714fe0441947cd4c5340d2bc0439b92f8fb9411e1843282f3e9edb8d6000eacf1fc0005c6fd01e3afd72eb628c6fd81de11f00bbf1cd8b1aafad0b6ac99c9925e7d3bd6aa8ce0daf2bee1556", @generic="bcb7eca1b7ecfe91f8dee8ba7ea29db10e3e4545ad229a025876e58d9c2cf93dd2"]}, 0x17c}, {&(0x7f0000006000)={0x1348, 0x32, 0x100, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1338, 0x8f, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @uid}, @typed={0x4, 0x60}, @generic="bb109d20ef6d086742cd1630e6d8e93d22e4068e7a4538696d66afd214c92f11d204d7bad9d97a2684eb5c3f61f0e39b22f4aa9ec20a74ec34b73d4bbae2bf95022837bb96cbfee305263722ea01016399a591af64412c1f4c285450fce54b69d34c677bd14e8a8c48731817521218e55263340dcfea5e9c8314327e23650cfed8b2385f291629a8b1194487deb12a6eb7a747f417321c5f88c46550b44318329503c606626e1064901fa370aebf665b6322e6c30e83315cc44b01bb8efbe056faf428b347fe6a05c7aad64e375cd14c6df21d9641b39e743b813a1d1cbe99d1", @typed={0x8, 0x1a, 0x0, 0x0, @pid}, @generic="69b4be3dc1c8314a7b485fd1b12962f697351c22887307478098ab5cbf3c1dcc47f11ac731934f16fa54fb174bec3d1294ea6acd19cb00968ebf7be9b475cf0631f7e1cd0f9bf01e9bd71b55e9bb9382f46bbbf32d322045cfca2f39094ded8c62f000fb577b6b4ca56d2dab0061091ae54e79fe3af86946de86bf9a74dbc134fd9ad487d5ad8811e3e5a33989bd00a473e712d889906709e1487984830745b3b44a270bfd2d6376dc1cd2ef09b08e44f5be4f71bfe7a847f5163bcf0db0eb02974b9d6a274d1c9a3afb2f08efd07986894000b3b5a9566ec3be74ec64563eb77e3130a761e75a3294322ced3568e6e146c3", @generic="f0918a51f1dea3dc559348ba98f64576a089b59c153510c3276ef3b2b287f729071e89fa4da2906213ba1502786c273eb3475512e8adf719dc99abdff517b12f7e2d45e2cb697c5d5a563979a42338741867f8183c", @generic="18c9ddf9bebaf2edccae27b23ac90ceb704eccdef7c51ca59b1083d0367ef1a8debf6fefc4de57bb1fe4d589f9c7108e4cb3a35e33c47d93f048803f586111d6f32d1742e699625124682a57a8de43d4299580471f21f917263863cfb7495cae7a019d00c3b4dc801bcf4a168e86f822442f1099ce45a2389afd86d172eb76a59932e075a238fca020993dc9b398b49698100ecc2dd1f8264320c2b9f76dfc931e06474325bca3ee0e7a74fd4828a9d7fa9e1794b2208c155f7632748dd53548e049ad02bb85b845693640969358c8b8c2595d938c7429e1a87183146ab95130b40e91ad7e9d03d68e04e3189c64c595ab", @generic="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", @generic="eece7c2025ead4da"]}]}, 0x1348}, {&(0x7f0000007380)={0x7d0, 0x10, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x2ab, 0x3b, 0x0, 0x1, [@generic="22a46e007e97e294555e362fa6a7c27c85c9994dcffc5c69d4bd6144973f099113448e1a9b794419370f786223c125bb96f2821e241434e63fdda5df6b47b827db8b8fa0a5e132084fa8acb4fcef71529947f28fd8ebe9ab71626afd8102c6d6efe6c7beb7d751e91ccf20060557d5064a78972885798436d7be59962a5805d17e2aff053b81ee6d30ec9d2afb23ee1252786423873ea0ef771534ca058b6e403ff7588aad7782383ae59adb4e", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x57, 0x0, 0x0, @pid}, @generic="70d21cb385e9c29ea8ae7b859600c231765b9411c98f6a551844e16cb6627bba2754edcc0a71a68801f8934304521d527b1a023a517ea83f1c5dd2afe43a76cad3e663442e7b772966ab90875106853ee1e0f82e6d76b1f12a549f5aad6fe54ab06b7ad77c13c2816e1ac819c046948cdfde47612638883824a1de", @generic="957b3e17036222ff5441f3d8b785d4ffcb384c70757450e90e18e744c21a6f5e51fb0b3e64853d4908e810b5d091a8d76d935bd1a12b33a8571c83bb29fee0a5d2d782a657c5cdbe6150447544ba15ae4b029d1510acec7cd565a40267a812b7173e72c2bf1081c04fee8f55a99c31a55315ea5b861de7aa933d54f6a6f083bb6bd6e041f340ac4e234bf6d21cfbe0a2b5101ac884070b66627ce75d66a796723597baa83b1ceb4d0e12c2b8035f7e88cbb59a275d535aaca5bb60868a9377881e4f63c7272a9c4142537013e18f496608fcea7e01b89b8b8366f8e2ccb67225e0", @generic="85f7699f84aba5397958609d6c8e7a5326257132ffb3c2aadfd13814d44407ab230489eb4ee76743196e0e698eb820ad1881fa0593aaa02a075e2c977b5001e6bd4470ac53", @generic="895a5a79ef653f9a5800fe82633ff78917f453ce930486def0c63f678f97fa289b944699ccae621247fda700c7b0f9f12a41a98701e4498fa5e997d62846c70effe9aad88d06253980"]}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0xfff}, @generic="8dd049898dea00df472fc29bbc543793fd171fceb507887eec0c46ab55d9911c276c3305b3748f1333e8936d8649f85c9351dbceb78dab874debedf6b85130effd5e2ec33dbea9ce9c806a978f84173cf643c5c9e278ce063186a15d292c14746862b6345756c898564f87d4f59cef87a52fbbdb5793e26720319718ba01ac56ede32355664f5e0ae67582312a6a4539f3fea98534629e83f247fd712ffa5530b15964b2d55d31fa152bba229d7d", @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="e75a72e3cd4017fec8a0b439d934bb76dc150bc5667469fcfc42ba89b176fe4074bf4e54be03f5d2a6ee0f8b8a296f47fcd499448abebec0f0bbba", @nested={0x1b7, 0x17, 0x0, 0x1, [@generic="b7b4ef88632525ac6d751b60109158a514ed23ec00c97c4d12c66ad1521d992ad9881b10f9dbf9c439234a4425364e23b4a9e25c169ea2f9c5f62fe3a2e832a5349681330d48d6df801a999a1e009d0e49ce8ee285573437d6e67bd9fc41530e3ced04d911897b1bffd4ebcb11ff04b5419d96e7b755f3e623b88690f1ba40ba7bdd3cd31a8836ea656b42a4ca17863583b6c5859b7e27c83d65b2811ee1a03b8dd381d827dd21e6237f451fd9", @generic="7eca3fcd43b7b0ce03d336cd3ef2f8dfe3061374c67b3890dbec0f2b621e06d2c9024cb007f753484325059435b8dee86f6f90a6e2e5910fa395bcc5c135120274a22688c45814e483e8376114349c8abd40232fb243388395d31a6620e560f5ed1e4487838cc0baf30741cac222d8554d15b4d4e5f1f3bef699c84f1ae1c282c2afb062d808dbe26e12b150695eb7c60b86534e1ac6fb52eecca2cd71246c3d3da077eb2fbbd5a72909a7849afe47ccd0e48ae21a18554b56a59c83627a2e5f54e843dd6b2db1e74e0487605a2432ed48af24dfdf13e844c2f26f143c79082ca872968e030a85951829a9004e98b4079f1a", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="9b45839c58d69ce772f9067a52bfdcbdca5de089de2acab0a5132977fbc115201c681bb430535f8a6c057b55fb2cb7f641eb52f1c8596733b8aa26e5e19e8afc1296eb73556b1af6bc4a3dbd973fa4bf39fb4bafc3acd633cea7719e7e44f58972e610be7c2d8d49ee2677f4b5bff8c05cc17c30cf1c4c902997425149576f5d9667f2ff6b5917a4d8e5b855689dc0ee63314b2a6ae74b94f41d7587fb410d6ea90800d95066a93da0d123f22c29db115468431d446ab715f2a35bbaf3d08bab97656712c176eea1fba507e86ff93cb964f2eb0b9948ac97a948e7962b0b3a7d820dad3bf1d611fc6e1e3dc2", @nested={0x71, 0x3b, 0x0, 0x1, [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x4, 0x41, 0x0, 0x0, @binary}, @generic="588823e79ceb273ba410397631b0b18098106f1c85f05f8e07b4cfdc9d5706ce87f6d51d7711a188311a80c7351d0928b7a3497848d3f438f966b9c6671ef9ba6ab97444bd", @typed={0x4, 0x10}, @typed={0x4, 0x48}, @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xf3, 0x54, 0x0, 0x0, @binary="a60b87bc311a4cb6db595a7bf162190348b53461ccfb80317fdab5ab2bf451a72c9dd3f4b7878f9e96bf4236b3ad67d20f5c4a5f0f2ddaed48f1716fc7b67c9f555c01db1091d0637d67b699d2d245954661febde9b20b4e70536de979260079d4fb7adebe473669ac5bde3915d55fab82131057355ec548b976e2610f17e3f61c66f0ed8d42bd9a02883857bf303ce9500649dfe87e0cced870eac8ef198a1af573730824ab958d1d08009d42d3e623ed1ef730f724b52b1841a277631d9faa88972effce999d5bfad122f614a562ada2961241555bb7b7b4291bc7d9224db85092dd49b04190dc55268639c71426"}, @nested={0x8, 0x77, 0x0, 0x1, [@typed={0x4, 0x78}]}]}, 0x7d0}, {&(0x7f0000007b80)={0x160, 0x3d, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@generic="b46737b8ea1a01820175b5158b75022e7409294e3f2b66ac9f56712f9a3bc8df254de49254c85af2b469b51cd3d05459c03577e071cce5097ea629c3f74faff7e8d00879ad4be087fce8078d9e880714262ac8ee9f587a0f4b5169a4736ab3ecbbaf495e2f2867dc2e3e62a2eaf7329478942ed45b9f928c802854b66e9cf6026d9b97c73165491a2119b3cadf32a64119add0299dd0baf7f8105b29ee6ea041", @generic="f5daa10f423b3bd1ab0fb2e7044b0e19f3fa1e3629f147dff25839553e0ad3ff39e8a34d653632f06b5cda5615646c2da765adc76da4449d3afd2f6b6e2e7912021d3a1673e669fee88e5da015d40c45a645d3d53794d5855ffb96551d7b21a4146cdd09cc012c79b11bcf4c0410766af9b5b8c3912e5136a58fcddbca1e88ae2eef758fb8b20d6777e07c2c023414f3ef1911f9743e6b450f764ec2b772c37d2d15d299e189af250379a27aa44890"]}, 0x160}, {&(0x7f0000007d00)={0x1d8, 0x14, 0x2, 0x70bd29, 0x25dfdbfc, "", [@generic="695b04a6600a38f8ac92bbca5983ca04da0edb90d219884498ce98a82458151d03e67093410f2391508bc60fa919477ca0c530e33af40618bd40cad20b4f7eb724fc0a16e5c82f5100d63e59e466711741345e203cda07b435c01f50dd21286fc924c872acf1c7f8fb", @generic="6cf91d29fb87594b9e96a4eb22d05cdedd7493880ed902aa311c08af114264cf0b8471467782aedbb9862831ef4b89ae7bc26f786b337136f2b68e4b5cde819f385597612be95421eb05e6f78de01d4c9136c637d3f9ee44fbea1225c262a25e5f30e9194e20ef0d500ce7214bd55ede00116e7253871174a6f60a99acb053435d73432f0b8048e7c14e2403ddcdb00b3cd204b0bfa5477950a0ab06fe5b683495dec256b74eed596ebafded6162ae8e9baedd8a3951ee4c5cb82207eac1928ff8d34ffeed0c601ede2297207a58186497b02e6ea768b4d03cb504516926e43d3cbe3c3a676d5b3a3e4ca45d906378285116fbeaac7009ba", @generic="88dc8a768eecd324950b61ecf9d7f60be912af8f2e2b123b36d7ccb1f61c598d9cfc7df94b4d7db69976bdcedc4c405f43ebe2ed7382f389bd559175a9faefaf1a78cf3de2e7d101794b6a6d5ad93f1cc47d4c4ade798f6afbcd5891bacfb2728b3c2b1b1b7cfc"]}, 0x1d8}, {&(0x7f0000007f00)={0x10, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x7, &(0x7f00000080c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r5}}}, @rights={{0x1c, 0x1, 0x1, [r6, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x80, 0x40000}, 0x4004890) openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0, 0x40) readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:37:09 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:09 executing program 4: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x57) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/4\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x806c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000001000000180000006926aabf015a11d46243670d4e009d76c8d89411df787201b8fa22de030010abe5ecb5a97c411bc34ce5c7986ae65d22a8228e1ec42bfcf76d7fb639a2f01b9203783c1cb3b4d777ecf73cff44fa7b0a712cb953070ca11014f4d752d04431aff2", @ANYRES32=r0, @ANYBLOB="00000005000000002e60f44d6ebd8ae0a8f416e8bdde99466c6f41f8080c8084caef6fbb492f5a6c6cc88438afe7441253a423b503621914cdd11b4bd2eebe3676aa68e00b4f36cd000000000000000000"]) sendfile(r3, r1, &(0x7f0000000380)=0xffffffff00000000, 0x400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x29, &(0x7f0000000080)={0x0, 0x5236, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) eventfd(0x0) r6 = syz_io_uring_setup(0xabb, &(0x7f0000000200)={0x0, 0xd992, 0x20, 0x2, 0x29d, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000300)) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_CLOSE, 0xbd) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r8, 0x0, 0xff7f, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) r9 = getpid() syz_open_procfs(r9, &(0x7f0000000100)='net/vlan/vlan1\x00') fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) 14:37:09 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:09 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 14:37:09 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) [ 1342.721047] FAULT_INJECTION: forcing a failure. [ 1342.721047] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.723619] CPU: 0 PID: 8226 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1342.725161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1342.727007] Call Trace: [ 1342.727600] dump_stack+0x107/0x167 [ 1342.728432] should_fail.cold+0x5/0xa [ 1342.729290] ? create_object.isra.0+0x3a/0xa20 [ 1342.730313] should_failslab+0x5/0x20 [ 1342.731167] kmem_cache_alloc+0x5b/0x310 [ 1342.732091] create_object.isra.0+0x3a/0xa20 [ 1342.733085] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1342.734224] kmem_cache_alloc_bulk+0x168/0x320 [ 1342.735251] io_submit_sqes+0x6fe6/0x8610 [ 1342.736220] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1342.737335] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1342.738430] ? find_held_lock+0x2c/0x110 [ 1342.739340] ? io_submit_sqes+0x8610/0x8610 [ 1342.740359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1342.741481] ? wait_for_completion_io+0x270/0x270 [ 1342.742600] ? rcu_read_lock_any_held+0x75/0xa0 [ 1342.743676] ? vfs_write+0x354/0xb10 [ 1342.744546] ? fput_many+0x2f/0x1a0 [ 1342.745388] ? ksys_write+0x1a9/0x260 [ 1342.746267] ? __ia32_sys_read+0xb0/0xb0 [ 1342.747216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1342.748441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1342.749632] do_syscall_64+0x33/0x40 [ 1342.750491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1342.751676] RIP: 0033:0x7faf61c84b19 [ 1342.752551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1342.756820] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1342.758579] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1342.760243] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1342.761894] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1342.763546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1342.765206] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1342.772218] FAULT_INJECTION: forcing a failure. [ 1342.772218] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.774814] CPU: 0 PID: 8229 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1342.776383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1342.778273] Call Trace: [ 1342.778879] dump_stack+0x107/0x167 [ 1342.779717] should_fail.cold+0x5/0xa [ 1342.780608] should_failslab+0x5/0x20 [ 1342.781475] kmem_cache_alloc_bulk+0x4b/0x320 [ 1342.782506] io_submit_sqes+0x6fe6/0x8610 [ 1342.783497] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1342.784642] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1342.785747] ? find_held_lock+0x2c/0x110 [ 1342.786683] ? io_submit_sqes+0x8610/0x8610 [ 1342.787683] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1342.788805] ? wait_for_completion_io+0x270/0x270 [ 1342.789915] ? rcu_read_lock_any_held+0x75/0xa0 [ 1342.790977] ? vfs_write+0x354/0xb10 [ 1342.791825] ? fput_many+0x2f/0x1a0 [ 1342.792667] ? ksys_write+0x1a9/0x260 [ 1342.793539] ? __ia32_sys_read+0xb0/0xb0 [ 1342.794474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1342.795665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1342.796840] do_syscall_64+0x33/0x40 [ 1342.797684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1342.798839] RIP: 0033:0x7f57e5b24b19 [ 1342.799677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1342.803877] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1342.805606] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1342.807218] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1342.808852] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1342.810467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1342.812082] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:37:09 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:26 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:26 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) [ 1359.694645] FAULT_INJECTION: forcing a failure. [ 1359.694645] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.696125] CPU: 0 PID: 8252 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1359.696974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1359.697993] Call Trace: [ 1359.698317] dump_stack+0x107/0x167 [ 1359.698762] should_fail.cold+0x5/0xa [ 1359.699225] ? create_object.isra.0+0x3a/0xa20 [ 1359.699778] should_failslab+0x5/0x20 [ 1359.700237] kmem_cache_alloc+0x5b/0x310 [ 1359.700748] create_object.isra.0+0x3a/0xa20 [ 1359.701283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1359.701901] kmem_cache_alloc_bulk+0x168/0x320 [ 1359.702458] io_submit_sqes+0x6fe6/0x8610 [ 1359.702984] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1359.703595] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1359.704187] ? find_held_lock+0x2c/0x110 [ 1359.704706] ? io_submit_sqes+0x8610/0x8610 [ 1359.705239] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1359.706141] ? wait_for_completion_io+0x270/0x270 [ 1359.706726] ? rcu_read_lock_any_held+0x75/0xa0 [ 1359.707294] ? vfs_write+0x354/0xb10 [ 1359.707754] ? fput_many+0x2f/0x1a0 [ 1359.708198] ? ksys_write+0x1a9/0x260 [ 1359.708697] ? __ia32_sys_read+0xb0/0xb0 [ 1359.709205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1359.709837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1359.710474] do_syscall_64+0x33/0x40 [ 1359.710922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1359.711539] RIP: 0033:0x7faf61c84b19 [ 1359.712005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1359.713817] FAULT_INJECTION: forcing a failure. [ 1359.713817] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.714245] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1359.714259] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1359.714265] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1359.714272] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.714290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1359.721405] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1359.722313] CPU: 1 PID: 8250 Comm: syz-executor.1 Not tainted 5.10.232 #1 14:37:26 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:26 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:26 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:26 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 14:37:26 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x0, 0x7, 0xff, {0xff, 0x30, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000000040)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0x9, "57a8bce0"}, @main=@item_4={0x3, 0x0, 0x8, "2e8d07fe"}, @local=@item_4={0x3, 0x2, 0x9, "ce3ee0e1"}, @global=@item_4={0x3, 0x1, 0x4, "d496062a"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1e21, 0x5, 0x1, {0x22, 0x7a6}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x60, 0xf, 0xfd, "5f6bac59551f5608c358d6a0f6bc5b32aca6f1818f408608754ff72a19233d7c6b65d42ad86a2ac64fa5be9f6823bfd2422565040d225f432d0bca3b7366a0491e6127df658ab7c19dc7dd21e57582f31a489d02cd36c1e67e481c1f931274920b1ac4fe8f763d3b82c7ad1bf52780e8a4c6beb43272e544741adfa3d73281fd000d69172de91fb96843462e3be2411df7f2ae7d71a7e64211958093fc3e7c241b3a7024126b3e2661e6d6a6ca6c6c4e40058296811e6b4ab11306eb53cd3b926aed8d170d717f53af36fedb45700f2396cb3c3241770730e56f504fd7bc626296aefc40149f39aa22e6ab4074eb762fac6120a96540beabfa198ea1a5"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xf5}, &(0x7f0000000440)={0x20, 0x1, 0xa3, "8a402a2aeef5290886501ae82eb3a115c6304d8f9a83b5354e4e54078f3ddc1de1101d4ebb38c08bf8266b95bfe2d36076a6e5243a91566c84bd18c59a03f415d6db2cc785d7d1b0b8e8fb54699010fe087849aec8300cb795fbd03f881cd91f91e50689f141915fde54ca71fedd5a094ef867fb742cc3fe8cf09cf30330f7315f16baf72b3602f06966c8092ee2776a198664717a4549563dfa7e925b4a7c8fb5c728"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0xff}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'wg1\x00'}) 14:37:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat(r0, &(0x7f0000000100)='./file0\x00', 0x880, 0x5cbe3b68b9e75828) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="487fec864b24"]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x40090) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r4, @ANYBLOB="000126bd7000fddbdf250c0000004000028008000200010000000400040004000400080001000400000008000200faffffff0c00038008000200060000000400040008000200020000000400040048010680a5000300161cfd0396228ab4094cafa1a2c5fd0f5e12d6da0d7eb9bef5a91139eb6bdbc3234e10f065e2da16cde13e3ee4d833a8de758aa0e0db9e330f4e048af082c76306dde3c579af98a864ed019802d18fbc56771b46c301a036ca96831c03ec1bf57a271c72979d52d7cb975b0080d69266af94bcd6017d3a5b7e6d6b839d9b91fd72178392e9648a407a7ad6100c64dce638c70c45c3b353533db882f68fc5ab0efb00000004000200080001000001000004000200040002003c00040067636d286165732900000000000000000000000000000000000000000000000014000000ef15cae7fb8e2caa4637baf3c74fccd6f4bc08e24c00040067636d286165732900000000000000000000000000000000000000000000000024000000f25ae9926fd99e27daad0b7cf9ab0c518600c62f20c1f15d4bef600df24e40811b7d0ef03400098008000100090000000800010081000000080001000700000008000100ffffffff080002000200000008000100ff0f00003a7467672352"], 0x1d0}, 0x1, 0x0, 0x0, 0x4005014}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x6d, 0xa6, 0x0, 0x7f, 0x0, 0x227, 0x2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0x7}, 0x100, 0x8, 0x6, 0x0, 0x3ff, 0x57, 0x1f, 0x0, 0x2, 0x0, 0x401}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1359.724096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1359.726362] Call Trace: [ 1359.727028] dump_stack+0x107/0x167 [ 1359.727947] should_fail.cold+0x5/0xa [ 1359.728917] ? create_object.isra.0+0x3a/0xa20 [ 1359.730074] should_failslab+0x5/0x20 [ 1359.731030] kmem_cache_alloc+0x5b/0x310 [ 1359.732062] create_object.isra.0+0x3a/0xa20 [ 1359.733091] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1359.734170] kmem_cache_alloc_bulk+0x168/0x320 [ 1359.735147] io_submit_sqes+0x6fe6/0x8610 [ 1359.736063] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1359.737125] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1359.738151] ? find_held_lock+0x2c/0x110 [ 1359.739015] ? io_submit_sqes+0x8610/0x8610 [ 1359.739940] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1359.740977] ? wait_for_completion_io+0x270/0x270 [ 1359.741999] ? rcu_read_lock_any_held+0x75/0xa0 [ 1359.742983] ? vfs_write+0x354/0xb10 [ 1359.743776] ? fput_many+0x2f/0x1a0 [ 1359.744560] ? ksys_write+0x1a9/0x260 [ 1359.745368] ? __ia32_sys_read+0xb0/0xb0 [ 1359.746236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1359.747348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1359.748455] do_syscall_64+0x33/0x40 [ 1359.749247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1359.750337] RIP: 0033:0x7f57e5b24b19 [ 1359.751126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1359.755032] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1359.756658] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1359.758174] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1359.759693] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.761214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1359.762731] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1359.774708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:37:26 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1359.837070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 14:37:26 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:26 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 14:37:26 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:26 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"/600], 0x260}}, 0x1000) [ 1359.968143] FAULT_INJECTION: forcing a failure. [ 1359.968143] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.969604] CPU: 0 PID: 8265 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1359.970440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1359.971440] Call Trace: [ 1359.971761] dump_stack+0x107/0x167 [ 1359.972211] should_fail.cold+0x5/0xa [ 1359.972707] ? create_object.isra.0+0x3a/0xa20 [ 1359.973270] should_failslab+0x5/0x20 [ 1359.973737] kmem_cache_alloc+0x5b/0x310 [ 1359.974229] create_object.isra.0+0x3a/0xa20 [ 1359.974766] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1359.975388] kmem_cache_alloc_bulk+0x168/0x320 [ 1359.975952] io_submit_sqes+0x6fe6/0x8610 [ 1359.976489] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1359.977114] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1359.977705] ? find_held_lock+0x2c/0x110 [ 1359.978208] ? io_submit_sqes+0x8610/0x8610 [ 1359.978743] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1359.979329] ? wait_for_completion_io+0x270/0x270 [ 1359.979916] ? rcu_read_lock_any_held+0x75/0xa0 [ 1359.980503] ? vfs_write+0x354/0xb10 [ 1359.980955] ? fput_many+0x2f/0x1a0 [ 1359.981403] ? ksys_write+0x1a9/0x260 [ 1359.981870] ? __ia32_sys_read+0xb0/0xb0 [ 1359.982380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1359.983019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1359.983656] do_syscall_64+0x33/0x40 [ 1359.984107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1359.984759] RIP: 0033:0x7faf61c84b19 [ 1359.985210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1359.987429] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1359.988349] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1359.989243] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1359.990119] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.990978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1359.991834] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:37:43 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:43 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 14:37:43 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:43 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:43 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:43 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 14:37:43 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x10940, 0x40) r2 = syz_open_dev$rtc(&(0x7f0000000380), 0x12e, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r1, 0x1000003) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x10000}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000100)={0xf000201a}) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) lseek(r1, 0x0, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000014c0)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) 14:37:43 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_io_uring_setup(0x6857, &(0x7f0000000000)={0x0, 0x3f2c, 0x10, 0x1, 0x1b9}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x1d1a, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) syz_io_uring_submit(0x0, r4, &(0x7f00000016c0)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x3, 0x80000001, 0x0, 0xa, 0x0, 0x1}, 0xfc2) syz_io_uring_setup(0x2, &(0x7f00000015c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000001500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) r7 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x9, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="e423f8df0fcc3fa4bdc6c50bb32c3e98d2bec39ec2f2059ad3bb53b46cf70cb51993cb239bb16f06548ec2f5a74c50cd1436d22d9138fdd737c1cb2c1e78f6d196a828326075c89dfc69815264dc5c853d4f1b4fc4631c14096ac8ef891e12ae1d444d5f8f199f3e47f433ab302119fcc21adb17479192fecee1d2570fea9b2b87584eddff6341990576fe7f165ef12bba4cf64df83d8c53", 0x98, 0x100000000}, {&(0x7f0000001540)="3d08e45140e0afc9ff54bb0d0c6fdaaa0f55953f2070d57352475366e5dc05881a15f0f70e13c61e03406caec779744ddcdf4c9bf018539482c1fbac282fba5140231c25acf2bfa62bb895548867cbbb3dc487cdc61cd251adcbbbbfc1562e", 0x5f, 0x100000001}], 0x848004, &(0x7f0000001800)=ANY=[@ANYBLOB="73686f72746e616d65696e39352c73026f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c696f6368d32b3b86ca8246eaa9d561727365744563703835352c757466383d312c73686f72746e616d653d6c6f7765722c696f6368ff727365743d64656661756c742c6e6f6e756d7461696c3d302c6673636f6e746578743d73797374656d5f752c66736e616d653d002c6654757569643d64395d3618eea3f82dffff37622d30663d302d393965622d35313139353564002c657569643e", @ANYRESDEC, @ANYBLOB="2c746839411580d477a5cfd100"]) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f0000000400)={@desc={0x1, 0x0, @auto="cc4cd8fe34aef930"}}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1377.031075] FAULT_INJECTION: forcing a failure. [ 1377.031075] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.033549] CPU: 1 PID: 8284 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1377.034994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.036746] Call Trace: [ 1377.037322] dump_stack+0x107/0x167 [ 1377.038097] should_fail.cold+0x5/0xa [ 1377.038907] ? create_object.isra.0+0x3a/0xa20 [ 1377.039877] should_failslab+0x5/0x20 [ 1377.040686] kmem_cache_alloc+0x5b/0x310 [ 1377.041555] ? mark_held_locks+0x9e/0xe0 [ 1377.042423] create_object.isra.0+0x3a/0xa20 [ 1377.043352] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1377.043558] FAULT_INJECTION: forcing a failure. [ 1377.043558] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.044432] kmem_cache_alloc_bulk+0x168/0x320 [ 1377.044462] io_submit_sqes+0x6fe6/0x8610 [ 1377.044515] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1377.050276] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1377.051296] ? find_held_lock+0x2c/0x110 [ 1377.052158] ? io_submit_sqes+0x8610/0x8610 [ 1377.053083] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1377.054104] ? wait_for_completion_io+0x270/0x270 [ 1377.055125] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.056104] ? vfs_write+0x354/0xb10 [ 1377.056888] ? fput_many+0x2f/0x1a0 [ 1377.057666] ? ksys_write+0x1a9/0x260 [ 1377.058472] ? __ia32_sys_read+0xb0/0xb0 [ 1377.059335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1377.060442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.061544] do_syscall_64+0x33/0x40 [ 1377.062332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.063415] RIP: 0033:0x7f57e5b24b19 [ 1377.064200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.068082] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1377.069696] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1377.071203] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1377.072707] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.074230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.075737] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1377.077282] CPU: 0 PID: 8289 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1377.078854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.080739] Call Trace: [ 1377.081350] dump_stack+0x107/0x167 [ 1377.082175] should_fail.cold+0x5/0xa [ 1377.083035] ? create_object.isra.0+0x3a/0xa20 [ 1377.084063] should_failslab+0x5/0x20 [ 1377.084934] kmem_cache_alloc+0x5b/0x310 [ 1377.085874] ? mark_held_locks+0x9e/0xe0 [ 1377.086800] create_object.isra.0+0x3a/0xa20 [ 1377.087783] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1377.088953] kmem_cache_alloc_bulk+0x168/0x320 [ 1377.090003] io_submit_sqes+0x6fe6/0x8610 [ 1377.090970] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1377.092094] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1377.093200] ? find_held_lock+0x2c/0x110 [ 1377.094132] ? io_submit_sqes+0x8610/0x8610 [ 1377.095134] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1377.096230] ? wait_for_completion_io+0x270/0x270 [ 1377.097335] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.098397] ? vfs_write+0x354/0xb10 [ 1377.099246] ? fput_many+0x2f/0x1a0 [ 1377.100068] ? ksys_write+0x1a9/0x260 [ 1377.100931] ? __ia32_sys_read+0xb0/0xb0 [ 1377.101874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1377.103061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.104236] do_syscall_64+0x33/0x40 [ 1377.105088] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.106248] RIP: 0033:0x7faf61c84b19 [ 1377.107094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.111271] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1377.113004] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1377.114630] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1377.116253] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.117869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.119488] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:37:44 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:44 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x194}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x141}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x20040050) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) getuid() keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) add_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r1) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0xffffff80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 14:37:44 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = eventfd2(0x2, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x401, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000015c0)) execveat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000100)='{$^{(::-{:\x00', &(0x7f0000000140)='net/dev_mcast\x00', &(0x7f0000000180)='net/dev_mcast\x00', &(0x7f00000001c0)='net/dev_mcast\x00', &(0x7f0000000200)='-\xb2^.}*$}\x00', &(0x7f0000000240)='net/dev_mcast\x00'], &(0x7f0000001580)=[&(0x7f0000000300)='/dev/bsg\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\\@{\x00', &(0x7f0000000400)='/dev/bsg\x00', &(0x7f0000001500)='%$-\x00', &(0x7f0000001540)='net/dev_mcast\x00'], 0x100) sendfile(r0, r1, &(0x7f0000000000)=0x8, 0xda02) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:37:44 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:44 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="280200001e00020028bd7000fedbdf25ff0100000000000000000000000000010000f6f10a002b00fc0000000000000000000000000000000800000029104e2d0dfa53d159ce40e800350000b7000100686d6163287368613235362d6e656f6e2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007803000033dca99afefb851ca1025f21c897f4295d290d79cfd34eefaa5bd7e520fa3b393717b09825ae8b6a95dedf09f34117290d39af565bdb09b968a0086f8816a54fe76b4096b0c849bd317e0add1f7c8d4e32a6bf4919a32c8475d1ab41ad67d34c3b0aad86b179038dbb6b483522be750024000900000100000000000004000000000000005e000000000000008000000000000000040105007f000001000000000000000000000000000004d2ff00000002000000ff020000000000000000000000000001023500000001010005000000ebcf00000100000000000000000000000000000000000000000004d46c00000002000000e0000002000000000000000000000000ff34000002010600000000008000000003000000fe8000000000000000000000000000aa000004d43300000002000000fc02000000000000000000000000000100350000010220002d000000050000000100000000000000000000000000000000000001000004d2320000000a0000000000000000000000000000000000000006350000c702060002000000000000006dd45c685e94dc74ca52555b5fe18fc9845cd7773d6b246969d07fd272cc7eb88eafcef6f4250d329691985fd5a8bc0f38b93209"], 0x228}, 0x1, 0x0, 0x0, 0x81}, 0x2000c880) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:37:44 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:44 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:44 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:44 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:44 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 14:37:44 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 14:37:44 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "5cd476ab416538ebb1e5a08650576f7a4fc97ca415bb7f7d6298ffd4108f75c1d51d6cd4a17ab0ea0cc7ae4bc0d64c88c47af5d80aa99285fd83addb53bcc4c5", 0x24}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000100616161e16161616161616161616161616161616161616161616161616161613131313131313131313131313131313131313131313131313131313131313131699eb10d1817fc0600c2f04a1f0b7ddea67d6b228e25e4fa6090c634fac5fedd4ad03ca1f8ad4dd61b9a9ad4b6b3"], 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='.request_key_auth\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xc, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r3 = perf_event_open(&(0x7f0000001500)={0x3, 0x80, 0x6, 0x1, 0x3, 0x3f, 0x0, 0x1, 0x80, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f00000003c0), 0x9}, 0x20, 0x7fffffff, 0x94a1, 0x0, 0x7, 0x4, 0x3f, 0x0, 0xc7b, 0x0, 0x5}, 0xffffffffffffffff, 0x5, r2, 0x0) r4 = add_key$keyring(&(0x7f0000001640), &(0x7f0000001680)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000001600)='[-+\x00', r4) perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x7f, 0x6, 0x0, 0x80, 0x0, 0x101, 0x1d3815898da46541, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x7fdf, 0x7}, 0x0, 0x27f, 0x9, 0x9, 0x3ff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, r3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4078, 0xfee}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:37:44 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1377.893983] FAULT_INJECTION: forcing a failure. [ 1377.893983] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.896578] CPU: 0 PID: 8327 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1377.898161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.900078] Call Trace: [ 1377.900693] dump_stack+0x107/0x167 [ 1377.901544] should_fail.cold+0x5/0xa [ 1377.902428] ? create_object.isra.0+0x3a/0xa20 [ 1377.903484] should_failslab+0x5/0x20 [ 1377.904365] kmem_cache_alloc+0x5b/0x310 [ 1377.905321] ? mark_held_locks+0x9e/0xe0 [ 1377.906262] create_object.isra.0+0x3a/0xa20 [ 1377.907274] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1377.908449] kmem_cache_alloc_bulk+0x168/0x320 [ 1377.909522] io_submit_sqes+0x6fe6/0x8610 [ 1377.910515] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1377.911638] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1377.912761] ? find_held_lock+0x2c/0x110 [ 1377.913730] ? io_submit_sqes+0x8610/0x8610 [ 1377.914738] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1377.915858] ? wait_for_completion_io+0x270/0x270 [ 1377.916981] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.918066] ? vfs_write+0x354/0xb10 [ 1377.918928] ? fput_many+0x2f/0x1a0 [ 1377.919769] ? ksys_write+0x1a9/0x260 [ 1377.920652] ? __ia32_sys_read+0xb0/0xb0 [ 1377.921586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1377.922796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.923995] do_syscall_64+0x33/0x40 [ 1377.924862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.926050] RIP: 0033:0x7faf61c84b19 [ 1377.926902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.931153] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1377.932903] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1377.934551] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1377.936187] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.937833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.939475] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1377.965124] FAULT_INJECTION: forcing a failure. [ 1377.965124] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.967768] CPU: 0 PID: 8335 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1377.969344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.971233] Call Trace: [ 1377.971829] dump_stack+0x107/0x167 [ 1377.972654] should_fail.cold+0x5/0xa [ 1377.973541] should_failslab+0x5/0x20 [ 1377.974406] kmem_cache_alloc_bulk+0x4b/0x320 [ 1377.975431] io_submit_sqes+0x6fe6/0x8610 [ 1377.976407] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1377.977543] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1377.978791] ? find_held_lock+0x2c/0x110 [ 1377.979728] ? io_submit_sqes+0x8610/0x8610 [ 1377.980715] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1377.981810] ? wait_for_completion_io+0x270/0x270 [ 1377.982914] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.983974] ? vfs_write+0x354/0xb10 [ 1377.984824] ? fput_many+0x2f/0x1a0 [ 1377.985650] ? ksys_write+0x1a9/0x260 [ 1377.986519] ? __ia32_sys_read+0xb0/0xb0 [ 1377.987449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1377.988647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.989832] do_syscall_64+0x33/0x40 [ 1377.990678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.991843] RIP: 0033:0x7f57e5b24b19 [ 1377.992690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.996899] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 14:37:44 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1377.998650] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1378.000465] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1378.002101] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.003741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1378.005380] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:37:44 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:37:59 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 14:37:59 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 14:37:59 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:59 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:59 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1018, 0x20, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fcntl$setstatus(r1, 0x4, 0x2c00) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:37:59 executing program 4: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x228, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ea}]}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2a, 0x3, "5a617aecb11fb6c639243d795180102728ca4fcb549350d156437346368be6a2aa1156dea8a6"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "63a45d6597af4115b18efea3bab2318a7b7b88074b07e12437cd215503"}}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x1}, 0x4004004) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x158, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x320daaaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64bc0c6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72c50522}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b47072a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x611e46b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x391fff3b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b9b1f7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7298837c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64be70c6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d12628}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33490697}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cd4403d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b1e5ce9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9c7f10a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ead686c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x100010, r3, 0x8000000) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000001400)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfe1a) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) lseek(r0, 0x0, 0x3) 14:37:59 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:37:59 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1392.220972] FAULT_INJECTION: forcing a failure. [ 1392.220972] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.223435] CPU: 1 PID: 8352 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1392.224879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.226629] Call Trace: [ 1392.227205] dump_stack+0x107/0x167 [ 1392.227980] should_fail.cold+0x5/0xa [ 1392.228800] ? create_object.isra.0+0x3a/0xa20 [ 1392.229786] should_failslab+0x5/0x20 [ 1392.230593] kmem_cache_alloc+0x5b/0x310 [ 1392.231459] ? mark_held_locks+0x9e/0xe0 [ 1392.232324] create_object.isra.0+0x3a/0xa20 [ 1392.233248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1392.234343] kmem_cache_alloc_bulk+0x168/0x320 [ 1392.235323] io_submit_sqes+0x6fe6/0x8610 [ 1392.236234] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1392.237294] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1392.238331] ? find_held_lock+0x2c/0x110 [ 1392.239200] ? io_submit_sqes+0x8610/0x8610 [ 1392.240123] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1392.241149] ? wait_for_completion_io+0x270/0x270 [ 1392.242173] ? rcu_read_lock_any_held+0x75/0xa0 [ 1392.243162] ? vfs_write+0x354/0xb10 [ 1392.243951] ? fput_many+0x2f/0x1a0 [ 1392.244721] ? ksys_write+0x1a9/0x260 [ 1392.245527] ? __ia32_sys_read+0xb0/0xb0 [ 1392.246404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.247514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.248604] do_syscall_64+0x33/0x40 [ 1392.249390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.250487] RIP: 0033:0x7faf61c84b19 [ 1392.251274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.255173] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1392.256785] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1392.258304] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1392.259817] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.261335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1392.262848] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1392.267347] FAULT_INJECTION: forcing a failure. [ 1392.267347] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.269796] CPU: 1 PID: 8363 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1392.271242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.273012] Call Trace: [ 1392.273581] dump_stack+0x107/0x167 [ 1392.274364] should_fail.cold+0x5/0xa [ 1392.275182] ? create_object.isra.0+0x3a/0xa20 [ 1392.276149] should_failslab+0x5/0x20 [ 1392.276958] kmem_cache_alloc+0x5b/0x310 [ 1392.277829] ? mark_held_locks+0x9e/0xe0 [ 1392.278705] create_object.isra.0+0x3a/0xa20 [ 1392.279640] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1392.280750] kmem_cache_alloc_bulk+0x168/0x320 [ 1392.281748] io_submit_sqes+0x6fe6/0x8610 [ 1392.282675] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1392.283754] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1392.284794] ? find_held_lock+0x2c/0x110 [ 1392.285683] ? io_submit_sqes+0x8610/0x8610 [ 1392.286622] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1392.287664] ? wait_for_completion_io+0x270/0x270 [ 1392.288708] ? rcu_read_lock_any_held+0x75/0xa0 [ 1392.289704] ? vfs_write+0x354/0xb10 [ 1392.290494] ? fput_many+0x2f/0x1a0 [ 1392.291292] ? ksys_write+0x1a9/0x260 [ 1392.292114] ? __ia32_sys_read+0xb0/0xb0 [ 1392.292995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.294133] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.295244] do_syscall_64+0x33/0x40 [ 1392.296056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.297155] RIP: 0033:0x7f57e5b24b19 [ 1392.297960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.301933] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1392.303576] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1392.305111] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1392.306666] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.308201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1392.309746] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:37:59 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0x100) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = dup3(r2, r0, 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000082}, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:38:15 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) clone3(&(0x7f00000003c0)={0x80, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x32}, &(0x7f0000000140)=""/132, 0x84, &(0x7f00000002c0)=""/228, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_ro(r2, &(0x7f0000001600)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000015c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x4, 0x100}) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:38:15 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:15 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:15 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 14:38:15 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:15 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:15 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 14:38:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x92) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="ec52"], 0x58) close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, 0xffffffffffffffff) syz_io_uring_setup(0x18a, &(0x7f0000000080)={0x0, 0x70cd, 0x4, 0x0, 0x1ff, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) r5 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r5, 0xfff, 0x0, 0x100}, 0x7fffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1408.452401] FAULT_INJECTION: forcing a failure. 14:38:15 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1408.452401] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.455602] CPU: 0 PID: 8389 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1408.457298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1408.459376] Call Trace: 14:38:15 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1408.460029] dump_stack+0x107/0x167 [ 1408.460982] should_fail.cold+0x5/0xa [ 1408.461909] ? create_object.isra.0+0x3a/0xa20 [ 1408.463055] should_failslab+0x5/0x20 [ 1408.463983] kmem_cache_alloc+0x5b/0x310 [ 1408.464973] ? mark_held_locks+0x9e/0xe0 [ 1408.465965] create_object.isra.0+0x3a/0xa20 [ 1408.467058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1408.468306] kmem_cache_alloc_bulk+0x168/0x320 [ 1408.469429] io_submit_sqes+0x6fe6/0x8610 [ 1408.470505] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1408.471716] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1408.472893] ? find_held_lock+0x2c/0x110 [ 1408.473886] ? io_submit_sqes+0x8610/0x8610 [ 1408.474984] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1408.476164] ? wait_for_completion_io+0x270/0x270 [ 1408.477345] ? rcu_read_lock_any_held+0x75/0xa0 [ 1408.478501] ? vfs_write+0x354/0xb10 [ 1408.479406] ? fput_many+0x2f/0x1a0 [ 1408.480292] ? ksys_write+0x1a9/0x260 [ 1408.481208] ? __ia32_sys_read+0xb0/0xb0 [ 1408.482235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1408.483495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1408.484753] do_syscall_64+0x33/0x40 [ 1408.485647] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1408.486916] RIP: 0033:0x7f57e5b24b19 [ 1408.487811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1408.492258] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1408.494083] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1408.495831] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1408.497538] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1408.499270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1408.500988] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1408.517352] FAULT_INJECTION: forcing a failure. [ 1408.517352] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.519894] CPU: 1 PID: 8391 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1408.521334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1408.523093] Call Trace: [ 1408.523654] dump_stack+0x107/0x167 [ 1408.524425] should_fail.cold+0x5/0xa [ 1408.525232] ? create_object.isra.0+0x3a/0xa20 [ 1408.526210] should_failslab+0x5/0x20 [ 1408.527014] kmem_cache_alloc+0x5b/0x310 [ 1408.527879] ? mark_held_locks+0x9e/0xe0 [ 1408.528740] create_object.isra.0+0x3a/0xa20 [ 1408.529664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1408.530742] kmem_cache_alloc_bulk+0x168/0x320 [ 1408.531718] io_submit_sqes+0x6fe6/0x8610 [ 1408.532618] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1408.533666] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1408.534692] ? find_held_lock+0x2c/0x110 [ 1408.535552] ? io_submit_sqes+0x8610/0x8610 [ 1408.536475] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1408.537493] ? wait_for_completion_io+0x270/0x270 [ 1408.538517] ? rcu_read_lock_any_held+0x75/0xa0 [ 1408.539492] ? vfs_write+0x354/0xb10 [ 1408.540276] ? fput_many+0x2f/0x1a0 [ 1408.541046] ? ksys_write+0x1a9/0x260 [ 1408.541847] ? __ia32_sys_read+0xb0/0xb0 [ 1408.542715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1408.543816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1408.544907] do_syscall_64+0x33/0x40 [ 1408.545689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1408.546775] RIP: 0033:0x7faf61c84b19 [ 1408.547561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1408.551438] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1408.553048] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1408.554558] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1408.556054] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1408.557562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1408.559065] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1408.562460] perf: interrupt took too long (12139 > 12137), lowering kernel.perf_event_max_sample_rate to 16000 14:38:15 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:15 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1408.668701] perf: interrupt took too long (15238 > 15173), lowering kernel.perf_event_max_sample_rate to 13000 14:38:15 executing program 4: timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x9, &(0x7f0000000200)=[{&(0x7f0000000340)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b8200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33353633373030303500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000002000000000000039c043f6970341999833e8e90d2470c4010040000c00000000000000dbf4655f000000000000000000", 0x35, 0x6a1c297e}, {&(0x7f0000010200)="0100000000000500400008000000000000000000000000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000005000f000300040000", 0x15, 0x1000}, {0x0}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4080}, {0x0, 0x0, 0x8004500}, {0x0}, {&(0x7f0000013000)="504d4d00504d4dffdcf465", 0xb, 0x40000}], 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {r1, r2+10000000}}, 0x0) 14:38:15 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0xff, 0x3, 0x9, 0x0, 0x7fffffff, 0x4040, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0xffff}, 0x40000, 0x7, 0xa87d, 0x1, 0x3, 0x3, 0x2, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0xb) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/160, 0xa0}, {&(0x7f0000000180)=""/220, 0xdc}], 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:38:15 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:15 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:15 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="240028372149757f0000", @ANYRES16=r2, @ANYBLOB="ff0200000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0xfffffffffffffffe}, 0x2000c011) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x18}}], 0x7ffff000, 0x0) 14:38:15 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:38:30 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x52, 0x0, 0x0, 0x0, 0x0, 0x7aa2, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x224841, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x1, 0xff}) lseek(r3, 0x80000000, 0x2) readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000001500)={{r5}, "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"}) 14:38:30 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:30 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:30 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:30 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 14:38:30 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 14:38:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0xac, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}, @nested={0x90, 0x0, 0x0, 0x1, [@typed={0x8a, 0x35, 0x0, 0x0, @binary="d83aac662a156d55716655d78cbc3a6a5dd0ddc92d6229519bcf4144fd465d68e9e4e47c360494436a5cc103c3a4bf3d7817008e5f2b3fe554bd71f82b8ae98e5eaa8ce2d0ec13af37516643a01e6a1134546814eb3845629bf50ec835aafb596c19d40da4a2b6c2347be915c631777e945be1d5884d7c5763896d6a9b91dd026334a24b3923"}]}]}, 0xac}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') fallocate(r0, 0x10, 0x9, 0x4) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x18c, 0x39, 0x200, 0x70bd2c, 0x25dfdbfc, {0xb}, [@generic="52ef313c7e3cc3c386de4d3ff49ac9afa2003026977e2553be2db7e17c1e07bd37fea91cf5c3938e07bf5ec3264043ec4ce2a5c4ad1b4bae2de02d", @nested={0x13b, 0x24, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @ipv4=@empty}, @typed={0xf8, 0x22, 0x0, 0x0, @binary="fe350735c2dfee78fa14218012544e7548b32134dfcefbe50853f1088c31201ab5e7ceec47c4af88dc520dbdbc58838a34832ef3c8a83c7976906221c571e78a32ed936cc4b8de0a93c68916caf5e6706502877eeb30f5b0baae8f7a9a1fff2a6acb1212646dc91880af8a3041df6213893146a423e8fc3d9ba2503d6a434bd41a6c03c405dff0b06bd0872d5a0b83834e8314c4f119154405ec344e6f8d73b5f84fa971935957a6323947bfcbbe5a43a9b2bde41b6c83bbba2e09a6dae1155504babfde91561eafa48350534a5625a9217038fd207d95f954bb474738a20f30fd4e7e3eb87a66bf6f5e3fc54783ffe2f6bac220"}, @typed={0x8, 0x2e, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="f11ef40b2303170392fac55d992b06977a88342da28a2549eeb525c2a51b89a6fc4c3b68b07b305b03ec1ada598a90"]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4008801}, 0x24004000) 14:38:30 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1423.861761] FAULT_INJECTION: forcing a failure. [ 1423.861761] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.864502] CPU: 1 PID: 8437 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1423.866120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 14:38:30 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1423.868089] Call Trace: [ 1423.868939] dump_stack+0x107/0x167 [ 1423.869776] should_fail.cold+0x5/0xa [ 1423.870655] ? create_object.isra.0+0x3a/0xa20 [ 1423.871715] should_failslab+0x5/0x20 [ 1423.872592] kmem_cache_alloc+0x5b/0x310 [ 1423.873526] ? mark_held_locks+0x9e/0xe0 [ 1423.874460] create_object.isra.0+0x3a/0xa20 [ 1423.875478] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1423.876650] kmem_cache_alloc_bulk+0x168/0x320 [ 1423.877700] io_submit_sqes+0x6fe6/0x8610 [ 1423.878688] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1423.879818] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1423.880941] ? find_held_lock+0x2c/0x110 [ 1423.881869] ? io_submit_sqes+0x8610/0x8610 [ 1423.882874] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1423.883974] ? wait_for_completion_io+0x270/0x270 [ 1423.885067] ? rcu_read_lock_any_held+0x75/0xa0 [ 1423.886122] ? vfs_write+0x354/0xb10 [ 1423.886985] ? fput_many+0x2f/0x1a0 [ 1423.887813] ? ksys_write+0x1a9/0x260 [ 1423.888679] ? __ia32_sys_read+0xb0/0xb0 [ 1423.889610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1423.890822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1423.891992] do_syscall_64+0x33/0x40 [ 1423.892834] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1423.893992] RIP: 0033:0x7faf61c84b19 [ 1423.894842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1423.899003] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1423.900726] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1423.902334] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1423.903959] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1423.905588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1423.907221] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1423.913059] FAULT_INJECTION: forcing a failure. [ 1423.913059] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.915622] CPU: 1 PID: 8448 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1423.917156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1423.919030] Call Trace: [ 1423.919625] dump_stack+0x107/0x167 [ 1423.920447] should_fail.cold+0x5/0xa [ 1423.921303] ? create_object.isra.0+0x3a/0xa20 [ 1423.922709] should_failslab+0x5/0x20 [ 1423.923648] kmem_cache_alloc+0x5b/0x310 [ 1423.924566] ? mark_held_locks+0x9e/0xe0 [ 1423.925499] create_object.isra.0+0x3a/0xa20 [ 1423.926486] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1423.927645] kmem_cache_alloc_bulk+0x168/0x320 [ 1423.928679] io_submit_sqes+0x6fe6/0x8610 [ 1423.929647] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1423.930782] __do_sys_io_uring_enter+0x6b2/0x1890 14:38:30 executing program 4: getresuid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)) unlinkat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xe0) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)) finit_module(r2, 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="18100000f800000000000000fb1506090ed24540a56c07b77505a7ff5a7797480b29172412065da865c7e77122f8bbfca766b5edd27aa14ac780486498325b63e52907dbdf5af66b9ed158d6466f983b0c911211bda9dfebdfd91d83100d69e8d9db6771ecfb996fba8f56b2eace527253e9d6864358697bd268e02c77eda2cb136065359b1504ab32f75b56a9182ef3760a1e63b51f54f44871374677f66a26376c5c12da9689df3818d23c5acfd64ddd27dfec5326dfa01e3d6b59047d90472a85ae10602034fee0df9f91f0e32f2a2f19793effe59bda71a68a74c04ab02f11f54436e3013a643e02f550b15657eb6a8c30c5fdd6dc2a28e9ef110dccc2bd95cf160f6458686546a5b07d88a0139ad26f4b79004dd852fafc81928c79b196f727f0a742c4cc0ecb48a2cddf8b0f5c0180591d9805a16ac929924ded93f058285a0ca67486f16c2e5dfbcba485f17d6fb1975a3c98e1895f93a5d9bd16af7755cb3a8620e304c23a3e62aa1191a664fed5956b5951158937082338113f962d986335143366ac318f0e0bb5d2f8c082d73037e27f99558f4d900c113ec0e841d731da36937546485249b1a61b5333032d1a66ca1757369dce13793d1bbf3fe379a64fd6a3c8f27ad07ab96f9cb89ba7ba206003bcd8740c6ab971bd6c4086ee54d28314122927ad98494949cc47719019514343f8566447ec3def59493df565b53970d27abf6f535b50290066e967333356e2915d3b2850b424d48ed52479cd3822c45c0935012aa1c6ed50eb5c28b09156c41cfb11c7846b4b2d3af084bf32cb913bf628ae46254c609c33fa7d8014c0bc423d567e131f3045ef5ca5d44a46c4ce25fbfdca95feb72bd84546677ace2497040d649d7cdc7c4ad086df65d726e4b938785fe37e78cc99079574371391b152b7ee760290b8c509edca59221e23fc6ac82db70af8b9a382af312b241918084fcc72e8a9bd7c0225880f21fd4fc45e18a85f4c0f30021bb69445e4db1fa538cea053ec18bb5a66f0a3ffe0c48f202260dae29d44bb5b892092d4d0b6a55ba7ddfb6f5269168052253a94c964cf469c64d505d376dc2b7e3dff9a85d6d811c6099c32133682224d1f577be43e4ecdd50a15a7aac84ed1ca80b25ab3bc3186cf5d62ccad43c04823760687609bdf91487029bffc5639cc54bfffd3ad3b5961038b48d70837129e8db2a741e4770621275a8eb288cf7f61f78240ecdd3761c3f75ac64deba40d59cac6f721e8134605de819884668235827de713f9192c536b173ce293840658056a39c7649140dc98832fc26985d13f299a4f69817033df35d373bf93673d2bdcbe66bded93d636aabe6d4da20853030f918c5d87325a0f8f5b8cb00c94604397ae4c45a2519aad1766baa6d08acf9854aff63e340bf203500964380bbdd3d730a1d273db8676d1f98eaa0b15d61c806eb6eff34e0d077f8f8580dd7c55a919a41ef80d7a54f47291ad6ec3bd9217f35a97598911eda2ab8e53c35ee72bbedb78f87819fba3fd8978f75f77b30ff13b16ad6a634376bae41d86ae256230ced0f93ca71a4ffdaea242c937be9eb99a944ec7de67cc15724d2b9af593b176e5d9b562222407da2d22bdeca8eb1c1108a01f214e31424f2304cbc4104d2ac05df9ca5a67a43e45ae6e201e1f2f0a41ca2ca465066cc2e212559c54c56c18e799f06f6e89ab0e55ba79a303f86ebc5efc3ce20796ab03550ea55a42c27ab23f85307f5961123dec0981f348930410f012d91030b6e2bada652b5e691da91cd31b885d5d9dc097562a16ffbad191ef16b68d7bb251039fffa08ed9485b1df3be949883943eff154c5dcbdea72edf2a8b86ac355bb23ef255739aaa5f4dc1b0d64d72594b3b586ad67cc3cdef2da6fb2be61a64998a4ce9b149593156f2cfc91d26718e3ce8ff2da7460081815cb4f9d90cfa4f363c41a025d5bf694b6669d1d53cbde16d1f5a4b0b64402235af9d3e7ac5b6a336147cd8c30cb3f11b4f74995fd250c39628d592dd2eb44d3ceed04980fa2a4d89593b527a9e1071ab66f638415469b9570d47513ae8337df7e378f5e767fae8f2ae768846b67d71fdc9465a616c5606a8feb893179c1483dbdb47e1357407ad666d5b2b693f7598302b2789174817434af81b73fbb6fdae8d2b862fe9124422acc61f30cb355fe9737965f82d41924be2703f9775354b4d4796fd2547c2a32a0ff1c6316f5bec276a583b738acf1d5b81a155908c028a0065051e4c806ea2214f896f645cdacccc31273963cf0317bc370c65d25f8342e7dc6107a5e69e94277e2f360c3427d585015fd80aa2f3b1184844b6959598666cd70f23fce9c896553bf63047edb6f393e59397c8fd553dae1b4f101fd54d85ab519202848b9be9fd2ef96b4c4cc24b3bfb6251011851f366f4a4a938011ce0d9a96905b0d3d6a23098bed95dc3887cd7e61adec3f34466097b9b5014cd728b94eedac01c5c0a17b550b668746a19e9e65862018c7754da4007b71c67d8942905083e2e3e62150baba0d9d76094b75f35685343ed7c49b7bafd8550535274fa446ec8dd81b3ac58d574eb45d862e2e236c3f5692499e28d7394a51a908d0fc1493caa7742fd8b212fb23bf14e35bb6f682b8563e04e11645b2ff5b761f31d0e21f16708cc00bf1021c58e72d9869ec21650190000c90d3aab6573ee5d8b43f955c63a7f2128667e45826a00067cb4e08964904f280cca87360c092f43c6ba98c0fa4a5b21e190936107c4b183e2c18b8fc2af17bad7386838c1692e7fdb9e205c20aafc2a25e52d2713924c43cd97b05b2a0e12a12aa33645cf0ec1852c40123bdaec90b8104ff209e4c104aa497c0fc90eb49063527186ef795c6a5a8fb98d83462ab3c5229f2a6c1e356b6aa4c764728602697cc8bc505e253fe9490bfaae9877bcbcfd44899008f5e6b9cd4a36ecef2bd5c3c5746222e11b2b69b6d62c283c972f4b6fcd989b218b31b99d6c6857a37eb0b224a96ae74c98f2b18a7e60e2f880739ca62a462dd757e6f366ef1fa43e0f03ac2b78c7de41ecfbed5c4d0004bb4392aba961394cd1219bbe3ba422401f9c88dea9301a2cafb5de572871d4ef531334aeaaaaae2017c30e932fa8cbd8e44068ec7d716bfff8bde1907eb509faef5fc6c6d3f1e39d3b9845ac165b3da6c542be3e24a8551c3a5b3b68d2452c6fbafe1dbf2ae96e5accda67742d5d3b640f25a282e5f307803af79bb59790dd13d8c664f23e7fa181a6c4c7e116ab21bc110ee114b0f41c0b77b9e181a6650619658ad8f5d0716c658860421fc3f275005e6b4d5fed950263eecc7dfb863fd5cadbc9ecf220d08b187297849fd3cfc012809f99bbc3c4a7d9a2d8a8989231956e5fe1adee1539b516882670524541de964b4cc46019efe1012b5da73946dbe9641206ed8560d7d19c532c31d4503e2f36c7b1adb6458cefade1773b2c4b4b656b7cca13cadb355149dfeba62c8de3e03d1ad97614fcbb0e09500d7a70874db7edca4c4934ed3d828cc58630bb171c78204a09bc4690e02c8f03ae87a2375955926c00c2df668a269a9fa55c41e58625b5d34a4d45ccf571a566d509aa3be8f5fc5e5980c46476876888fea91e97581c6cd687dd1ec976e7da430ff346bdb4cb7edcbb0b0b399621431f0a06254e3d156144749c791f73a8b2349621c84c0305b1da4afb056f3d880c47afd02844034f9ed9905a504491567a91cf02df2f8c5c4458ab525ede63ef14f7d844123c5a9608f4624a29b6d189133bc710ba5e3ff0760d0709c2a5a380e9f6121674847cc8d98fe8c9b3f9c2f9b2b87f95e7ab7d676ccef7fd1c83dd2711391231d998b4a308e92d7d3873451c9ee2d19c30abeec5d9be8e751d3e43e8e6603600e15fa7f2f6fccdf974adb41cc379c0748c0818213364dcb465a7ca2dfeb09e6cc246599a742ff5de6b1081b7d64f7dfc84b3b97679c807f9f7ef7a1588687569395307c1da3dc746fe36cf767f26698e27d3a1520ccc9d4db110ad14227388bb09a1fa5b91c19afa30b48fb35c9f5a72d86a7badcf5f6134c7638ecd758c9b0b4f25876815d77dcde1f877bec204e36567b8211727653d8298cfe612fc3f59b1388b50486e533ac00352fb6f66ced95aea784373fc92cd571b9b233612737de6d3acd4404ee15b67f657a7066eb5730d9db45a47a3a27bdae98384da6c4a3c1e69b76b8fe80c67b3c0e12bb7c9eae1abc40b2e2202ea961c9271285ca4c45224e2728984102582ef8f0c20441343087047bc480b05fce953594c7e516ff0ab95c4cb384ee9e51193faf197770f76eccab70eacc5173e42c0b9a162ca96c1f5aa896794f790523f1cf5b3fe846596e3e5f0870bf48b2786fc343bb85c3b055625a6444cc19d1588e3dd923c3c18d0fa2af363f78dc892837a61badb295301fb9c575f8f30801aada701bdd434344b964646371b84c66e5742315780df46c1ad01fcbfd58eeeae425b4b0fb6c0560c329f6ecd57cf25295f46f99a743e8e70d4fea9288da4b7702f46778e44d56ba9954632d7b2861a98dd60d734e0b44e1e859b51a003f92034fccb1f7bd9ff6c3c4c1c4df513b0e8935ec59224d040afa22ef3e81ea137176535c0d363fb3c986cd50d8222620092182e4494328d093a255a7cf4c385229bedc69c4c1b463109ee8692404233a41ce1e22e17d819a8b122a7c5636cb1b5af44bb7a34ffbd00ac675e2655782d6db51fc85c5b389ce4e59c96c544977901f15920fba9e8577cd5fc79e32ebe657f257acaee8ba8c03aedb63cbd714dfd6bbcbd70ef8be272b179d0fe7f4f11d609f98813a4977cd35d9da9b4cf994df8f6c18eb5567801cdff05b04fd4d59e12e15a8bfcf46cf924d833dec83c416929e890c0248ffb894ed1dee8e3ad6824d55d0419a4f7aa055cb96206b4e46bba40c75d9865bf594ef2a3b83183ed5473b82b5e5eb6959b058ed63ec5ed65a79e3e8103235362188d93370e88fc186b2b929ec9e5bc505cf7990eb01653a9ba5762b0e2ed80259c3b39fcbfae33f8304e0b29c416c8b020d1f6b27b460def4aabd21bb08494a30f438fe29292ce6bd1928fb4a046614eec5c5b62c5ff8b4098dffd3e93380e57697b7db028ed0cde828da37ffedbac7a472839c76c80913eaf660d4e65360ec4e0231fcfb0da81f4cb1d1214aaff7e2990edac08736f7a88e7e309675b38a40957960039f3808ea557a442841d488ae991305d09045cd5f618215fb0f7e36fda86a8353ca92e08bb9f38f7f17a143a854ad6b3a1d2d9853b0df8545678b1c1a5b47f3a9004f84dfb1b863e0636b5da9716d92e3964663380ac2a02a6daa1ba02a551c6e4e371645b33fe6e63ab626a4dfd8dcb22a8e286a540f9d04a0edd7c49c04e57597df0871a454a849834482b5dc1e2e72bf9d062eec8625be55d5bbbaf0f4926c7e0833e84c086b68a72c9a619d50634b1e899f3ce9a0c0e62fbdf8f57c17da28af785b7d5836a01a107af3e6cc478f9958d5a42b6f313d280e20b6a2f4764259cf9cbd1f258a0e5617cd3c259667ab2294eed5970d295d0001551bf8624950042f37ae6d58a46d23cd1a633dd3e4334d2e9ad33067e4004b57ea1852bc1d1fb8246e323f3e6eb7a099da3b4afeb03c667bc872c71d059d54de3014dde8c56592187dcd739b9c7e749147c0094ec0b5298e4d834eab43b081ebf0c5d31d69526fbc92afac2abada6c55ce7fe23cff165d74b5ea90b8b8feec91657d563b3f0d6393b592e0b6c29c740c13400"/4109], 0x444502) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r3, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) [ 1423.931870] ? find_held_lock+0x2c/0x110 [ 1423.932980] ? io_submit_sqes+0x8610/0x8610 [ 1423.933957] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1423.935062] ? wait_for_completion_io+0x270/0x270 [ 1423.936148] ? rcu_read_lock_any_held+0x75/0xa0 [ 1423.937195] ? vfs_write+0x354/0xb10 [ 1423.938035] ? fput_many+0x2f/0x1a0 [ 1423.938867] ? ksys_write+0x1a9/0x260 [ 1423.939725] ? __ia32_sys_read+0xb0/0xb0 [ 1423.940645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1423.941827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1423.943004] do_syscall_64+0x33/0x40 [ 1423.943839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1423.944983] RIP: 0033:0x7f57e5b24b19 14:38:30 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x75, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r2 = inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0x300) inotify_rm_watch(0xffffffffffffffff, r2) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x48, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x21) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) creat(&(0x7f0000000040)='./file0\x00', 0x10d) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) sendmsg$sock(r5, &(0x7f0000000240)={&(0x7f0000000100)=@x25, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="014a44aa6c9192a75fa822be6ebb4cdd0c1a72014c370fd21691a954601f4eeb7a7cd334e277de9b3b8f44b15b34b20166d1682139294a789f56e2c7c7edd10051c3597006a9ac875755f530961367e02cc7cc41b180dffd22aeebbf1f3045cfb3c825b56922268a6994d9b0c955583a27558fb2c910b9", 0x77}], 0x1, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x55a}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x971}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}, 0x4000040) [ 1423.945819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1423.950295] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1423.952074] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1423.953717] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 14:38:30 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1423.955424] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1423.957102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1423.958763] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:38:30 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1424.024871] audit: type=1400 audit(1735915110.946:245): avc: denied { module_load } for pid=8459 comm="syz-executor.4" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1086 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 1424.025177] Module has invalid ELF structures 14:38:30 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:30 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1000) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xfc, 0x8, 0x2, 0x9e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x70, 0x1, @perf_bp={&(0x7f0000000040), 0xd}, 0x4400, 0x800, 0x1, 0x9, 0x600, 0x1000, 0x6, 0x0, 0x6, 0x0, 0x1118}, 0x0, 0x4, r0, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40280, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1424.070873] Module has invalid ELF structures 14:38:31 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:43 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f00000014c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000006c0)={0x0, 0x1, 0x2, 0x1}) rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffe37, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) lseek(r1, 0x0, 0x3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2000000}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xfffffffffffffeff, 0x0, 0x9d, 0x5, 0x0, 0x8}, 0x0, &(0x7f0000001440)={0xe5, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) quotactl(0x0, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000000180)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000200)={0x1, 0x0, {0xa, 0x19, 0x12, 0xd, 0x9, 0xb54, 0x3, 0x142, 0xffffffffffffffff}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7efb966000000000000000000000000000000000000000000000000000000000a0000000000000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x150}}, 0x0) 14:38:43 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:38:43 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:43 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 14:38:43 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xe20b) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 14:38:43 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:43 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 14:38:43 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1437.049459] FAULT_INJECTION: forcing a failure. [ 1437.049459] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.050927] CPU: 1 PID: 8484 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1437.051786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1437.052830] Call Trace: [ 1437.053167] dump_stack+0x107/0x167 [ 1437.053623] should_fail.cold+0x5/0xa [ 1437.054103] ? io_setup_async_rw+0x180/0x580 [ 1437.054654] should_failslab+0x5/0x20 [ 1437.055136] __kmalloc+0x72/0x390 [ 1437.055592] io_setup_async_rw+0x180/0x580 [ 1437.056128] io_read+0xe98/0x11e0 [ 1437.056574] ? kiocb_done+0xc90/0xc90 [ 1437.057050] ? mark_lock+0xf5/0x2df0 [ 1437.057521] ? lock_chain_count+0x20/0x20 [ 1437.058046] ? __lockdep_reset_lock+0x180/0x180 [ 1437.058629] ? lock_acquire+0x197/0x470 [ 1437.059135] ? __lock_acquire+0xbb1/0x5b00 [ 1437.059681] io_issue_sqe+0x2e8a/0x77b0 [ 1437.060181] ? perf_trace_lock+0xac/0x490 [ 1437.060698] ? lock_chain_count+0x20/0x20 [ 1437.061221] ? io_connect+0x610/0x610 [ 1437.061697] ? lock_acquire+0x197/0x470 [ 1437.062192] ? find_held_lock+0x2c/0x110 [ 1437.062704] ? __fget_files+0x2cf/0x520 [ 1437.063211] ? lock_downgrade+0x6d0/0x6d0 [ 1437.063733] __io_queue_sqe+0x90/0x9d0 [ 1437.064222] ? io_issue_sqe+0x77b0/0x77b0 [ 1437.064740] ? __fget_files+0x2f8/0x520 [ 1437.065236] ? io_prep_rw+0x7f5/0x1050 [ 1437.065725] io_submit_sqes+0x44aa/0x8610 [ 1437.066263] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1437.066882] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1437.067495] ? find_held_lock+0x2c/0x110 [ 1437.068014] ? io_submit_sqes+0x8610/0x8610 [ 1437.068561] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1437.069162] ? wait_for_completion_io+0x270/0x270 [ 1437.069771] ? rcu_read_lock_any_held+0x75/0xa0 [ 1437.070352] ? vfs_write+0x354/0xb10 [ 1437.070824] ? fput_many+0x2f/0x1a0 [ 1437.071316] ? ksys_write+0x1a9/0x260 [ 1437.071800] ? __ia32_sys_read+0xb0/0xb0 [ 1437.072308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1437.072964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1437.073607] do_syscall_64+0x33/0x40 [ 1437.074075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1437.074724] RIP: 0033:0x7faf61c84b19 [ 1437.075192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1437.077517] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1437.078473] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1437.079373] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1437.080267] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1437.081173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1437.082071] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1437.107325] FAULT_INJECTION: forcing a failure. [ 1437.107325] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.109944] CPU: 0 PID: 8489 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1437.111510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1437.113396] Call Trace: [ 1437.114000] dump_stack+0x107/0x167 [ 1437.114832] should_fail.cold+0x5/0xa [ 1437.115711] ? create_object.isra.0+0x3a/0xa20 [ 1437.116755] should_failslab+0x5/0x20 [ 1437.117616] kmem_cache_alloc+0x5b/0x310 [ 1437.118539] ? mark_held_locks+0x9e/0xe0 [ 1437.119468] create_object.isra.0+0x3a/0xa20 [ 1437.120458] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1437.121613] kmem_cache_alloc_bulk+0x168/0x320 [ 1437.122652] io_submit_sqes+0x6fe6/0x8610 [ 1437.123628] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1437.124753] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1437.125848] ? find_held_lock+0x2c/0x110 [ 1437.126768] ? io_submit_sqes+0x8610/0x8610 [ 1437.127763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1437.128863] ? wait_for_completion_io+0x270/0x270 [ 1437.129956] ? rcu_read_lock_any_held+0x75/0xa0 [ 1437.131005] ? vfs_write+0x354/0xb10 [ 1437.131856] ? fput_many+0x2f/0x1a0 [ 1437.132678] ? ksys_write+0x1a9/0x260 [ 1437.133541] ? __ia32_sys_read+0xb0/0xb0 [ 1437.134469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1437.135649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1437.136807] do_syscall_64+0x33/0x40 [ 1437.137642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1437.138790] RIP: 0033:0x7f57e5b24b19 [ 1437.139639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1437.143761] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1437.145470] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1437.147065] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1437.148672] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1437.150266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1437.151870] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:38:44 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:38:44 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:44 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xf9, 0x9, 0x4, 0x0, 0x200, 0x500, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xf0f, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x8001}, 0x2400, 0xff, 0x1, 0x6, 0x3, 0x5, 0x4c, 0x0, 0x1f, 0x0, 0x498829f8}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:38:44 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:44 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) [ 1437.316159] FAULT_INJECTION: forcing a failure. [ 1437.316159] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.317554] CPU: 1 PID: 8503 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1437.318330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1437.319285] Call Trace: [ 1437.319591] dump_stack+0x107/0x167 [ 1437.320012] should_fail.cold+0x5/0xa [ 1437.320452] ? create_object.isra.0+0x3a/0xa20 [ 1437.320977] should_failslab+0x5/0x20 [ 1437.321415] kmem_cache_alloc+0x5b/0x310 [ 1437.321881] ? mark_held_locks+0x9e/0xe0 [ 1437.322349] create_object.isra.0+0x3a/0xa20 [ 1437.322867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1437.323467] kmem_cache_alloc_bulk+0x168/0x320 [ 1437.324012] io_submit_sqes+0x6fe6/0x8610 [ 1437.324518] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1437.325103] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1437.325667] ? find_held_lock+0x2c/0x110 [ 1437.326148] ? io_submit_sqes+0x8610/0x8610 [ 1437.326659] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1437.327232] ? wait_for_completion_io+0x270/0x270 [ 1437.327805] ? rcu_read_lock_any_held+0x75/0xa0 [ 1437.328349] ? vfs_write+0x354/0xb10 [ 1437.328786] ? fput_many+0x2f/0x1a0 [ 1437.329211] ? ksys_write+0x1a9/0x260 [ 1437.329659] ? __ia32_sys_read+0xb0/0xb0 [ 1437.330139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1437.330757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1437.331371] do_syscall_64+0x33/0x40 [ 1437.331809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1437.332409] RIP: 0033:0x7faf61c84b19 [ 1437.332844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1437.335005] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1437.335909] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1437.336746] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1437.337582] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1437.338417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1437.339259] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:38:44 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:38:44 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:38:44 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:01 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 14:39:01 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 14:39:01 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:01 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 14:39:01 executing program 4: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x46, 0x101, 0x800, "dc494651ca33273dd1e06d7de8d4fc3434d99607ca4bde1b19bd3398f3b1f334d8676a0458547e473467dd58c6bcacfbb3271ab37abf041f2065aa50bd5d4392641d640fa22f"}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) r5 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) syz_io_uring_setup(0x624a, &(0x7f0000000240)={0x0, 0x5ce6, 0x10, 0x0, 0x1df}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000380)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x1, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x75) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r10}}, 0xfffffffb) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x8e, 0x1, &(0x7f0000000000)="b9e6", 0x7, 0x0, 0x1, {0x1, r10}}, 0x77) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000001680)={0xa, 0x4e24, 0x0, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 14:39:01 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:39:01 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:01 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1454.954624] FAULT_INJECTION: forcing a failure. [ 1454.954624] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.957376] CPU: 0 PID: 8533 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1454.958930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.960808] Call Trace: [ 1454.961405] dump_stack+0x107/0x167 [ 1454.962238] should_fail.cold+0x5/0xa [ 1454.963106] ? create_object.isra.0+0x3a/0xa20 [ 1454.964161] should_failslab+0x5/0x20 [ 1454.965033] kmem_cache_alloc+0x5b/0x310 [ 1454.965963] ? mark_held_locks+0x9e/0xe0 [ 1454.966890] create_object.isra.0+0x3a/0xa20 [ 1454.967902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1454.969072] kmem_cache_alloc_bulk+0x168/0x320 [ 1454.969357] FAULT_INJECTION: forcing a failure. [ 1454.969357] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.970116] io_submit_sqes+0x6fe6/0x8610 [ 1454.970171] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1454.974574] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1454.975668] ? find_held_lock+0x2c/0x110 [ 1454.976602] ? io_submit_sqes+0x8610/0x8610 [ 1454.977594] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1454.978692] ? wait_for_completion_io+0x270/0x270 [ 1454.979792] ? rcu_read_lock_any_held+0x75/0xa0 [ 1454.980845] ? vfs_write+0x354/0xb10 [ 1454.981687] ? fput_many+0x2f/0x1a0 [ 1454.982510] ? ksys_write+0x1a9/0x260 [ 1454.983377] ? __ia32_sys_read+0xb0/0xb0 [ 1454.984317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1454.985510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1454.986696] do_syscall_64+0x33/0x40 [ 1454.987538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1454.988699] RIP: 0033:0x7f57e5b24b19 [ 1454.989539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.993716] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1454.995447] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1454.997080] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1454.998706] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.000354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1455.001983] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1455.003651] CPU: 1 PID: 8537 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1455.005128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1455.006905] Call Trace: [ 1455.007493] dump_stack+0x107/0x167 [ 1455.008277] should_fail.cold+0x5/0xa [ 1455.009099] should_failslab+0x5/0x20 [ 1455.009910] kmem_cache_alloc_bulk+0x4b/0x320 [ 1455.010871] io_submit_sqes+0x6fe6/0x8610 [ 1455.011766] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1455.012837] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1455.013909] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1455.014963] ? find_held_lock+0x2c/0x110 [ 1455.015844] ? io_submit_sqes+0x8610/0x8610 [ 1455.016774] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1455.017803] ? wait_for_completion_io+0x270/0x270 [ 1455.018836] ? rcu_read_lock_any_held+0x75/0xa0 [ 1455.019830] ? vfs_write+0x354/0xb10 [ 1455.020629] ? fput_many+0x2f/0x1a0 [ 1455.021408] ? ksys_write+0x1a9/0x260 [ 1455.022231] ? __ia32_sys_read+0xb0/0xb0 [ 1455.023104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1455.024247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1455.025352] do_syscall_64+0x33/0x40 [ 1455.026164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1455.027266] RIP: 0033:0x7f6a6cb03b19 [ 1455.028066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1455.031997] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1455.033639] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1455.035161] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1455.036683] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.038196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.039712] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1455.057706] FAULT_INJECTION: forcing a failure. [ 1455.057706] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.060369] CPU: 0 PID: 8536 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1455.061943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1455.063833] Call Trace: [ 1455.064434] dump_stack+0x107/0x167 [ 1455.065262] should_fail.cold+0x5/0xa [ 1455.066132] ? __io_queue_sqe+0x666/0x9d0 [ 1455.067086] should_failslab+0x5/0x20 [ 1455.067966] kmem_cache_alloc_trace+0x55/0x320 [ 1455.069009] ? lock_downgrade+0x6d0/0x6d0 [ 1455.069968] __io_queue_sqe+0x666/0x9d0 [ 1455.070883] ? io_issue_sqe+0x77b0/0x77b0 [ 1455.071843] ? __fget_files+0x2f8/0x520 [ 1455.072757] ? io_prep_rw+0x7f5/0x1050 [ 1455.073653] io_submit_sqes+0x44aa/0x8610 [ 1455.074636] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1455.075767] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1455.076882] ? find_held_lock+0x2c/0x110 [ 1455.077807] ? io_submit_sqes+0x8610/0x8610 [ 1455.078796] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1455.079902] ? wait_for_completion_io+0x270/0x270 [ 1455.081009] ? rcu_read_lock_any_held+0x75/0xa0 [ 1455.082072] ? vfs_write+0x354/0xb10 [ 1455.082924] ? fput_many+0x2f/0x1a0 [ 1455.083756] ? ksys_write+0x1a9/0x260 [ 1455.084637] ? __ia32_sys_read+0xb0/0xb0 [ 1455.085570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1455.086767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1455.087954] do_syscall_64+0x33/0x40 [ 1455.088806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1455.089968] RIP: 0033:0x7faf61c84b19 [ 1455.090812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1455.094999] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1455.096737] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1455.098349] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1455.099974] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.101595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1455.103227] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:39:02 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, r2}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:39:02 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) symlinkat(0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)=':\x15\x00U\x1bT;\xfa4\x8dd\xa0\x9d&\xb0Z\xdfv\x8b\x84\x87\xa8K\xff\xb5\xce\xb4\xa7\xab\xc6\xf1\a\xdb\xc2m\xb2w\b\xb7*v\xfdo\x83\'\xd9[\xee|4P\xa7\xe8\xad\x82,\xf5\xd1\xea\xdb\xf4\xf5F\xc0H\v\x8d\xbc\x9e)&nh~T\xb2\x98\xdf!\x1c\xdb\x9d\xbfH\x032\x15\x80\x19\xc0\fn\xdc\x8dk\xf2\xe4\x80\x9aJ\xe7\xdb\x8e\xd3\x80(i\x82CT\xb3j%\x94\x15\xc6', 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x3f, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(0xffffffffffffffff, r0, 0x0, 0x500000001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 14:39:02 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x8, 0x50, 0x3, 0x0, 0x3, 0x80800, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x7, @perf_bp={&(0x7f0000000000), 0x10}, 0x4, 0x4, 0x8001, 0x4, 0x4, 0x7, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x9, r0, 0xb) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r4}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x4, 0x4000, @fd_index=0x3, 0x8, &(0x7f0000000140)="2c8112738cec15b4465805743917ecc027ecf3c4314d7d193f11152d456e157b58e4046bbda2a0f987275937e8f5475429dc63efdafd9f7656c2d5f34db76dc38534343bae280e62b13195d373480fe2", 0x50, 0x8, 0x1, {0x0, r4}}, 0x2) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r6, r5) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:39:02 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:17 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 14:39:17 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 14:39:17 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:17 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:17 executing program 4: unshare(0x28020600) semget$private(0x0, 0x0, 0x100) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x47, 0x0, 0x8, 0x8, 0x0, 0x6545, 0x43022, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x8001, 0x8000, 0x5, 0x7fff, 0x1, 0x40, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xf, r1, 0x6) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unshare(0x48020200) 14:39:17 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:17 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 14:39:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syncfs(r2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f0000000640)='net/hci\x00') r5 = getpgid(0x0) syz_open_procfs(r5, &(0x7f0000000640)='net/hci\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4105, 0x1009}], 0x1) kcmp(r4, r5, 0x4, r2, r6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/connector\x00') perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0xc0, 0x5, 0x0, 0x0, 0x5, 0x4, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2d22, 0x2, @perf_config_ext={0x4}, 0x2042, 0x5, 0x10000, 0x9, 0x20, 0x10000, 0x787, 0x0, 0xffff43b6, 0x0, 0x9}, r4, 0x1, r7, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1470.166436] FAULT_INJECTION: forcing a failure. [ 1470.166436] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.168149] CPU: 1 PID: 8568 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1470.169125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1470.170324] Call Trace: [ 1470.170720] dump_stack+0x107/0x167 [ 1470.171256] should_fail.cold+0x5/0xa [ 1470.171810] ? create_object.isra.0+0x3a/0xa20 [ 1470.172468] should_failslab+0x5/0x20 [ 1470.173005] kmem_cache_alloc+0x5b/0x310 [ 1470.173581] create_object.isra.0+0x3a/0xa20 [ 1470.174063] FAULT_INJECTION: forcing a failure. [ 1470.174063] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.174207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1470.174225] kmem_cache_alloc_bulk+0x168/0x320 [ 1470.174251] io_submit_sqes+0x6fe6/0x8610 [ 1470.178859] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1470.179561] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.180261] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.180949] ? find_held_lock+0x2c/0x110 [ 1470.181524] ? io_submit_sqes+0x8610/0x8610 [ 1470.182138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1470.182820] ? wait_for_completion_io+0x270/0x270 [ 1470.183502] ? rcu_read_lock_any_held+0x75/0xa0 [ 1470.184157] ? vfs_write+0x354/0xb10 [ 1470.184686] ? fput_many+0x2f/0x1a0 [ 1470.185199] ? ksys_write+0x1a9/0x260 [ 1470.185733] ? __ia32_sys_read+0xb0/0xb0 [ 1470.186309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1470.187050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1470.187775] do_syscall_64+0x33/0x40 [ 1470.188296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1470.189025] RIP: 0033:0x7f6a6cb03b19 [ 1470.189544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.192136] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1470.193220] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1470.194219] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1470.195226] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.196233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.197243] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1470.198281] CPU: 0 PID: 8571 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1470.199920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1470.201734] FAULT_INJECTION: forcing a failure. [ 1470.201734] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.201902] Call Trace: [ 1470.201931] dump_stack+0x107/0x167 [ 1470.201956] should_fail.cold+0x5/0xa [ 1470.205789] ? __io_queue_sqe+0x666/0x9d0 [ 1470.206786] should_failslab+0x5/0x20 [ 1470.207695] kmem_cache_alloc_trace+0x55/0x320 [ 1470.208793] ? lock_downgrade+0x6d0/0x6d0 [ 1470.209790] __io_queue_sqe+0x666/0x9d0 [ 1470.210746] ? io_issue_sqe+0x77b0/0x77b0 [ 1470.211734] ? __fget_files+0x2f8/0x520 [ 1470.212698] ? io_prep_rw+0x7f5/0x1050 [ 1470.213635] io_submit_sqes+0x44aa/0x8610 [ 1470.214658] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.215845] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.217005] ? find_held_lock+0x2c/0x110 [ 1470.217980] ? io_submit_sqes+0x8610/0x8610 [ 1470.219014] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1470.220163] ? wait_for_completion_io+0x270/0x270 [ 1470.221319] ? rcu_read_lock_any_held+0x75/0xa0 [ 1470.222420] ? vfs_write+0x354/0xb10 [ 1470.223303] ? fput_many+0x2f/0x1a0 [ 1470.224165] ? ksys_write+0x1a9/0x260 [ 1470.225076] ? __ia32_sys_read+0xb0/0xb0 [ 1470.226041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1470.227278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1470.228509] do_syscall_64+0x33/0x40 [ 1470.229389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1470.230600] RIP: 0033:0x7faf61c84b19 [ 1470.231479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.235827] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1470.237637] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1470.239320] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1470.241014] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.242697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.244387] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1470.246107] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1470.247094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1470.248228] Call Trace: [ 1470.248605] dump_stack+0x107/0x167 [ 1470.249102] should_fail.cold+0x5/0xa [ 1470.249618] ? io_setup_async_rw+0x180/0x580 [ 1470.250218] should_failslab+0x5/0x20 [ 1470.250735] __kmalloc+0x72/0x390 [ 1470.251210] io_setup_async_rw+0x180/0x580 [ 1470.251792] io_read+0xe98/0x11e0 [ 1470.252285] ? kiocb_done+0xc90/0xc90 [ 1470.252811] ? mark_lock+0xf5/0x2df0 [ 1470.253321] ? lock_chain_count+0x20/0x20 [ 1470.253897] ? __lockdep_reset_lock+0x180/0x180 [ 1470.254537] ? lock_acquire+0x197/0x470 [ 1470.255089] ? __lock_acquire+0xbb1/0x5b00 [ 1470.255667] io_issue_sqe+0x2e8a/0x77b0 [ 1470.256217] ? perf_trace_lock+0xac/0x490 [ 1470.256787] ? lock_chain_count+0x20/0x20 [ 1470.257354] ? io_connect+0x610/0x610 [ 1470.257878] ? lock_acquire+0x197/0x470 [ 1470.258419] ? find_held_lock+0x2c/0x110 [ 1470.258975] ? __fget_files+0x2cf/0x520 [ 1470.259513] ? lock_downgrade+0x6d0/0x6d0 [ 1470.260088] __io_queue_sqe+0x90/0x9d0 [ 1470.260629] ? io_issue_sqe+0x77b0/0x77b0 [ 1470.261191] ? __fget_files+0x2f8/0x520 [ 1470.261730] ? io_prep_rw+0x7f5/0x1050 [ 1470.262270] io_submit_sqes+0x44aa/0x8610 [ 1470.262852] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.263545] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.264211] ? find_held_lock+0x2c/0x110 [ 1470.264767] ? io_submit_sqes+0x8610/0x8610 [ 1470.265365] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1470.266030] ? wait_for_completion_io+0x270/0x270 [ 1470.266686] ? rcu_read_lock_any_held+0x75/0xa0 [ 1470.267313] ? vfs_write+0x354/0xb10 [ 1470.267816] ? fput_many+0x2f/0x1a0 [ 1470.268322] ? ksys_write+0x1a9/0x260 [ 1470.268841] ? __ia32_sys_read+0xb0/0xb0 [ 1470.269388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1470.270090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1470.270790] do_syscall_64+0x33/0x40 [ 1470.271286] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1470.271981] RIP: 0033:0x7f57e5b24b19 [ 1470.272493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.274996] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1470.276020] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1470.276984] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1470.277931] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.278876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.279826] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:39:17 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:17 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0xfffffffb, 0x5}) 14:39:17 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:17 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:17 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:17 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:17 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) [ 1470.724765] FAULT_INJECTION: forcing a failure. [ 1470.724765] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.726202] CPU: 1 PID: 8600 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1470.727021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1470.728004] Call Trace: [ 1470.728345] dump_stack+0x107/0x167 [ 1470.728794] should_fail.cold+0x5/0xa [ 1470.729264] ? create_object.isra.0+0x3a/0xa20 [ 1470.729824] should_failslab+0x5/0x20 [ 1470.730279] kmem_cache_alloc+0x5b/0x310 [ 1470.730752] create_object.isra.0+0x3a/0xa20 [ 1470.731267] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1470.731862] __kmalloc+0x16e/0x390 [ 1470.732279] io_setup_async_rw+0x180/0x580 [ 1470.732785] io_read+0xe98/0x11e0 [ 1470.733200] ? __is_insn_slot_addr+0x14c/0x290 [ 1470.733740] ? kiocb_done+0xc90/0xc90 [ 1470.734188] ? mark_lock+0xf5/0x2df0 [ 1470.734628] ? register_lock_class+0xbb/0x17b0 [ 1470.735162] ? arch_stack_walk+0x99/0xf0 [ 1470.735643] ? lock_chain_count+0x20/0x20 [ 1470.736129] ? is_dynamic_key+0x1e0/0x1e0 [ 1470.736632] ? __lock_acquire+0x1657/0x5b00 [ 1470.737143] ? __lock_acquire+0xbb1/0x5b00 [ 1470.737643] io_issue_sqe+0x2e8a/0x77b0 [ 1470.738113] ? perf_trace_lock+0xac/0x490 [ 1470.738596] ? lock_chain_count+0x20/0x20 [ 1470.739085] ? io_connect+0x610/0x610 [ 1470.739531] ? lock_acquire+0x197/0x470 [ 1470.739999] ? find_held_lock+0x2c/0x110 [ 1470.740496] ? __fget_files+0x2cf/0x520 [ 1470.740961] ? lock_downgrade+0x6d0/0x6d0 [ 1470.741456] __io_queue_sqe+0x90/0x9d0 [ 1470.741918] ? io_issue_sqe+0x77b0/0x77b0 [ 1470.742412] ? __fget_files+0x2f8/0x520 [ 1470.742878] ? io_prep_rw+0x7f5/0x1050 [ 1470.743347] io_submit_sqes+0x44aa/0x8610 [ 1470.743851] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.744440] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.745008] ? find_held_lock+0x2c/0x110 [ 1470.745486] ? io_submit_sqes+0x8610/0x8610 [ 1470.746005] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1470.746578] ? wait_for_completion_io+0x270/0x270 [ 1470.747146] ? rcu_read_lock_any_held+0x75/0xa0 [ 1470.747692] ? vfs_write+0x354/0xb10 [ 1470.748128] ? fput_many+0x2f/0x1a0 [ 1470.748562] ? ksys_write+0x1a9/0x260 [ 1470.749011] ? __ia32_sys_read+0xb0/0xb0 [ 1470.749495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1470.750104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1470.750705] do_syscall_64+0x33/0x40 [ 1470.751140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1470.751741] RIP: 0033:0x7faf61c84b19 [ 1470.752178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.754330] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1470.755230] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1470.756075] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1470.756923] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.757767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.758623] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:39:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080), 0x10) socket$inet6(0xa, 0xa, 0x2) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0xc00) close_range(r0, r1, 0x2) 14:39:17 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) [ 1470.906924] FAULT_INJECTION: forcing a failure. [ 1470.906924] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.909573] CPU: 0 PID: 8609 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1470.911183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1470.913134] Call Trace: [ 1470.913747] dump_stack+0x107/0x167 [ 1470.914565] should_fail.cold+0x5/0xa [ 1470.915460] ? create_object.isra.0+0x3a/0xa20 [ 1470.916538] should_failslab+0x5/0x20 [ 1470.917431] kmem_cache_alloc+0x5b/0x310 [ 1470.918366] ? mark_held_locks+0x9e/0xe0 [ 1470.919280] create_object.isra.0+0x3a/0xa20 [ 1470.920248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1470.921404] kmem_cache_alloc_bulk+0x168/0x320 [ 1470.922427] io_submit_sqes+0x6fe6/0x8610 [ 1470.923381] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.924500] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1470.925572] ? find_held_lock+0x2c/0x110 [ 1470.926482] ? io_submit_sqes+0x8610/0x8610 [ 1470.927459] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1470.928542] ? wait_for_completion_io+0x270/0x270 [ 1470.929616] ? rcu_read_lock_any_held+0x75/0xa0 [ 1470.930637] ? vfs_write+0x354/0xb10 [ 1470.931469] ? fput_many+0x2f/0x1a0 [ 1470.932298] ? ksys_write+0x1a9/0x260 [ 1470.933147] ? __ia32_sys_read+0xb0/0xb0 [ 1470.934055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1470.935215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1470.936403] do_syscall_64+0x33/0x40 [ 1470.937277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1470.938481] RIP: 0033:0x7f57e5b24b19 [ 1470.939336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.943632] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1470.945410] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1470.947076] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1470.948770] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.950386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.952030] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 14:39:31 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 14:39:31 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:31 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 14:39:31 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:31 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) close(r0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x7}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000016c0)={'bond0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="95390000000000000000050000000c00018008000100", @ANYRES32=r9, @ANYBLOB="050007000000000025df701c610c69863b1250220c36c60150253962e327d2f79da6e4896369fcc9811efe3711802d356fd66a2087a7aa4d9db1ad6e97763194031cd5622b02fa0e50215ea179f804770b086c966f1c24c41e53d77a0fe12e4db81e9cd0b9cfe5c17c4f9c99926e1e576982dbc54b62ab6c5634d701feee1c2ff782e80a3994ef1c5160e53922a92db7ee78d644814d1129f23c62b3ac6f41a5c811c8f8a4f9b25b3713b4eb6b769660d4cb2953a16c1872d34f"], 0x28}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002000)={&(0x7f0000002a00)=ANY=[@ANYBLOB="dc080000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004006f00000008000100", @ANYRES32=0x0, @ANYBLOB="bc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff01000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff070000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001202000008000100", @ANYRES32=0x0, @ANYBLOB="6801026f38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001007072696f72697479000000000000000004000000000000000000000000000000050003000e040000080004003f00000008000600b0b5d467ba14c065b233ce9757d420d56b75bec77d21070b2bcb805db2b9b759c276718ca1d6431779c66d078683fd8c3ed7c2235510c51f4a97194019461c479f5b3652883e9e5805056d3e04ae2423afdf39be307efec7a84bb8b8ec23106e5dbf2df8f071bb", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="e801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100008008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f221000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b001028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f8080000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100008008000600", @ANYRES32=r9, @ANYBLOB], 0x8dc}, 0x1, 0x0, 0x0, 0x4000801}, 0x40080) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:39:31 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 14:39:31 executing program 4: r0 = syz_io_uring_setup(0x24e3, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x22b}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) shutdown(r3, 0x1) 14:39:31 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1484.705598] FAULT_INJECTION: forcing a failure. [ 1484.705598] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.708071] CPU: 1 PID: 8623 Comm: syz-executor.1 Not tainted 5.10.232 #1 [ 1484.709520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1484.711256] Call Trace: [ 1484.711813] dump_stack+0x107/0x167 [ 1484.712589] should_fail.cold+0x5/0xa [ 1484.713436] ? __io_queue_sqe+0x666/0x9d0 [ 1484.714405] should_failslab+0x5/0x20 [ 1484.715292] kmem_cache_alloc_trace+0x55/0x320 [ 1484.716336] ? lock_downgrade+0x6d0/0x6d0 [ 1484.717227] __io_queue_sqe+0x666/0x9d0 [ 1484.718072] ? io_issue_sqe+0x77b0/0x77b0 [ 1484.719032] ? __fget_files+0x2f8/0x520 [ 1484.719965] ? io_prep_rw+0x7f5/0x1050 [ 1484.720886] io_submit_sqes+0x44aa/0x8610 [ 1484.721886] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1484.723042] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1484.724278] ? find_held_lock+0x2c/0x110 [ 1484.725342] ? io_submit_sqes+0x8610/0x8610 [ 1484.726380] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1484.727539] ? wait_for_completion_io+0x270/0x270 [ 1484.728659] ? rcu_read_lock_any_held+0x75/0xa0 [ 1484.729772] ? vfs_write+0x354/0xb10 [ 1484.730628] ? fput_many+0x2f/0x1a0 [ 1484.731493] ? ksys_write+0x1a9/0x260 [ 1484.732394] ? __ia32_sys_read+0xb0/0xb0 [ 1484.733373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1484.734635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1484.735863] do_syscall_64+0x33/0x40 [ 1484.736815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1484.738002] RIP: 0033:0x7f57e5b24b19 [ 1484.738787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1484.742665] RSP: 002b:00007f57e309a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1484.744264] RAX: ffffffffffffffda RBX: 00007f57e5c37f60 RCX: 00007f57e5b24b19 [ 1484.745773] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1484.747274] RBP: 00007f57e309a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.748774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1484.750281] R13: 00007ffc824510ff R14: 00007f57e309a300 R15: 0000000000022000 [ 1484.767434] FAULT_INJECTION: forcing a failure. [ 1484.767434] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.769844] CPU: 1 PID: 8620 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1484.771279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1484.773031] Call Trace: [ 1484.773584] dump_stack+0x107/0x167 [ 1484.774351] should_fail.cold+0x5/0xa [ 1484.775157] ? create_object.isra.0+0x3a/0xa20 [ 1484.776118] should_failslab+0x5/0x20 [ 1484.776927] kmem_cache_alloc+0x5b/0x310 [ 1484.777780] ? mark_held_locks+0x9e/0xe0 [ 1484.778639] create_object.isra.0+0x3a/0xa20 [ 1484.779562] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1484.780636] kmem_cache_alloc_bulk+0x168/0x320 [ 1484.781610] io_submit_sqes+0x6fe6/0x8610 [ 1484.782494] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1484.783543] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1484.784588] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1484.785614] ? find_held_lock+0x2c/0x110 [ 1484.786480] ? io_submit_sqes+0x8610/0x8610 [ 1484.787396] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1484.788419] ? wait_for_completion_io+0x270/0x270 [ 1484.789441] ? rcu_read_lock_any_held+0x75/0xa0 [ 1484.790416] ? vfs_write+0x354/0xb10 [ 1484.791200] ? fput_many+0x2f/0x1a0 [ 1484.791966] ? ksys_write+0x1a9/0x260 [ 1484.792767] ? __ia32_sys_read+0xb0/0xb0 [ 1484.793633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1484.794732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1484.795818] do_syscall_64+0x33/0x40 [ 1484.796598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1484.797678] RIP: 0033:0x7f6a6cb03b19 [ 1484.798457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1484.802333] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1484.803931] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1484.805442] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1484.806941] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.808440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.809948] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1484.813337] FAULT_INJECTION: forcing a failure. [ 1484.813337] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.817060] CPU: 1 PID: 8626 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1484.818504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1484.820248] Call Trace: [ 1484.820803] dump_stack+0x107/0x167 [ 1484.821579] should_fail.cold+0x5/0xa [ 1484.822381] ? create_object.isra.0+0x3a/0xa20 [ 1484.823342] should_failslab+0x5/0x20 [ 1484.824141] kmem_cache_alloc+0x5b/0x310 [ 1484.825008] create_object.isra.0+0x3a/0xa20 [ 1484.825931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1484.827000] __kmalloc+0x16e/0x390 [ 1484.827747] ? lock_downgrade+0x6d0/0x6d0 [ 1484.828622] io_setup_async_rw+0x180/0x580 [ 1484.829523] io_read+0xe98/0x11e0 [ 1484.830269] ? kiocb_done+0xc90/0xc90 [ 1484.831098] ? mark_lock+0xf5/0x2df0 [ 1484.831927] ? lock_chain_count+0x20/0x20 [ 1484.832871] ? __lock_acquire+0xbb1/0x5b00 [ 1484.833768] io_issue_sqe+0x2e8a/0x77b0 [ 1484.834606] ? find_held_lock+0x2c/0x110 [ 1484.835461] ? perf_trace_lock+0xac/0x490 [ 1484.836344] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1484.837347] ? io_connect+0x610/0x610 [ 1484.838173] ? lock_acquire+0x197/0x470 [ 1484.839013] ? find_held_lock+0x2c/0x110 [ 1484.839888] ? __fget_files+0x2cf/0x520 [ 1484.840726] ? lock_downgrade+0x6d0/0x6d0 [ 1484.841669] __io_queue_sqe+0x90/0x9d0 [ 1484.842512] ? io_issue_sqe+0x77b0/0x77b0 [ 1484.843395] ? __fget_files+0x2f8/0x520 [ 1484.844251] ? io_prep_rw+0x7f5/0x1050 [ 1484.845124] io_submit_sqes+0x44aa/0x8610 [ 1484.846042] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1484.847108] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1484.848143] ? find_held_lock+0x2c/0x110 [ 1484.849027] ? io_submit_sqes+0x8610/0x8610 [ 1484.849958] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1484.850997] ? wait_for_completion_io+0x270/0x270 [ 1484.852023] ? rcu_read_lock_any_held+0x75/0xa0 [ 1484.853027] ? vfs_write+0x354/0xb10 [ 1484.853825] ? fput_many+0x2f/0x1a0 [ 1484.854605] ? ksys_write+0x1a9/0x260 [ 1484.855425] ? __ia32_sys_read+0xb0/0xb0 [ 1484.856303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1484.857433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1484.858540] do_syscall_64+0x33/0x40 [ 1484.859340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1484.860441] RIP: 0033:0x7faf61c84b19 [ 1484.861256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1484.865209] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1484.866845] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1484.868379] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1484.869920] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.871451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1484.872993] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:39:31 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = syz_io_uring_setup(0x3879, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_setup(0x6bea, &(0x7f0000000400)={0x0, 0x40a6, 0x1, 0x1, 0x152, 0x0, r5}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, 0x0, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_setup(0x7e37, &(0x7f0000000080)={0x0, 0xd778, 0x2, 0x1, 0x1a3, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r9, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r9, &(0x7f0000000240)={0x1, 0x6c, 0x5}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r10}}, 0x10d9b8ba) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r11 = signalfd(r0, &(0x7f0000000340)={[0x400]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f0000000380)={0x10000014}) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:31 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:39:31 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:39:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r2, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000140)=@generic={0x2b, "77ca02f3e25a82208fa4a18035ddc4c98947eddc280efe6a43ef176adb137f3a66896889976b1f8af7c381ba5c1c9cbb45df54f97cf431b9901039806dc866dc77564a5a040b221121d9af40ff7ef6f98c4163e734cb3912a93fd758fb61ef9c543e63e61642adda6110713056df46cf1f54f0e23825a9e1f836e1dd1290"}}, 0x7) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/4\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:39:32 executing program 4: syz_emit_ethernet(0x2b, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x5a}]}}, "3a18009fa8"}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x118, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x3, [0x610, 0x1b6, 0x273, 0x32c]}) 14:39:32 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:32 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:39:32 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 14:39:32 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 14:39:32 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 14:39:32 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 14:39:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x5, 0xe009, @fd_index=0x6, 0x0, &(0x7f0000000200)="3fa438cb754656aa029e105d6dc588212db6675f0e62e01be8196d7388de0ed85b316740a09487a3b925888c73c3fad4fb5f7df210e62bb5930fe33cae96f36c84f0bde98d45dced17c925fb3597b0108b93b9c79a8575391ebb", 0x5a, 0x1e}, 0x4eb) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xffe3) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r4 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x1a000) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x420400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000280)=0x5) fcntl$dupfd(r4, 0x0, r5) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @private=0xa010100}, {0x1}, 0xc, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'caif0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) vmsplice(r7, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1d2b261a48d2a9a55aa8744e25e374e9dfb3d98b581acdcb3ad2815af6b6fe637ffd525594b8300ccdf93cfe0697ee9cea364f48a8ea6767133d7db702071a151f5c05322d9af17566028e42cd48a2c055322f43cec52cbb52f4271eb42a6f27ef24cb7cf4e74538fc28c01ef84365bb8aaab63f66b552ab8b42399c0cf9567e199b321199c6650e1ec89e8d5c50f3a94f6f34f35cf58143ecd044cf7ab8cdf1e0c810eca007f68c70e1e7b9370e7f8328cd0f603f9bd100dc78345a202c2c0b950c8a1cea2c09c5c83bad1b5f2bab4047a55668ae0cee", 0xd7}, {&(0x7f00000014c0)="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", 0x1000}], 0x2, 0x0) 14:39:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x282400, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x7, 0x5, 0x3, 0x0, 0xffff, 0x1280, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x892, 0x9}, 0x100ca, 0x9a6a, 0x5, 0x4, 0x7, 0x10001, 0x3, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x20000000006, r2, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f00000001c0)={&(0x7f00000002c0)=""/237, 0xed}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000001640)=ANY=[@ANYBLOB="18000000fdd1be81009a7653180334d72e1d9141fef2309c45d7eb556965b08f96ef49b93b3153949127710f1b117a48e9f268c275bf249b2dcf0d12f33c04e2bf4550aaf21933fbbb5708078bf172e9319f474a53372fb09e85dd781923cadc00"/112, @ANYRES16=0x0, @ANYBLOB="040026bd7000070000002b00000004004400"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x2400c010) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00000000006cbc543095d3653000"]) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="020000b9fb2f66696c6530004a30abaa3635af0b763c1ef233384808b32a59cc232838b85bda068f963f65744c0b57278f1cde0e62b5454c7acafad326f90fcf93694be34fbd3e8fa94183c6c1e33106545a54abfcf29678339f734c7394eb8c43dc672a788732314091587e52648a306c07cfad5444860d02d62da8cb9f879e453324fa36805b650acda04d74b44d5ef5aff93a4eb8b2cdde7d267efcac6d140fe02e406e08f3816de16398dde1b8bce2b44b5e05c97265e75d6d000000"]) [ 1485.570762] FAULT_INJECTION: forcing a failure. [ 1485.570762] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.573801] CPU: 0 PID: 8666 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1485.575351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.577250] Call Trace: [ 1485.577859] dump_stack+0x107/0x167 [ 1485.578698] should_fail.cold+0x5/0xa [ 1485.579582] ? create_object.isra.0+0x3a/0xa20 [ 1485.580632] should_failslab+0x5/0x20 [ 1485.581513] kmem_cache_alloc+0x5b/0x310 14:39:32 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1485.582450] ? mark_held_locks+0x9e/0xe0 [ 1485.583453] create_object.isra.0+0x3a/0xa20 [ 1485.584449] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1485.585615] kmem_cache_alloc_bulk+0x168/0x320 [ 1485.586662] io_submit_sqes+0x6fe6/0x8610 [ 1485.587612] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1485.588747] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1485.589882] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1485.590983] ? find_held_lock+0x2c/0x110 [ 1485.591914] ? io_submit_sqes+0x8610/0x8610 [ 1485.592917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1485.594019] ? wait_for_completion_io+0x270/0x270 [ 1485.595098] ? rcu_read_lock_any_held+0x75/0xa0 [ 1485.596135] ? vfs_write+0x354/0xb10 [ 1485.596973] ? fput_many+0x2f/0x1a0 [ 1485.597785] ? ksys_write+0x1a9/0x260 [ 1485.598634] ? __ia32_sys_read+0xb0/0xb0 [ 1485.599543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1485.600710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1485.601872] do_syscall_64+0x33/0x40 [ 1485.602703] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1485.603846] RIP: 0033:0x7f6a6cb03b19 [ 1485.604674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.608775] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1485.610482] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1485.612068] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1485.613659] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.614316] FAULT_INJECTION: forcing a failure. [ 1485.614316] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.615245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.615258] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1485.620514] CPU: 1 PID: 8675 Comm: syz-executor.6 Not tainted 5.10.232 #1 [ 1485.621740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.623215] Call Trace: [ 1485.623692] dump_stack+0x107/0x167 [ 1485.624344] should_fail.cold+0x5/0xa [ 1485.625044] should_failslab+0x5/0x20 [ 1485.625717] kmem_cache_alloc_bulk+0x4b/0x320 [ 1485.626515] io_submit_sqes+0x6fe6/0x8610 [ 1485.627263] ? __mutex_lock+0x4fe/0x10b0 [ 1485.627992] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1485.628913] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1485.629775] ? find_held_lock+0x2c/0x110 [ 1485.630496] ? io_submit_sqes+0x8610/0x8610 [ 1485.631249] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1485.632100] ? wait_for_completion_io+0x270/0x270 [ 1485.632955] ? rcu_read_lock_any_held+0x75/0xa0 [ 1485.633775] ? vfs_write+0x354/0xb10 [ 1485.634431] ? fput_many+0x2f/0x1a0 [ 1485.635084] ? ksys_write+0x1a9/0x260 [ 1485.635749] ? __ia32_sys_read+0xb0/0xb0 [ 1485.636471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1485.637395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1485.638299] do_syscall_64+0x33/0x40 [ 1485.638951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1485.639847] RIP: 0033:0x7f47fa951b19 [ 1485.640499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.643720] RSP: 002b:00007f47f7ec7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1485.645056] RAX: ffffffffffffffda RBX: 00007f47faa64f60 RCX: 00007f47fa951b19 [ 1485.646289] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1485.647538] RBP: 00007f47f7ec71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.648780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.650021] R13: 00007ffd1a7ca8ef R14: 00007f47f7ec7300 R15: 0000000000022000 14:39:32 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1485.674172] FAULT_INJECTION: forcing a failure. [ 1485.674172] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.676776] CPU: 0 PID: 8679 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1485.678313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.680165] Call Trace: [ 1485.680755] dump_stack+0x107/0x167 [ 1485.681581] should_fail.cold+0x5/0xa [ 1485.682435] ? __io_queue_sqe+0x666/0x9d0 [ 1485.683370] should_failslab+0x5/0x20 [ 1485.684221] kmem_cache_alloc_trace+0x55/0x320 [ 1485.685250] ? lock_downgrade+0x6d0/0x6d0 [ 1485.686185] __io_queue_sqe+0x666/0x9d0 [ 1485.687076] ? io_issue_sqe+0x77b0/0x77b0 [ 1485.688000] ? __fget_files+0x2f8/0x520 [ 1485.688899] ? io_prep_rw+0x7f5/0x1050 [ 1485.689772] io_submit_sqes+0x44aa/0x8610 [ 1485.690728] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1485.691839] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1485.692923] ? find_held_lock+0x2c/0x110 [ 1485.693834] ? io_submit_sqes+0x8610/0x8610 [ 1485.694805] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1485.695887] ? wait_for_completion_io+0x270/0x270 [ 1485.696981] ? rcu_read_lock_any_held+0x75/0xa0 [ 1485.698018] ? vfs_write+0x354/0xb10 [ 1485.698847] ? fput_many+0x2f/0x1a0 [ 1485.699663] ? ksys_write+0x1a9/0x260 [ 1485.700513] ? __ia32_sys_read+0xb0/0xb0 [ 1485.701434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1485.702604] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1485.703756] do_syscall_64+0x33/0x40 [ 1485.704584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1485.705739] RIP: 0033:0x7faf61c84b19 [ 1485.706565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.710677] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1485.712382] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1485.713980] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1485.715574] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.717170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1485.718760] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 14:39:32 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x101) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f00000000c0)=@caif=@util, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/7, 0x7}], 0x1, &(0x7f00000001c0)=""/137, 0x89}, 0x3}, {{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)}, {&(0x7f0000000380)=""/58, 0x3a}, {&(0x7f0000001500)=""/207, 0xcf}, {&(0x7f0000001600)=""/222, 0xde}], 0x4, &(0x7f0000001700)=""/78, 0x4e}}, {{&(0x7f0000001780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000000400)=""/7, 0x7}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/136, 0x88}, {&(0x7f00000028c0)=""/175, 0xaf}, {&(0x7f0000002980)=""/166, 0xa6}, {&(0x7f0000002a40)=""/130, 0x82}, {&(0x7f0000002b00)=""/177, 0xb1}, {&(0x7f0000002bc0)=""/197, 0xc5}], 0x8}, 0x3}, {{&(0x7f0000002d40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002dc0)=""/20, 0x14}, {&(0x7f0000002e00)=""/218, 0xda}], 0x2, &(0x7f0000002f40)=""/126, 0x7e}, 0x20}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002fc0)=""/225, 0xe1}], 0x1}, 0x20}], 0x5, 0x40002122, &(0x7f0000003240)={0x0, 0x3938700}) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x7, 0x6}, {0x8632, 0x8}]}, 0x14, 0x3) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:39:32 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3873, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup3(r5, r1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x68, 0x0, 0x12345}, 0x0) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:32 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000001580)='net/vlan/config\x00') io_submit(0x0, 0x6, &(0x7f0000001640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000000)="20d37f8d619d1178178f4fb52b8e8a05c2d7d4a9693ee65fe34db8", 0x1b, 0x3, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x620, r2, &(0x7f00000000c0)="e06ef36d9820884c62a6dade7363865823c351f4eba1402d3ade932271792df3d61b831748c85661699f054e4c1754fa23e3a2a9e9cde93736483f7b9040b8d6dc34ebd99902117b7925d432b302e71ae8cdb97aa9a276374c8d0262", 0x5c, 0xa6f5, 0x0, 0x2, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000000180)="4d9bc8bd1531d68ddedaa1c38723d8b976c3595983d22e4e6350180df194839ec78c6bc156b72ee17a655e879b5cd30b932b363dd50572a37da872b9afaf97df42c8977d2847d85356abf9e86b63d9ea30b4850d565b46825a0902e18c43de39f0ac5f657b32b9e23a65b0b1685b8934e8cd3dd09d68b0b71b1af8d3544844cb3bb88fc39c052f98f1e3e5c0255ea19cae09f29a6b8c42871b702a03c1c4bcae4d7b1d4f89d86bf59e6b18ebbeeb53fbbda7ba38f555917c762f0290f0297a7655f99d3412232d", 0xc7, 0x9, 0x0, 0x2, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x2, r5, &(0x7f0000000340)="326428c3847cb0cce9cd3b42310f7d048b753d5e6708b4a2f82b463bce156709316d86066a5d1b78a6271ac5de4a69474f38d661ff519f611f9a58421efb708a81a0c15b", 0x44, 0x1, 0x0, 0x1, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x80, r6, &(0x7f0000001500)="9aa700b7926a721a54e9c72eb85741354997343a277c95f5e05fd0c93df0cd6bb1722f55fd2e480fa2d94de1f88d4f0a92b9db66f814d728fb5fe2226c7593488b1933af458b98b75040bfc3d59f31115b64c389d36b63267ce9", 0x5a, 0xfffffffffffff4ee}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x8, 0x81, r7, &(0x7f00000015c0), 0x0, 0x8, 0x0, 0x1, r0}]) 14:39:32 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:49 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 14:39:49 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:49 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 14:39:49 executing program 4: r0 = open(&(0x7f0000000140)='./file1\x00', 0x300, 0x38) statx(0xffffffffffffffff, 0x0, 0x89449e2670c4c232, 0x400, &(0x7f0000000500)) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000680)={r0, 0x0, 0x7fff, 0x4}) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file2\x00', r2, &(0x7f0000000700)='./file2\x00', 0x46) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="80040000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file2\x00']) move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', r0, &(0x7f00000003c0)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x4, 0x937, 0x1, 0x3}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0xff}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_complete(0x0) stat(&(0x7f0000000240)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) fchownat(r4, &(0x7f00000000c0)='./file0/file0\x00', r5, r1, 0x1000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd7000fddbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00f5000802110000000000068c5529fa4c0a00"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000004c0)={0x20000000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80000001d00210c00598b0480025afd31bcf6625ef200080000000c000000f6ff460bea99350517e31f992afa8e108b377970c88beee4a9561ca50000000000000000"], 0x1c}}, 0x0) 14:39:49 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:49 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9d, 0x1f, 0x6, 0x9d, 0x0, 0x4, 0x490, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0xf0a}, 0x1c05, 0x6, 0x4, 0x0, 0x1, 0xfffff6b4, 0x6b, 0x0, 0x10000, 0x0, 0x1b}, 0xffffffffffffffff, 0x3, r0, 0x9) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:39:49 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:49 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) [ 1503.100211] FAULT_INJECTION: forcing a failure. [ 1503.100211] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.102669] CPU: 1 PID: 8707 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1503.104077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.105746] FAULT_INJECTION: forcing a failure. [ 1503.105746] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.105794] Call Trace: [ 1503.105819] dump_stack+0x107/0x167 [ 1503.105846] should_fail.cold+0x5/0xa [ 1503.110774] ? create_object.isra.0+0x3a/0xa20 [ 1503.111863] should_failslab+0x5/0x20 [ 1503.112770] kmem_cache_alloc+0x5b/0x310 [ 1503.113744] ? mark_held_locks+0x9e/0xe0 [ 1503.114716] create_object.isra.0+0x3a/0xa20 [ 1503.115757] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1503.116970] kmem_cache_alloc_bulk+0x168/0x320 [ 1503.118073] io_submit_sqes+0x6fe6/0x8610 [ 1503.119072] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1503.120315] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1503.121498] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1503.122640] ? find_held_lock+0x2c/0x110 [ 1503.123652] ? io_submit_sqes+0x8610/0x8610 [ 1503.124676] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1503.125885] ? wait_for_completion_io+0x270/0x270 [ 1503.127021] ? rcu_read_lock_any_held+0x75/0xa0 [ 1503.128167] ? vfs_write+0x354/0xb10 [ 1503.129043] ? fput_many+0x2f/0x1a0 [ 1503.129954] ? ksys_write+0x1a9/0x260 [ 1503.130855] ? __ia32_sys_read+0xb0/0xb0 [ 1503.131867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.133092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.134369] do_syscall_64+0x33/0x40 [ 1503.135241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1503.136502] RIP: 0033:0x7f6a6cb03b19 [ 1503.137370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1503.141897] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1503.143758] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1503.145511] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1503.147239] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1503.148965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.150697] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1503.152469] CPU: 0 PID: 8714 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1503.154071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.155992] Call Trace: [ 1503.156605] dump_stack+0x107/0x167 [ 1503.157776] should_fail.cold+0x5/0xa [ 1503.158659] ? create_object.isra.0+0x3a/0xa20 [ 1503.159720] should_failslab+0x5/0x20 [ 1503.160596] kmem_cache_alloc+0x5b/0x310 [ 1503.161551] create_object.isra.0+0x3a/0xa20 [ 1503.162565] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1503.163740] kmem_cache_alloc_trace+0x151/0x320 [ 1503.164812] ? lock_downgrade+0x6d0/0x6d0 [ 1503.165798] __io_queue_sqe+0x666/0x9d0 [ 1503.166743] ? io_issue_sqe+0x77b0/0x77b0 [ 1503.167696] ? __fget_files+0x2f8/0x520 [ 1503.168617] ? io_prep_rw+0x7f5/0x1050 [ 1503.169538] io_submit_sqes+0x44aa/0x8610 [ 1503.170526] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1503.171681] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1503.172797] ? find_held_lock+0x2c/0x110 [ 1503.173744] ? io_submit_sqes+0x8610/0x8610 [ 1503.174759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1503.175899] ? wait_for_completion_io+0x270/0x270 [ 1503.177014] ? rcu_read_lock_any_held+0x75/0xa0 [ 1503.178095] ? vfs_write+0x354/0xb10 [ 1503.178958] ? fput_many+0x2f/0x1a0 [ 1503.179798] ? ksys_write+0x1a9/0x260 [ 1503.180675] ? __ia32_sys_read+0xb0/0xb0 [ 1503.181629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.182835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.184027] do_syscall_64+0x33/0x40 [ 1503.184886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1503.186075] RIP: 0033:0x7faf61c84b19 [ 1503.186931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1503.191192] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1503.192954] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1503.194606] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1503.196250] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1503.197915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1503.199568] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1503.243629] FAULT_INJECTION: forcing a failure. [ 1503.243629] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.246575] CPU: 1 PID: 8709 Comm: syz-executor.6 Not tainted 5.10.232 #1 [ 1503.248134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.250021] Call Trace: [ 1503.250630] dump_stack+0x107/0x167 [ 1503.251468] should_fail.cold+0x5/0xa [ 1503.252345] ? create_object.isra.0+0x3a/0xa20 [ 1503.253379] should_failslab+0x5/0x20 [ 1503.254253] kmem_cache_alloc+0x5b/0x310 [ 1503.255178] create_object.isra.0+0x3a/0xa20 [ 1503.256172] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1503.257319] kmem_cache_alloc_bulk+0x168/0x320 [ 1503.258373] io_submit_sqes+0x6fe6/0x8610 [ 1503.259317] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1503.260435] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1503.261551] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1503.262640] ? find_held_lock+0x2c/0x110 [ 1503.263561] ? io_submit_sqes+0x8610/0x8610 [ 1503.264545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1503.265638] ? wait_for_completion_io+0x270/0x270 [ 1503.266723] ? rcu_read_lock_any_held+0x75/0xa0 [ 1503.267761] ? vfs_write+0x354/0xb10 [ 1503.268552] ? fput_many+0x2f/0x1a0 [ 1503.269367] ? ksys_write+0x1a9/0x260 [ 1503.270183] ? __ia32_sys_read+0xb0/0xb0 [ 1503.271091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.272199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.273342] do_syscall_64+0x33/0x40 [ 1503.274145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1503.275285] RIP: 0033:0x7f47fa951b19 [ 1503.276067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1503.279951] RSP: 002b:00007f47f7ec7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1503.281632] RAX: ffffffffffffffda RBX: 00007f47faa64f60 RCX: 00007f47fa951b19 [ 1503.283193] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1503.284755] RBP: 00007f47f7ec71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1503.286324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.287889] R13: 00007ffd1a7ca8ef R14: 00007f47f7ec7300 R15: 0000000000022000 14:39:50 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:39:50 executing program 4: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xfffffffffffffeff, 0x0, 0x9d, 0x5, 0x0, 0x7}, 0x0, &(0x7f0000001440)={0xe5, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x81, 0x104c0cd3}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x752ccecfcb553adf) quotactl(0x0, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000000180)="637b5d08aede0e6ded4f1e4ea75480cf7f06d1e53798a2acdb3a4a8f435a290000c65a7edea4f0d894b6") ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000200)={0x1, 0x4, {0xa, 0x19, 0xe, 0xd, 0x8, 0xb54, 0x3, 0x142}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000040)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001c00030000000000000000804fa6aa00"], 0x14}}, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) unshare(0x48020200) 14:39:50 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:05 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 14:40:05 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 14:40:05 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:05 executing program 4: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000040)="bc68980ee86afb3aea78662fd5cf865ca2484321d1c0cb390c5148b1c33d72904145e8da11621fe1a2436072d8ec9884bb5285f2f0b713cddc4c9658885ab684d75025a13543b6dfbc99dacc914bac2e81ca8c1cf1879534ae6ece344bf3710c80aa5ae14d40353387a531420d06411d3dcfb3", 0x73, 0xb800}], 0x0, &(0x7f0000000140)={[{@check_relaxed}]}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4', 0x80000, 0x1) openat(r0, &(0x7f0000000180)='./file0\x00', 0x200000, 0x2) 14:40:05 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:05 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 14:40:05 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0xff, 0xf8, 0x0, 0x0, 0x9, 0x40, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x200, 0x401}, 0x800, 0x2, 0x1, 0x7e15b6847d6685e2, 0x3fe000000000, 0xc00000, 0x34ea, 0x0, 0x1ff, 0x0, 0x8}, r3, 0x0, r0, 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup3(0xffffffffffffffff, r1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0xe0, 0x2, 0x2, 0x0, 0x81, 0x120, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9a, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x4200, 0x4, 0x2, 0x7, 0x3f, 0xffff, 0x9819, 0x0, 0x3, 0x0, 0x100}, 0xffffffffffffffff, 0x6, r5, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:05 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) [ 1518.936493] FAULT_INJECTION: forcing a failure. [ 1518.936493] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.938516] FAULT_INJECTION: forcing a failure. [ 1518.938516] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.939256] CPU: 1 PID: 8743 Comm: syz-executor.6 Not tainted 5.10.232 #1 [ 1518.943094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1518.944899] Call Trace: [ 1518.945491] dump_stack+0x107/0x167 [ 1518.946289] should_fail.cold+0x5/0xa [ 1518.947128] ? create_object.isra.0+0x3a/0xa20 [ 1518.948122] should_failslab+0x5/0x20 [ 1518.948959] kmem_cache_alloc+0x5b/0x310 [ 1518.949850] ? mark_held_locks+0x9e/0xe0 [ 1518.950753] create_object.isra.0+0x3a/0xa20 [ 1518.951702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1518.952819] kmem_cache_alloc_bulk+0x168/0x320 [ 1518.953882] io_submit_sqes+0x6fe6/0x8610 [ 1518.954859] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1518.955995] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1518.957087] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1518.958143] ? find_held_lock+0x2c/0x110 [ 1518.959035] ? io_submit_sqes+0x8610/0x8610 [ 1518.959983] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1518.961020] ? wait_for_completion_io+0x270/0x270 [ 1518.962062] ? rcu_read_lock_any_held+0x75/0xa0 [ 1518.963071] ? vfs_write+0x354/0xb10 [ 1518.963879] ? fput_many+0x2f/0x1a0 [ 1518.964687] ? ksys_write+0x1a9/0x260 [ 1518.965517] ? __ia32_sys_read+0xb0/0xb0 [ 1518.966419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1518.967550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1518.968680] do_syscall_64+0x33/0x40 [ 1518.969494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1518.970621] RIP: 0033:0x7f47fa951b19 [ 1518.971434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1518.975319] RSP: 002b:00007f47f7ec7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1518.976930] RAX: ffffffffffffffda RBX: 00007f47faa64f60 RCX: 00007f47fa951b19 [ 1518.978464] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1518.979957] RBP: 00007f47f7ec71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1518.981500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.983224] R13: 00007ffd1a7ca8ef R14: 00007f47f7ec7300 R15: 0000000000022000 [ 1518.985056] CPU: 0 PID: 8752 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1518.986614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1518.988488] Call Trace: [ 1518.989087] dump_stack+0x107/0x167 [ 1518.989901] should_fail.cold+0x5/0xa [ 1518.990765] ? create_object.isra.0+0x3a/0xa20 [ 1518.991786] should_failslab+0x5/0x20 [ 1518.992647] kmem_cache_alloc+0x5b/0x310 [ 1518.993571] create_object.isra.0+0x3a/0xa20 [ 1518.994556] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1518.995694] kmem_cache_alloc_trace+0x151/0x320 [ 1518.996731] ? lock_downgrade+0x6d0/0x6d0 [ 1518.997689] __io_queue_sqe+0x666/0x9d0 [ 1518.998607] ? io_issue_sqe+0x77b0/0x77b0 [ 1518.999513] ? __fget_files+0x2f8/0x520 [ 1519.000416] ? io_prep_rw+0x7f5/0x1050 [ 1519.001293] io_submit_sqes+0x44aa/0x8610 [ 1519.002255] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1519.003371] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1519.004453] ? find_held_lock+0x2c/0x110 [ 1519.005377] ? io_submit_sqes+0x8610/0x8610 [ 1519.006358] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1519.007466] ? wait_for_completion_io+0x270/0x270 [ 1519.008551] ? rcu_read_lock_any_held+0x75/0xa0 [ 1519.009588] ? vfs_write+0x354/0xb10 [ 1519.010433] ? fput_many+0x2f/0x1a0 [ 1519.011242] ? ksys_write+0x1a9/0x260 [ 1519.012090] ? __ia32_sys_read+0xb0/0xb0 [ 1519.013003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1519.014166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1519.015332] do_syscall_64+0x33/0x40 [ 1519.016169] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1519.017326] RIP: 0033:0x7faf61c84b19 [ 1519.018178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1519.022371] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1519.023203] FAULT_INJECTION: forcing a failure. [ 1519.023203] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.024094] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1519.024106] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1519.024118] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.024130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.024142] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1519.035086] CPU: 1 PID: 8753 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1519.036669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1519.038561] Call Trace: [ 1519.039162] dump_stack+0x107/0x167 [ 1519.039942] should_fail.cold+0x5/0xa [ 1519.040867] ? create_object.isra.0+0x3a/0xa20 [ 1519.041966] should_failslab+0x5/0x20 [ 1519.042878] kmem_cache_alloc+0x5b/0x310 [ 1519.043863] ? mark_held_locks+0x9e/0xe0 [ 1519.044854] create_object.isra.0+0x3a/0xa20 [ 1519.045804] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1519.046932] kmem_cache_alloc_bulk+0x168/0x320 [ 1519.048049] io_submit_sqes+0x6fe6/0x8610 [ 1519.049074] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1519.050307] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1519.051592] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1519.052802] ? find_held_lock+0x2c/0x110 [ 1519.053855] ? io_submit_sqes+0x8610/0x8610 [ 1519.055036] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1519.056275] ? wait_for_completion_io+0x270/0x270 [ 1519.057512] ? rcu_read_lock_any_held+0x75/0xa0 [ 1519.058713] ? vfs_write+0x354/0xb10 [ 1519.059671] ? fput_many+0x2f/0x1a0 [ 1519.060607] ? ksys_write+0x1a9/0x260 [ 1519.061585] ? __ia32_sys_read+0xb0/0xb0 [ 1519.062640] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1519.063980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1519.065298] do_syscall_64+0x33/0x40 [ 1519.066260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1519.067563] RIP: 0033:0x7f6a6cb03b19 [ 1519.068515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1519.073253] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1519.075198] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1519.077012] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1519.078834] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.080642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.082456] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 14:40:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/udplite6\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x5, 0xf9, 0x4, 0x0, 0x0, 0x4, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0x1}, 0x80, 0x7, 0x8, 0x1, 0xfd0, 0xf6, 0x1ff, 0x0, 0x1000, 0x0, 0x1}, r0, 0x2, r1, 0x3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:06 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:06 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r1, r2, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x9) 14:40:06 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:06 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000001500)={0x109c, 0x38, 0x200, 0x70bd25, 0x25dfdbfc, {0x19}, [@typed={0x8, 0x13, 0x0, 0x0, @fd=r1}, @nested={0x107d, 0x4, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @uid=r2}, @generic="e8e04336c6b9b51bad9467de5e697599766aa1610e9434e1", @generic="48a6830edb85c1e25a15e75e3dfdc014b1cc80d2bab12d3cbd0e30710af3ddb3dd548cb9d3271ad023a3f6731578c3be8c4f120876354970c7c7d0ef85", @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x5, 0x83, 0x0, 0x0, @str='\x00'}, @generic, @typed={0x8, 0x24, 0x0, 0x0, @u32=0x100}, @generic="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", @typed={0x4, 0x41}]}]}, 0x109c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c6d350325489813480523", 0x21}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c00)='mounts\x00') r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x8010, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) readv(0xffffffffffffffff, &(0x7f0000001bc0), 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000001c40)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x48b) r9 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9, &(0x7f00000019c0)=[{&(0x7f0000000380)="89859469becb6bcaa4c2908c5021798917958758a87690fe9f2b8bb9b82ed974ebb4717c5bdb087f184d641870f89bc318342067b02071964bb6a832d9e4dea2b7e6e6802d027d9179813d800a0c9ae060538e449023d03d7a9ca72204eba5939ae51663552ca4c4539ee4853394f6fe116583cb66bc84a7a93974bd9d1297b0363b91335a1a9b6aec527d4f1c624ced560b1e05f39981c44b31df0f8357953ce705b85941c9fc5b8dffafda11bf602c60b9d3e3dca1f3f985feb6b2f214010b8c8794d9c18545ed026855178b96107f7faf66da9e3ec9d852718b", 0xdb, 0x1}, {&(0x7f00000014c0)="b7b9e970cf8e0d", 0x7, 0x400}, {&(0x7f0000001500)="008b431bdd3a162534b6b240c982d45b3ac3c29c8e1db7d015b01723f48ed32faebcca4d4970d417af50d780784ff6d94c7d6bec438e4a7a068b77791c2f1618eb92f5b146c3a6a7f093c93ace9335a69c2d02ee6e4c21177d084c3b5071a22f8bc7db3377e2593a5ba983156a283fc1eab13e8abccde55ecfd580ebd783eb8f9df534221867d43a3aea6b5ee1241c222841b4960b5cae59fe3c5775d6845d9710f82e7d21023288df0538d532d0fac491bfc52e1c3c0c6f3d2f5ee6770b173e211e56f1a0cc7b770c0affd7a6429a8d4ee9f6a1ae9590", 0xd7, 0xfffffffffffff000}, {&(0x7f0000001600)="5fa3d9adfdad0e3c953ec777ef0f5c4c1ee763f75b93bdd0d0d5c06106c201fb12310508b1f92b2750ceef5232c3715af740aab8845caef688634f680bba6742a4e413845d3a24c039d02a05", 0x4c, 0x80000001}, {&(0x7f0000001680)="3fdc4b0db99efd835f8f253d0badc7b1876482e8d576a9b157ca16e62237d1fa2f80073cb705c9e147893e686221a7682f585c16b38817daf63799499347fd1ca5eac7accafd9e81bec7199228cf885cf8711887045960c2375c0bf9d13da131b53852aae20621f9583c89d961262d5612568cd72035188e6b44183efaac0f9a847008e911d3b59224880822e3966c97d8b392421a037a11f12ea1764afbb6f36b5ffc3f9ef6d6b7a81e58b5a57a4857cf0496cdf118cec1a3f112a67a3e439a4f2b5d59f88bb4", 0xc7, 0x7fff}, {&(0x7f0000001780)="8c73cc53286afd490b7b5b3ddb2d6196b1a906380f2e1cb3eb9755379933a43d831361e89d655af4934f4104292a0086c58f3b4bd0e0aa85693388caed5081ff38ca", 0x42, 0x5}, {&(0x7f0000001800)="16490faddb3cd4e0a5b23df263090e8958565902ff71e8206337b97c80889e3c824c0105f03f5e394509743aa817ea09a5f36497ddb8d233543a9e2d424d945a0a44857e6b5dd2d7fffd8f01208877db23ef01aa170047d8a6cb1ce5b09956a0f5698cc8d0734e6e905fd81371a7babef60cf471718e68d5e0198cff7cfbf4540e3a47ad9f6452f6a78912", 0x8b, 0x4}, {&(0x7f00000018c0)="d69863638a2ea54a679d801af2d9d15f0d4bb0d6f7b1cd41ed42c89d2c59b4e941239c41", 0x24, 0xff}, {&(0x7f0000001900)="928ced276fd4a435b2caa22a3a9f7615872c9ab12e7cfadc0dbdb3060fb671b6403a804cd847c93417b2f2e20629cdb9d4dfafe4ddd627ae950124791347d0b9e1b6526f2ee5ac14bc099b41cdbfbfed4487297a15b68c360007f6812d4596cd80e3509604ba83ce9716ec9b08e58c42057f263114894d7983f97fd99e4062e59935547a0c44a4f8ae7f62f33c2bc6ac2480475033451ce43759e8d206aad2e041f10911387c122fc8dfe28321ae", 0xae, 0x81}], 0x10010, &(0x7f0000001ac0)={[], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '-c}\x0e'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) r10 = openat(r9, &(0x7f0000001b40)='./file0\x00', 0x541080, 0x13) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4000, @fd=r7, 0x101, 0x8, 0x9, 0x6, 0x1, {0x3, r6}}, 0x80000001) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000001b80), &(0x7f0000001c80)={'L+', 0xcc}, 0x16, 0x3) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x4c07, 0x8ab9, 0x0, &(0x7f0000000300), 0x8) 14:40:06 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r2, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) r4 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x7, &(0x7f00000035c0)=[{&(0x7f0000001500)="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", 0x1000, 0x10001}, {&(0x7f00000000c0)="9128aa3203b63e103b7c3e953117998f8f0c55bc77094a373960a51613008830e683aaee966bdcbf5763844ed239c80f169de37d5ee8bafb7bf43d174c5483bda981eb5ca0910febd91072d4fc3f3d7b3da4f0d45588cc700fa769aafd9d9dcd653a262bbeb0e228669c5311924c718861467a", 0x73, 0x1}, {&(0x7f0000000140)="15e9bec5a606c130cb61484f76995b01002e5802b2bcc34bcf03d041c499c7e2eba6e9b8a90d35fa18e5616db561552ef658400c20d07262f563a2ac9e96c73aec03cd566fb58a99af20fa8905eea8d427e5b607467d5e5f1a7897438b14534807786fbf55265b8a89b5674c0e0967cf33a3d67dc39b79881a92877fca1bb43cdfde5c", 0x83, 0x1}, {&(0x7f00000002c0)="5a71e568179b32c276b4dcd4d84b1b89dbc610de02b48af344b5582f40b8c365b6d571ab78769fdcbde0c542024eac618a8c39ffa0d3f7e3cf3974ab97b41d747e37ac50bbb4ebe5b90224767c5fb4dd633f5955463e03a2dccf7afe613abd7a7370ff38c6294ab4619725c39506d244f450216f95f143d0c7fe2598d7b0f79aea5e0066c68395bcbacb5a7652b25f02d2bec47fe0d77444dec561bc684c7865e5d8394a8e31a8872884e100b1a9b5882c53e3999ae9130252e1588431bf08bcfabd3861610cc2a83996e9d1915b6bab4bd30b39ad3bffd3b79de20b01963818b0cd7a33fb1c75febf4cdfc0db669435e1", 0xf1, 0x75f}, {&(0x7f0000002500)="38655fc7ddc748f3e6b63777c4aec43250fd6e0d722abb83c5d98a23852646797290166afdaa62a472ea177a7934a34219529af0dd3b1f7ae8e79ea524c74168a56b9815c352b0710988614b48c2ab7ed457d07d7a7751251a84d0b586e7d876b69f2791b793a25094d284d334b9755f0a0ab6f73583bea839986c405db4e9c80b473ff569afd01078d319401609900e3b35bb2e5682a4597b5a039be1113e8903f83e0fff94e2a99d8f52ab71831c409f615820ceeeb24848f1f8dba525c552473bd7d573380e7c4935edfba64ec36abacbabfb4bf2fe80fde476f6816de09dab015df5c6553901643c60f7c31f87a1b34dc53000fa9c7464eca429abf9d732402e90c7ea63d77d37954ebd78c22436b9e403f58f17b34cc13c26ed015d5ee52dd9035cb54751a039cc200782e440bf11b61c2abe46b1da14313f3dd503bd58a96561a357ac6fc35165aa391eade1d4ef2536b3caff318fceb8a86ef4be9109a07ae3c1d8eb5db93db6b7922c3bc3ad4f02bbb06c7ea38052495d7817e912a5a0c3cd1cad0af46921af3748fd3e792ccb5af3a17ff6e9d0b14ccafc104f7d3ca5f0532fac8e2ff4143046e955e435b40662ac1c723fed37f0db93f58841fe1aa1d91ed3943feeea0f723cac3d3d4a89e74d0e1cc9c4597d113b79bec3a4745b426ac245e6aaf26546817933b14cc757f05d615fc88419b9e23cb1a4d68880430affc52b16d834e60395952c512fdbd7e3eae419f33e46711821a8510f591aa96778edc0f04d5014adcdffce2697472f768944afa888528b4d75ccf4bf20c74cc0a8ef34db8cc1e5d530a73efc22e37e340ffa96857ba3f7f23d6a0967f1c31a394eec147a13f31746062f6c1db8f0e1060e8755ec936e2293c7d93cb972b5363d666cb85ace23156a6ac3d7adbb2c2bf73ab3aa57cd85dc50bf545c0f3ea61f98636fb7f33067f358139713bfbbce5194766ecda7fdb34979e5e6cdd02d5bec532df464b0148f820a75afc7affea1092458d1545652e727827cb29960270555d1274277cb99d5d2502b7c90c753b2b091fd9819c78b036ec04a1d5b44efd6cb4f2e6d61f3aa2eb74835e72328f2c81fa563209419c8217dd8fb713b5117822213bbbf585202ba90a7061c4e9fd3c3d474127439b2efcd4ef823c4803b0734f231d37e0a04e28ab7c8ae6c901346c17a9986d8ef2f770025d27a595237d45523adc4d7e4fa5cf9db8d41fbe2cb8b287cfe3d447c2c2e5fb4546cf330ca7b9e1eba0a6b3d9d3e33a8efb3ce5b21f932c7ed59902bfe0ca93747a9a898db6b13d59158de0a57c690d642fbf87209f1129644ce1639b625c036ab00818bd250c46ecc773747b904b7f1003178120894daabee0fdd61e25394e1cb68eec6b1c2a341ccf2747e5e4bbb09d6bac4b0d8da54d0afc4c9c16db569871e1b288ce0448f58a1e52c45a7f67f189f063372407aa3dc2efc4bdfa0e1e21e93db2a7064260c6af9c436b5d308b330ef14a7ae789ba1696f21d7881cab7fcccc21c4dff2142f053e36585ae3a55413cf725775cd035e24509233478f1e9b6df37a524218948acc7a5fb1efc7635d04bb67a6ab8212ac390d92decb2341ce11fd35920b3ce63490f5ecfd34c97c420c82533a1ac711ab14a7ffb913c5f0c9811ebba78e7be946f26fdc8e6cb7bff27f67eee7a5bbbeea47e58bef6386fbbe8314ad056064cd0b4ce531e3914daa3d063cda6c9f44c332cb7c54cd24da28264ab8da6e3185becb18115ac7382f0669ff4c8e3f9b82dded9b7c7f9ccc4ce4280cc82b16d4ef7ef9ec341f7cbcf1d5a8c19ab62ee747ae9623ce0fb3d3425b40f9fd85d404a09b66f70a2260fbf42f63ed9442a3da6e053031c2ca188c08bb2f36aca2ae08d57df17291b298a322f27ed0f748b18b33a5c4c002d75020e6e614155dedcd9c64a3cead53bdf326f1bed6e3a2db9d7a35e1b32f2f9bf3cbb8e8e135002ca2f8c30435bff4cdea30cdded27517198431deffbaa9a36926b02496cb3b3046d37621fc04dde7260abdf550a7912f8a4bbbd43d64df7948cbbde3b8e5c5f9c1401f7910e1970cbc70eac07fd64cc40f90d1ec8c4a0a8929ad0fbfac5f9173300a371be2e1ecd5e8916a620ed115fe8736902bb785b972a286c645d93db1a8f4271a0695b37ef45a89f493ddba6b08c19e20c602143ebb4b5933e1b10c53c21c4100380c1c629b06566cd8fa4c412b7598dd997b465406e783434f89112e558209559c1247fc23364976d8c4c406f0715286e2294ea1375a7306598b799deb1fd491d0c2fe65a62f1cf71766ffb31c915f0e160780fca99e9d9408d4dd6abfcd4b01a1414cadf36551c6d36b19d04aa7db1b94646da4e0cc5507dc4daa9e96dcf977450e05f9dffbc4095578aa9bae87bba0797f2055701a6d9adc90be9a0c82cd644f5e09df3e2b38932141bda02da06cc2312549ef2aea87932c8f91d381561bccb7211d3ff7875e778c02b9e1e4ae4ad248c6f788ec8efb575a2b8fefd1a615b17971aaf595010e3d853758a49f9099e2d8f1dd980ae4be10ef5260ce180d2102eed24ef96f9edca6dd1eb8492d2fbb86c46ad799b7692a3194fe44051b99a61d9b649457afce20b349b8885dbd941d8b3389adc37cc003955b00d18d3207464104db1683c0b31665dc014d14531a071c4066e6cc7559035f53575ffc39f09500a97cff8a1e0a9991c36bc171ac63a7ba07d2720e770cf2598203a1c672f8b0b09985d6ff56797078f95a1da2e748672c1c0ace07d0301baaf0698e08887c232043482d731264415e58b2746076a9fd0346038e387a32f6f07c0277bdcdcf992fc666e53ebc141b5571fe04a8ed0688facc72cac0a91d37820e573ee928b7246bce4da4deaef64cf0a802bdbf7a1c61eaefde50233d61bff1f66bfd5265e0af13f3ba89ea557ace7f8fc59e24dea9df0e8f38ddd8231dad9c533caf2b793866d669a557ad8148d48d3f6614428d5129d1d5201d06f93594658c876a3152e4af2421e608a11e06b49672156cd94ed0280c441919d1ce1ae6f817e8550f30951b3f295dc982d3ccc5db59a0988a72d1cd2e7bf0d10672a14de81bd49a16f3b6b943cc4fcf9645c082ca1d460a9237c57e92dae7270d59ca80ca0373f709c2bcda38ef1a707537ed273210f01daa9ae88a3a28c344d612aff84a33351c342ec2ab9e4492b0829eccf9ca5c95d3c165a8eb2d93340bc50b121bf7a21c9d9b85e77dce08d16baabb6d278dfbb8f2ec71e4579debeea214f91b912881669dc9414881b149f9bd8f4e75f5e032b30b2af3d2a2e1393daab3d5dd0dfa0e20991f7bf976962fac77d45f8295399f0c1e94d9c30aaf9d602d433c7d9f2eb8cf55e5e8a303a3428015b30808731a9de52b09c1ecc78815ff7f1285dd16a3e8d3e485e770d316df9313896faac0c417d031833eec1bdfaa01f780ebfefd5ad99ea5b42418ef68930f4781d4925597a1a33257aa1142eccd7a134b564856decbeed33c997e07836df06ae8c170305ccb51884b24cad81a9ed5e7e5ce3a4c7b8a70ec569a30e833b7274d63e1ab41bbb5f4a7c997d67cb370b7a0288e90257bcefe5b46b9155984b36a34623f7c8b1552c0be85e4ec139ad8d7d93cdad71818f689c17b6895049be51862b5793b7ae9dbf6c713733e4bc7b4d73138c1456671e3a970d9fa8c0169481e7c67c7f0327ef913c9872603f34308f96d20f29605a391ddf5464bfe2fd8fc423edb3a886e4731768ecf024a8df28193a45315c7f96a859a3891e971ffbb429eead48c545ca66986f7c32ec67e624ebc6b37a71c471300c7fbaabba5c3848401ae79c9bf8b3dc0eee033054deac589b11641b669f8e11e0bd4843c5a3663d3d61c32520adec9f337c8220cc18b4b9d87c13902a76947442161b9e03f0a01786857bbb29415a61b23fb5e28675f6423882ebf052f935c90500a9a80501a49023f4de6e9115b43c1d890930b38a7346cda788d2dbf468e8949c98141be2503b5484c1129020a280814345b63f3cf2c5f2aef74657185ad1ff82af5d51edd8f59645ad004ba10c206b76bd581e5ba959e53e3877ae3e8d49a97ae4e6ea3d1fc1574a3298e1a24015c84ca672ba29c1ac79f5638f7cbb1efadce40d01783fbd6ec3e22f3c90aa82c1d91c52c648c5238f8ed52bfb19a4f6bc603a672bda55cad0fc590cbb93c56e61f1f5bd56ec55461e5b245eaf668ee440c16d4c9d608f02d459e641e492a8395c74a14967003e24b6352e9a20f68aec79cd8bcaf92dfd86adeb11131e3c36b801876a4a0a5fc1fb4026fe943b9b0efef44c1d71f7718d0f2736b0a03525ac63500c2a7b5acc23de8c3158ba32e3fef263295142a1112bc1524d7c239fe5d1b12e01195ed4b1ad9c4d89d2e1a4b767d9499f56bce8b4c268654ac8ed020a62d3ba1c6c2c2cb51d14e46fa8ce8602a36dec062fd25ebdb696dffd2b6230305f93a94591c923b823eaad3efb07e00a6321b8b1eff33fc2f3e81332954cf7471b58de574e1b30e624aafae1e76e4392f7b8bd68e6abfb865f59a56745419b0e318497e908bcc76b1e865a77ce68362bedfe8c31566a6d49d9e51a3248d807364b01fbb9be5d61363fb71c0eaf27ae643940930ffdcfe0770bf24ea4d2776f66c0f184e949beb75104226264ae8b84d2bd76c4813205f456881a4b6b1e8b20245edb0dd24f4dd6d61dd59a48aadc06c4a3ce540d547e40fe22610bedf47deae0d08e35efab721ec9c5e599ce610c5e067a5603341ca752d561b512c3058e0af601c99b894549336eab04a0f826c9300b303be8bac614212e59bd38e94e075f9bb6df8b651f6095e920fd5477860e3e24a9482845edb5d516085f3f21f00da800bcf3b2fbf796326cb5b9dac239eb941fa1ed586106ab6d2ebf2a41408ee7b9f49f182434164eca472fb94ee3afccefd99b8b3e02ddef97047adfdd94ba5749d86bf3c6c8d7c914970b765f0fa5c854b25545eedfb6bfd5a0f3ae7b0e3ddbb848e6fb29bf52b408b59a8b7123c0dd91046d7d51bf5075990d2be52ecb715a1f5a411f78ba4e98e2599ca6656fb9cdf1bf089fac6b2eecae55e8f23f709a9f7ebf0e0032f556bb7e7f12e8963a88257475dd5a5bb1baa4901c4073d0aae17f4884ce8bdd7d8e170724d0a1ec1167311909e50615b8fb3ccac06dd23b61985bfeec6e9048133610d0450ce5fe919370fb5e9e29f8dcb7b081b1aa733ac0ab15e40fe5c7494194c27782a245e90213a4b51fea068319a8d05af4c52af4a3af4be606e35c09b48d23608a33a399fa1f14ea5d527b2e540664fc70edffb66a55dffd4f6d34d0cfdc0197caef180ec89c9a61acfa14a5a6bc078c088f2eb8f45c9d1f601b23ad3cfaf7960a5bfe80527c816eaff1a464106b5e4a681f4ff2c6656bebd288f5665a6c17d0a793765ced23a7760d58cd50cf14abd2cc3eb6d8ae47b0f44cc104495ac88022ee1d0500ee9838f3b80f910030c547327a71618d78a1e78c45675233957061f5a43ea2d87f366651f5fb831d1f73727d9f3f1c0d0aac976577e4e2e864f6c212e8a5f81ae63daf1092aac29d9c81771ef2b608c3f31f8e61dbecc409a45ec68a57a74441abdcf91c6e65f90b65e8e7a7d937b518ee902e9ac6e9758fc852ec3f05f976232b7cef472642dc16cfd8be51ca477c8cd7f17eb0913cdde04db49c4e1d6e42773c688404a687957ace75b117a01a2e49fec644ab2e90bd00ad4cfe6441c259e0e2eff0bcb15d6394b3d8581655349d3f1f3a367", 0x1000, 0x31}, {&(0x7f0000000200)="a115e33a2835535776dc6f8344a032c5b77711b07446d7fd2011f8628983942de429db67e769c735992afd4000a9e21168c98033eba5071dab3395062e4cdfccd05e2855e5642ebe9b2b911840b097f21895d7e49d945c", 0x57, 0xfffffffffffffc01}, {&(0x7f0000003500)="5a48bc6c89e467e07815e0741a527fbdad578a575bc6e1e92edc7f4580ff621db5c435c1883f43f263885b448eed2cacb77ef232b157deafa3366898ce01c787b23d6702fb9287fccff2e8b051dacace834d7cb776bcba5b68aef4cd0a9035ea0360e2058fccd4ebb35ba980e365df890a91312425c93fa6dd0d70f80ed33c9e5f3306d938b54852513c6a97d97e3397cc6fd902ec5f7a01d572811d738e24a08ce875", 0xa3, 0x3}], 0x10000, &(0x7f0000003780)={[{'net/dev_mcast\x00'}, {'%,'}], [{@euid_lt={'euid<', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, 'neLRU\xca\x83\xff\xc4\x9d`\x9f\t4/duv_\x8e\x94\x9e/\xea%ct\x92'}}, {@fsname={'fsname', 0x3d, 'net/dev_mcast\x00'}}, {@measure}, {@appraise}, {@fowner_eq}, {@context={'context', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '[+\''}}]}) r5 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r8}}, 0xfffffffb) syz_io_uring_submit(0x0, r3, &(0x7f0000003740)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f00000003c0)={0x400080, 0x52, 0xb}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0x10000) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:06 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1519.610943] nfs: Unknown parameter 'net/dev_mcast' [ 1519.694413] nfs: Unknown parameter 'net/dev_mcast' 14:40:20 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 14:40:20 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 14:40:20 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:20 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) openat(r0, &(0x7f0000000740)='./file0\x00', 0xc2, 0x20) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) umount2(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4f4f, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), 0xffffffffffffffff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@generic={0x10, "97841b613b2604933d06a81e5ebd557a256adb418ce4f88719431b57579ab8e28561efd561674e42a1b9548c475bf208fd24a99a577452e2e770ab4fc9434efe42058bf523f20f12d52d19f16a3f2bdbeb7db056bb4358e72ab436c58d836f7c6d68bfbc162d997eb4920e245c6b2e0d92eef178a65a6261ba8dbf39fb1d"}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)="27015eb191f75ffacbafedcb30f851f5b2a5511a417b224a0decf7bec0656d0d88b632a24d2828ee623d5aaa82935d54526c0579a9b5b9bbda7eab271e87104dd52911f79e7a4fe4c632fd33b0d56bc4664023c4dc289b1ca0e6c0e4a62c395b6765120d133c06f86dbb0d917889b737b4da7857b911a7ab5a", 0x79}, {&(0x7f0000000380)="b86df7d426bdc8a8999ed1e5368989a0108c9f929a5e396959dde2436cb1a6ad6d19f2b2553e44cb6f6923832d055be8f324ca03c084c6b7c4bbc7d13accf5dbe057fb35ea10bf323652d0b19855127622f212e20f56f60124c2b6e0316d44af7659ff18fdd2ff78a8175ebc0306058dcb1b8875f36493073387c7eb53184948824d82c2c1e3970ef002bbed645040a854a87b28a1519062572934cf945296a9fe49d450f00ae9c478ed88f95c6b2959f0eaae1fd46e0fb42b370f0c2c16a5bfc5ce0370adaf2a79b28d563e8ecd78316d3783acacb307b1bc3206dd56b6ef9704bb41ad9cd4bcda", 0xe8}, {&(0x7f0000000500)="1d1a43510d1d8be87e054f523d9112bfe2c2fd16100182a9de77334d80c7321ba29f7c89d821a30e5ac03010b858149386edf3e14b98289078d44a91994e89c0f69854937960d85f9fd55202ffcd12cd25ba636599a0ea3f182959a00bd12383824b87ee6f4f8ee58c3fd3d7", 0x6c}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000580)="dd954bb0344a2833418befb6bff7c0108afba60ae812855113381f33fe8168aa5a985cf60fc58f16349c66823d1b1b5a6a7059be67759d776f51a24ae9e07efdae3390eca2e65b21b0b5f010735d736ad8a0d4a48c244b5e41d8b30bdb3478ef399b732b450e31c208589a7573ae0a77b161b69e928173c8fcff24e769e65c1486a5dbb4c2fcc8e74e7fe6e40f992c13e09a3f04b9cf7e43fde68dee5d7ec88e111d7db6879603d2099475a152920d684462fee8ce31afecaa5d1859b47d00b83d82c0bc769e0aa83d43c7c8e60904ac080d1940475266581a5424658e40436cefb19793", 0xe4}], 0x5, &(0x7f0000000780)=[{0xd0, 0xff, 0x9, "78dcdc09286c33ad283f34cecaf6e88a4d29d252e1d8662300992005097d3751408de4363723d2a6b15830d08645278256db280eba010f85b4c61d33caaed786fc80993e3523395c1814871e80a985af4b457b1da105501c0a3cf86b7abf582eb8d43cc0bd5d3bad386669e1fe011755e5b073259b79f34fbabfb606c3f1d36b539859b883c689f141a4cfe0a5579a2e8380f5852daaef3fa39c88ea0d7681d244c682ceea70488ec6f2ecb7f86dda530edcfa3ee975b372e1"}, {0xa8, 0x10b, 0x4, "0b64e40b5d56cf53905de8147fbf0a49d7f1724d3f89d8ede7f432bf66954fe61b108fcb760ccf8962fece8d2d2163a7442be5670cf10626aa26a04631f7774c11c5fab56fbd0b328bf28da52f60022ca52cf4d64d8641bc3e2391e71bd1b2e8e8870aefe1425aef38fe42e7d5ac5aeae9d1fe5bd0276a3c2456d07af5077c9407ead1ac4e08d3c4492874cb93b889cec9"}, {0x40, 0x10d, 0x7, "557ffbe866388b2ffb25c9b75409d25f9cee7a680987e8f19fc69cee2661a10e8c12fcf09886abec8c2c6feebd376e"}, {0x110, 0x103, 0x5, "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"}, {0x38, 0x109, 0x7, "88e646f449ec6188de4281f6133adfe2619481af0e500360887073c0247dda580028"}, {0x78, 0x29, 0x40, "e8b8644c42b82b2b9cd803987d97714bdcf4a5a6742e6f87211e6166c7172e07c6ace85a35041df52be3c9753af912eaed5b4e4ac5dafd2bc318fb522d86a43d49a8d7916966bd05666506ec76e1c4541a073787c609ecfb40ba63c71ff5591a38efbbadad"}, {0x68, 0x112, 0x7f, "c8ea6cfe4164b9c2a93916bea65402326d3ec7cad86c589732cd22b7350ab51b371f1daef5b8a4d8acb1a8626283bf7cc98039df588f469b3abfeb0cdc88e08b75bfdc8d148b5491b6c35201d39656ae21baa1"}], 0x3e0}, 0x0, 0x890, 0x0, {0x0, r3}}, 0x2) 14:40:20 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 14:40:20 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:20 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 14:40:20 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xd53b}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') fchdir(r2) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) readv(r2, &(0x7f0000000040), 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) [ 1533.188403] FAULT_INJECTION: forcing a failure. [ 1533.188403] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.191102] CPU: 0 PID: 8808 Comm: syz-executor.7 Not tainted 5.10.232 #1 [ 1533.191737] FAULT_INJECTION: forcing a failure. [ 1533.191737] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.192648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1533.192656] Call Trace: [ 1533.192688] dump_stack+0x107/0x167 [ 1533.192721] should_fail.cold+0x5/0xa [ 1533.192756] ? create_object.isra.0+0x3a/0xa20 [ 1533.192787] should_failslab+0x5/0x20 [ 1533.201119] kmem_cache_alloc+0x5b/0x310 [ 1533.202049] create_object.isra.0+0x3a/0xa20 [ 1533.203055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1533.204235] __kmalloc+0x16e/0x390 [ 1533.205070] ? lock_downgrade+0x6d0/0x6d0 [ 1533.206049] io_setup_async_rw+0x180/0x580 [ 1533.207098] io_read+0xe98/0x11e0 [ 1533.207923] ? kiocb_done+0xc90/0xc90 [ 1533.208798] ? mark_lock+0xf5/0x2df0 [ 1533.209649] ? lock_chain_count+0x20/0x20 [ 1533.210672] ? __lock_acquire+0xbb1/0x5b00 [ 1533.211652] io_issue_sqe+0x2e8a/0x77b0 [ 1533.212571] ? find_held_lock+0x2c/0x110 [ 1533.213511] ? perf_trace_lock+0xac/0x490 [ 1533.214473] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1533.215559] ? io_connect+0x610/0x610 [ 1533.216441] ? lock_acquire+0x197/0x470 [ 1533.217350] ? find_held_lock+0x2c/0x110 [ 1533.218298] ? __fget_files+0x2cf/0x520 [ 1533.219220] ? lock_downgrade+0x6d0/0x6d0 [ 1533.220176] __io_queue_sqe+0x90/0x9d0 [ 1533.221074] ? io_issue_sqe+0x77b0/0x77b0 [ 1533.222029] ? __fget_files+0x2f8/0x520 [ 1533.222961] ? io_prep_rw+0x7f5/0x1050 [ 1533.223861] io_submit_sqes+0x44aa/0x8610 [ 1533.224843] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1533.225987] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1533.227106] ? find_held_lock+0x2c/0x110 [ 1533.228042] ? io_submit_sqes+0x8610/0x8610 [ 1533.229039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1533.230149] ? wait_for_completion_io+0x270/0x270 [ 1533.231261] ? rcu_read_lock_any_held+0x75/0xa0 [ 1533.232320] ? vfs_write+0x354/0xb10 [ 1533.233176] ? fput_many+0x2f/0x1a0 [ 1533.234022] ? ksys_write+0x1a9/0x260 [ 1533.234909] ? __ia32_sys_read+0xb0/0xb0 [ 1533.235848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1533.237033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1533.238226] do_syscall_64+0x33/0x40 [ 1533.239098] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1533.240306] RIP: 0033:0x7faf61c84b19 [ 1533.241154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1533.245554] RSP: 002b:00007faf5f1fa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1533.247301] RAX: ffffffffffffffda RBX: 00007faf61d97f60 RCX: 00007faf61c84b19 [ 1533.248914] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1533.250513] RBP: 00007faf5f1fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1533.252152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1533.253773] R13: 00007ffe9c062b8f R14: 00007faf5f1fa300 R15: 0000000000022000 [ 1533.255442] CPU: 1 PID: 8810 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1533.256921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1533.258688] Call Trace: [ 1533.259263] dump_stack+0x107/0x167 [ 1533.260043] should_fail.cold+0x5/0xa [ 1533.260852] ? create_object.isra.0+0x3a/0xa20 [ 1533.261818] should_failslab+0x5/0x20 [ 1533.262629] kmem_cache_alloc+0x5b/0x310 [ 1533.263488] ? mark_held_locks+0x9e/0xe0 [ 1533.264347] create_object.isra.0+0x3a/0xa20 [ 1533.265275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1533.266352] kmem_cache_alloc_bulk+0x168/0x320 [ 1533.267341] io_submit_sqes+0x6fe6/0x8610 [ 1533.268228] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1533.269287] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1533.270340] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1533.271370] ? find_held_lock+0x2c/0x110 [ 1533.272238] ? io_submit_sqes+0x8610/0x8610 [ 1533.273131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1533.274143] ? wait_for_completion_io+0x270/0x270 [ 1533.275159] ? rcu_read_lock_any_held+0x75/0xa0 [ 1533.276117] ? vfs_write+0x354/0xb10 [ 1533.276897] ? fput_many+0x2f/0x1a0 [ 1533.277657] ? ksys_write+0x1a9/0x260 [ 1533.278438] ? __ia32_sys_read+0xb0/0xb0 [ 1533.279289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1533.280363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1533.281432] do_syscall_64+0x33/0x40 [ 1533.282207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1533.283290] RIP: 0033:0x7f6a6cb03b19 [ 1533.284077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1533.287965] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1533.289576] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1533.291089] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1533.292597] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1533.294101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1533.295608] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1533.313741] FAULT_INJECTION: forcing a failure. [ 1533.313741] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.316597] CPU: 0 PID: 8811 Comm: syz-executor.6 Not tainted 5.10.232 #1 [ 1533.318120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1533.319972] Call Trace: [ 1533.320555] dump_stack+0x107/0x167 [ 1533.321362] should_fail.cold+0x5/0xa [ 1533.322209] ? create_object.isra.0+0x3a/0xa20 [ 1533.323245] should_failslab+0x5/0x20 [ 1533.324089] kmem_cache_alloc+0x5b/0x310 [ 1533.324988] ? mark_held_locks+0x9e/0xe0 [ 1533.325889] create_object.isra.0+0x3a/0xa20 [ 1533.326879] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1533.327998] kmem_cache_alloc_bulk+0x168/0x320 [ 1533.329012] io_submit_sqes+0x6fe6/0x8610 [ 1533.329936] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1533.331053] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1533.332146] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1533.333209] ? find_held_lock+0x2c/0x110 [ 1533.334106] ? io_submit_sqes+0x8610/0x8610 [ 1533.335106] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1533.336194] ? wait_for_completion_io+0x270/0x270 [ 1533.337282] ? rcu_read_lock_any_held+0x75/0xa0 [ 1533.338321] ? vfs_write+0x354/0xb10 [ 1533.339183] ? fput_many+0x2f/0x1a0 [ 1533.340006] ? ksys_write+0x1a9/0x260 [ 1533.340864] ? __ia32_sys_read+0xb0/0xb0 [ 1533.341783] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1533.342981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1533.344155] do_syscall_64+0x33/0x40 [ 1533.345127] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1533.346379] RIP: 0033:0x7f47fa951b19 [ 1533.347227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1533.351359] RSP: 002b:00007f47f7ec7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1533.353065] RAX: ffffffffffffffda RBX: 00007f47faa64f60 RCX: 00007f47fa951b19 [ 1533.354666] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1533.356270] RBP: 00007f47f7ec71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1533.357861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1533.359458] R13: 00007ffd1a7ca8ef R14: 00007f47f7ec7300 R15: 0000000000022000 14:40:34 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 14:40:34 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:34 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 14:40:34 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:34 executing program 0: perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x72, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001500)={0x2a5, 0x22, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:34 executing program 4: setreuid(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x1eb4, &(0x7f0000001040)={0x0, 0x0, 0x2, 0x3fd, 0x391}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000010c0), &(0x7f0000001100)) getegid() syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) 14:40:34 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 14:40:34 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) [ 1547.844575] FAULT_INJECTION: forcing a failure. [ 1547.844575] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.846033] CPU: 1 PID: 8839 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1547.846860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1547.847887] Call Trace: [ 1547.848221] dump_stack+0x107/0x167 [ 1547.848672] should_fail.cold+0x5/0xa [ 1547.849150] ? create_object.isra.0+0x3a/0xa20 [ 1547.849728] should_failslab+0x5/0x20 [ 1547.850205] kmem_cache_alloc+0x5b/0x310 [ 1547.850538] FAULT_INJECTION: forcing a failure. [ 1547.850538] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.850706] ? mark_held_locks+0x9e/0xe0 [ 1547.850726] create_object.isra.0+0x3a/0xa20 [ 1547.854284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1547.854910] kmem_cache_alloc_bulk+0x168/0x320 [ 1547.855494] io_submit_sqes+0x6fe6/0x8610 [ 1547.856015] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1547.856627] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1547.857243] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1547.857840] ? find_held_lock+0x2c/0x110 [ 1547.858348] ? io_submit_sqes+0x8610/0x8610 [ 1547.858884] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1547.859483] ? wait_for_completion_io+0x270/0x270 [ 1547.860086] ? rcu_read_lock_any_held+0x75/0xa0 [ 1547.860659] ? vfs_write+0x354/0xb10 [ 1547.861123] ? fput_many+0x2f/0x1a0 [ 1547.861567] ? ksys_write+0x1a9/0x260 [ 1547.862033] ? __ia32_sys_read+0xb0/0xb0 [ 1547.862530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1547.863180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1547.863816] do_syscall_64+0x33/0x40 [ 1547.864278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1547.864905] RIP: 0033:0x7f6a6cb03b19 [ 1547.865360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1547.867631] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1547.868568] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1547.869439] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1547.870313] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1547.871199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.872060] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1547.872961] CPU: 0 PID: 8832 Comm: syz-executor.6 Not tainted 5.10.232 #1 [ 1547.874510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1547.876379] Call Trace: [ 1547.876979] dump_stack+0x107/0x167 [ 1547.877806] should_fail.cold+0x5/0xa [ 1547.878670] ? create_object.isra.0+0x3a/0xa20 [ 1547.879713] should_failslab+0x5/0x20 [ 1547.880573] kmem_cache_alloc+0x5b/0x310 [ 1547.881487] ? mark_held_locks+0x9e/0xe0 [ 1547.882403] create_object.isra.0+0x3a/0xa20 [ 1547.883405] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1547.884559] kmem_cache_alloc_bulk+0x168/0x320 [ 1547.885608] io_submit_sqes+0x6fe6/0x8610 [ 1547.886556] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1547.887690] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1547.888818] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1547.889910] ? find_held_lock+0x2c/0x110 [ 1547.890834] ? io_submit_sqes+0x8610/0x8610 [ 1547.891823] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1547.892925] ? wait_for_completion_io+0x270/0x270 [ 1547.894014] ? rcu_read_lock_any_held+0x75/0xa0 [ 1547.895072] ? vfs_write+0x354/0xb10 [ 1547.895915] ? fput_many+0x2f/0x1a0 [ 1547.896741] ? ksys_write+0x1a9/0x260 [ 1547.897597] ? __ia32_sys_read+0xb0/0xb0 [ 1547.898522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1547.899716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1547.900887] do_syscall_64+0x33/0x40 [ 1547.901724] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1547.902893] RIP: 0033:0x7f47fa951b19 [ 1547.903744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1547.907927] RSP: 002b:00007f47f7ec7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1547.909644] RAX: ffffffffffffffda RBX: 00007f47faa64f60 RCX: 00007f47fa951b19 [ 1547.911254] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1547.912863] RBP: 00007f47f7ec71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1547.914465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.916073] R13: 00007ffd1a7ca8ef R14: 00007f47f7ec7300 R15: 0000000000022000 14:40:34 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:34 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:34 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, r6, 0x8000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast1, 0x56}) dup3(r3, r4, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r5}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x11, r0, 0x8000000) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000001500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r9}}, 0xfffffffb) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x40) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:34 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:34 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:34 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:34 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:35 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 1548.174238] FAULT_INJECTION: forcing a failure. [ 1548.174238] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.175638] CPU: 1 PID: 8865 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1548.176413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1548.177367] Call Trace: [ 1548.177675] dump_stack+0x107/0x167 [ 1548.178091] should_fail.cold+0x5/0xa [ 1548.178531] ? create_object.isra.0+0x3a/0xa20 [ 1548.179063] should_failslab+0x5/0x20 [ 1548.179501] kmem_cache_alloc+0x5b/0x310 [ 1548.179964] ? mark_held_locks+0x9e/0xe0 [ 1548.180428] create_object.isra.0+0x3a/0xa20 [ 1548.180928] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1548.181512] kmem_cache_alloc_bulk+0x168/0x320 [ 1548.182045] io_submit_sqes+0x6fe6/0x8610 [ 1548.182527] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1548.183105] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1548.183675] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1548.184227] ? find_held_lock+0x2c/0x110 [ 1548.184693] ? io_submit_sqes+0x8610/0x8610 [ 1548.185193] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1548.185747] ? wait_for_completion_io+0x270/0x270 [ 1548.186303] ? rcu_read_lock_any_held+0x75/0xa0 [ 1548.186836] ? vfs_write+0x354/0xb10 [ 1548.187270] ? fput_many+0x2f/0x1a0 [ 1548.187687] ? ksys_write+0x1a9/0x260 [ 1548.188123] ? __ia32_sys_read+0xb0/0xb0 [ 1548.188590] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1548.189191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1548.189782] do_syscall_64+0x33/0x40 [ 1548.190208] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1548.190793] RIP: 0033:0x7f6a6cb03b19 [ 1548.191228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1548.193338] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1548.194215] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1548.195035] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1548.195861] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1548.196676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.197492] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 14:40:51 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:51 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 14:40:51 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYBLOB="7c9fdf0c234c23fd18304ec3a73702000000203d431d707a6b67aec2293d6f"], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) flock(0xffffffffffffffff, 0x4) write(0xffffffffffffffff, &(0x7f0000000180)="dd8975d9d2eb389518e6d5ece8f722e079e9ec8f10122e84986aee763238801c2419", 0x22) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000010c0)='-*{^]%:\x00', &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r2, &(0x7f0000001400)=""/53, 0x35) lseek(r1, 0x2, 0x4) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x50002) fchmod(r3, 0x41) r4 = dup2(0xffffffffffffffff, r2) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000002c0)={{0x1, 0x20}, 0x100, './file0\x00'}) unshare(0x48020200) 14:40:51 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x4, 0x0, 0x0, 0x6c4f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:51 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:51 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 14:40:51 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) [ 1564.392555] FAULT_INJECTION: forcing a failure. [ 1564.392555] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.395058] CPU: 1 PID: 8875 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1564.396567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1564.398382] Call Trace: [ 1564.398961] dump_stack+0x107/0x167 [ 1564.399765] should_fail.cold+0x5/0xa [ 1564.400603] ? io_setup_async_rw+0x180/0x580 [ 1564.401568] should_failslab+0x5/0x20 [ 1564.402402] __kmalloc+0x72/0x390 [ 1564.403165] io_setup_async_rw+0x180/0x580 [ 1564.404100] io_read+0xe98/0x11e0 [ 1564.404878] ? kiocb_done+0xc90/0xc90 [ 1564.405710] ? mark_lock+0xf5/0x2df0 [ 1564.406532] ? lock_chain_count+0x20/0x20 [ 1564.407454] ? __lockdep_reset_lock+0x180/0x180 [ 1564.408492] ? lock_acquire+0x197/0x470 [ 1564.409370] ? __lock_acquire+0xbb1/0x5b00 [ 1564.410301] io_issue_sqe+0x2e8a/0x77b0 [ 1564.411181] ? perf_trace_lock+0xac/0x490 [ 1564.412102] ? lock_chain_count+0x20/0x20 [ 1564.413011] ? io_connect+0x610/0x610 [ 1564.413851] ? lock_acquire+0x197/0x470 [ 1564.414718] ? find_held_lock+0x2c/0x110 [ 1564.415615] ? __fget_files+0x2cf/0x520 [ 1564.416494] ? lock_downgrade+0x6d0/0x6d0 [ 1564.417412] __io_queue_sqe+0x90/0x9d0 [ 1564.418271] ? io_issue_sqe+0x77b0/0x77b0 [ 1564.419175] ? __fget_files+0x2f8/0x520 [ 1564.420058] ? io_prep_rw+0x7f5/0x1050 [ 1564.420921] io_submit_sqes+0x44aa/0x8610 [ 1564.421862] ? __do_sys_io_uring_enter+0x6b2/0x1890 14:40:51 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1564.422952] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1564.424205] ? find_held_lock+0x2c/0x110 [ 1564.425118] ? io_submit_sqes+0x8610/0x8610 [ 1564.426071] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1564.427131] ? wait_for_completion_io+0x270/0x270 [ 1564.428206] ? rcu_read_lock_any_held+0x75/0xa0 [ 1564.429219] ? vfs_write+0x354/0xb10 [ 1564.430032] ? fput_many+0x2f/0x1a0 [ 1564.430824] ? ksys_write+0x1a9/0x260 [ 1564.431661] ? __ia32_sys_read+0xb0/0xb0 [ 1564.432556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1564.433702] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1564.434828] do_syscall_64+0x33/0x40 [ 1564.435648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1564.436770] RIP: 0033:0x7f6a6cb03b19 [ 1564.437578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1564.441597] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1564.443208] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1564.444718] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1564.446211] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1564.447716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1564.449209] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1564.499186] FAULT_INJECTION: forcing a failure. [ 1564.499186] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.502023] CPU: 1 PID: 8885 Comm: syz-executor.6 Not tainted 5.10.232 #1 [ 1564.503481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1564.505247] Call Trace: [ 1564.505812] dump_stack+0x107/0x167 [ 1564.506587] should_fail.cold+0x5/0xa [ 1564.507402] ? create_object.isra.0+0x3a/0xa20 [ 1564.508384] should_failslab+0x5/0x20 [ 1564.509198] kmem_cache_alloc+0x5b/0x310 [ 1564.510068] ? mark_held_locks+0x9e/0xe0 [ 1564.510933] create_object.isra.0+0x3a/0xa20 [ 1564.511876] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1564.512965] kmem_cache_alloc_bulk+0x168/0x320 [ 1564.513945] io_submit_sqes+0x6fe6/0x8610 [ 1564.514838] ? __io_uring_add_tctx_node+0xe6/0x520 14:40:51 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1564.515906] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1564.517227] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1564.518261] ? find_held_lock+0x2c/0x110 [ 1564.519162] ? io_submit_sqes+0x8610/0x8610 [ 1564.520103] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1564.521130] ? wait_for_completion_io+0x270/0x270 [ 1564.522160] ? rcu_read_lock_any_held+0x75/0xa0 [ 1564.523148] ? vfs_write+0x354/0xb10 [ 1564.523949] ? fput_many+0x2f/0x1a0 [ 1564.524729] ? ksys_write+0x1a9/0x260 [ 1564.525541] ? __ia32_sys_read+0xb0/0xb0 [ 1564.526408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1564.527519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1564.528628] do_syscall_64+0x33/0x40 [ 1564.529421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1564.530506] RIP: 0033:0x7f47fa951b19 [ 1564.531294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1564.535205] RSP: 002b:00007f47f7ec7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1564.536839] RAX: ffffffffffffffda RBX: 00007f47faa64f60 RCX: 00007f47fa951b19 [ 1564.538350] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1564.539871] RBP: 00007f47f7ec71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1564.541386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.542896] R13: 00007ffd1a7ca8ef R14: 00007f47f7ec7300 R15: 0000000000022000 14:40:51 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x9, 0xffffff00, 0x2, 0x81, 0x401}) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = syz_io_uring_setup(0x7985, &(0x7f0000000000)={0x0, 0x5c6e, 0x2, 0x1, 0xe7, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r4 = open(&(0x7f0000000140)='./file0\x00', 0x8a880, 0x1) sendfile(r3, r4, &(0x7f0000000180)=0x6, 0x40) fcntl$setpipe(r1, 0x407, 0x944) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:51 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:51 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0xe4, 0x7f, 0x3f, 0x0, 0xf12, 0x24000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x51407, 0x3, 0xfff, 0x3, 0x7ce, 0x6, 0xbed, 0x0, 0x400, 0x0, 0x4}, 0x0, 0x4, r0, 0x8) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x44, 0x7f, 0x40, 0x91, 0x0, 0xffffffffffffffff, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x4001, 0x10001, 0x10001, 0x6, 0x79f5, 0x8, 0x4, 0x0, 0xffff, 0x0, 0xfbc}, r2, 0x8, 0xffffffffffffffff, 0x19) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:40:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x128080, 0x0) lseek(r2, 0x6, 0x0) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca472674d1c8e0edc60b101683ab28289f358d8df374908f386e92b463519053e515b4ddf76554abd753c66cbe240d21e7b6584a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1f9484cc658d1cd5845643215e67753735e7ec58ca14a8942b98d019524f7cbcf9549edfe851b5aa033656cb23ccadbfdd8115263c8ede43491d41a285c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ec77690bb45ef6027d1d879a0617420be517a60e0400000000000000fd10a8043847d417fa033ff85b23a6eee3474a57679e8f4aae21dd27eaff66d36bf31607698b32f24ae48b400a0f304846f11ca998488be5ea699f96f2a9901aca655824b64095abfc13c5afe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464eac17783e3f57b229bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d153390257253bd29e37dd9b9c23bd6ac0fe7cf3cb546f"]) getdents(r4, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) pwrite64(r3, &(0x7f0000000080)="bac3ca0a9743027c2e1b723e4fbeb600c0c089a85361d2f3ca04e172a43c75245de02cd71cb54ae7abe88df1ff81", 0x2e, 0x3) getdents64(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 14:40:51 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:40:51 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 14:40:51 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 14:40:52 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x3e, 0x0, 0x0, 0xb0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x4}, 0x1650, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:41:06 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 14:41:06 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:06 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 14:41:06 executing program 4: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)={0x0, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20c800, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a263b74b6aa829f2", "8cf2c9903337a233d43afa527cd18a96", "56f9a623", "9624e1b3ecd889ef"}, 0x28) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000140)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @broadcast, @from_mac, {0x8, 0x3f}}, 0x3f, @val={0x8c, 0x18, {0x531, "b86ded07d97d", @long="c877eae542f1c169f00408e66a61e099"}}}, 0x34) 14:41:06 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 14:41:06 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x2000) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'veth1_to_team\x00', 0x1}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:41:06 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:06 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1579.677574] FAULT_INJECTION: forcing a failure. [ 1579.677574] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.679160] CPU: 1 PID: 8936 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1579.680081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1579.681198] Call Trace: [ 1579.681554] dump_stack+0x107/0x167 14:41:06 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1579.682174] should_fail.cold+0x5/0xa [ 1579.682191] ? create_object.isra.0+0x3a/0xa20 [ 1579.682207] should_failslab+0x5/0x20 [ 1579.682220] kmem_cache_alloc+0x5b/0x310 [ 1579.682237] create_object.isra.0+0x3a/0xa20 [ 1579.682248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1579.682264] __kmalloc+0x16e/0x390 [ 1579.682282] io_setup_async_rw+0x180/0x580 [ 1579.682297] io_read+0xe98/0x11e0 [ 1579.682319] ? kiocb_done+0xc90/0xc90 [ 1579.682332] ? mark_lock+0xf5/0x2df0 [ 1579.682349] ? lock_chain_count+0x20/0x20 [ 1579.682371] ? __lockdep_reset_lock+0x180/0x180 [ 1579.682390] ? lock_acquire+0x197/0x470 [ 1579.682408] ? __lock_acquire+0xbb1/0x5b00 [ 1579.682424] io_issue_sqe+0x2e8a/0x77b0 [ 1579.682442] ? perf_trace_lock+0xac/0x490 14:41:06 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1579.682455] ? lock_chain_count+0x20/0x20 [ 1579.682471] ? io_connect+0x610/0x610 [ 1579.682487] ? lock_acquire+0x197/0x470 [ 1579.682499] ? find_held_lock+0x2c/0x110 [ 1579.682516] ? __fget_files+0x2cf/0x520 [ 1579.682529] ? lock_downgrade+0x6d0/0x6d0 14:41:06 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1579.682545] __io_queue_sqe+0x90/0x9d0 [ 1579.682562] ? io_issue_sqe+0x77b0/0x77b0 [ 1579.682573] ? __fget_files+0x2f8/0x520 [ 1579.682589] ? io_prep_rw+0x7f5/0x1050 [ 1579.682606] io_submit_sqes+0x44aa/0x8610 [ 1579.682639] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1579.682651] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1579.682666] ? find_held_lock+0x2c/0x110 [ 1579.682682] ? io_submit_sqes+0x8610/0x8610 [ 1579.682703] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1579.682719] ? wait_for_completion_io+0x270/0x270 [ 1579.682735] ? rcu_read_lock_any_held+0x75/0xa0 [ 1579.682747] ? vfs_write+0x354/0xb10 [ 1579.682760] ? fput_many+0x2f/0x1a0 [ 1579.682773] ? ksys_write+0x1a9/0x260 [ 1579.682787] ? __ia32_sys_read+0xb0/0xb0 [ 1579.682803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1579.682816] ? syscall_enter_from_user_mode+0x1d/0x50 14:41:06 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1579.682830] do_syscall_64+0x33/0x40 [ 1579.682842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1579.682851] RIP: 0033:0x7f6a6cb03b19 [ 1579.682863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1579.682870] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1579.682885] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1579.682893] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 14:41:06 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1579.682900] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 14:41:06 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 1579.682907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1579.682915] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1579.690135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:41:06 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1580.034966] FAULT_INJECTION: forcing a failure. [ 1580.034966] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.036361] CPU: 1 PID: 8964 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1580.037161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1580.038127] Call Trace: [ 1580.038433] dump_stack+0x107/0x167 [ 1580.038848] should_fail.cold+0x5/0xa [ 1580.039290] ? __io_queue_sqe+0x666/0x9d0 [ 1580.039764] should_failslab+0x5/0x20 [ 1580.040213] kmem_cache_alloc_trace+0x55/0x320 [ 1580.040731] ? lock_downgrade+0x6d0/0x6d0 [ 1580.041204] __io_queue_sqe+0x666/0x9d0 [ 1580.041662] ? io_issue_sqe+0x77b0/0x77b0 [ 1580.042132] ? __fget_files+0x2f8/0x520 [ 1580.042588] ? io_prep_rw+0x7f5/0x1050 [ 1580.043034] io_submit_sqes+0x44aa/0x8610 [ 1580.043523] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1580.044091] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1580.044650] ? find_held_lock+0x2c/0x110 [ 1580.045114] ? io_submit_sqes+0x8610/0x8610 [ 1580.045610] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1580.046164] ? wait_for_completion_io+0x270/0x270 [ 1580.046714] ? rcu_read_lock_any_held+0x75/0xa0 [ 1580.047245] ? vfs_write+0x354/0xb10 [ 1580.047670] ? fput_many+0x2f/0x1a0 [ 1580.048085] ? ksys_write+0x1a9/0x260 [ 1580.048526] ? __ia32_sys_read+0xb0/0xb0 [ 1580.048991] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1580.049588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1580.050174] do_syscall_64+0x33/0x40 [ 1580.050597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1580.051181] RIP: 0033:0x7f6a6cb03b19 [ 1580.051604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.053705] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1580.054580] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1580.055387] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1580.056210] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1580.057023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1580.057836] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 14:41:06 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:07 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 14:41:07 executing program 4: prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000640)='net/hci\x00') prlimit64(r0, 0x0, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) 14:41:21 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 14:41:21 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 14:41:21 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:21 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) timer_gettime(0x0, &(0x7f0000000080)) semtimedop(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r1, &(0x7f0000000400)="68187d97f521471bb168873ab488daf8bfd1c23a83a25ff2198a026d1fbfc8985886d7b9a820ce1ff3ef7e6fa0c77ad7d76b4c540f57090e8a422fb8bf63bcbd006af070b6d6b71315a77d9e492fef9a4f573cf793e9a2627fe84e96499c80bfd3e442794a11bd2584921df9ba33c68c93fa5307d67834aa79c9f19f7e338d17a3e1951eacbfdd9469bd610125a1992ffe2dcf95b00ab7d296e169e979d21f0e227126b50cacc18480ab5fb70ad9fed2df0eaa1c16c038c138042126a4a26619cf71f85011cbc2ec7b3b678562bf3cf204a68dbf79c886ba9807684a9107cc76c388", 0xe2, 0x5, 0x0) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x5, &(0x7f0000000140)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000180)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000300)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000006c0)=0x0) clone3(&(0x7f0000000740)={0x91010c00, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x26}, &(0x7f00000005c0)=""/4, 0x4, &(0x7f0000000600)=""/140, &(0x7f0000000700)=[r2, r2, r4, r2, r2, r2, r2], 0x7, {r0}}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000000340)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b8200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33353633373030303500"/180, 0xb4, 0x400}, {&(0x7f0000010100)="00000000002000000000000039c043f6970341999833e8e90d2470c4010040000c00000000000000dbf4655f00"/60, 0x3c, 0x4e0}, {&(0x7f0000010200)="01000000000005004000000000000000", 0x10, 0x560}, {&(0x7f0000010300)="02000000030000000400000005000f000300040000000000", 0x18, 0x1000}, {0x0}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4080}, {&(0x7f0000012700), 0x0, 0x8004500}, {0x0, 0x0, 0xb1}, {&(0x7f0000013000)="504d4d00504d4dffdc", 0x9, 0x40000}], 0x0, &(0x7f0000000080)) 14:41:21 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:41:21 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 14:41:21 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 14:41:21 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1594.657685] FAULT_INJECTION: forcing a failure. [ 1594.657685] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.659407] CPU: 0 PID: 8992 Comm: syz-executor.2 Not tainted 5.10.232 #1 [ 1594.660350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1594.661495] Call Trace: [ 1594.661857] dump_stack+0x107/0x167 [ 1594.662353] should_fail.cold+0x5/0xa [ 1594.662879] should_failslab+0x5/0x20 [ 1594.663396] kmem_cache_alloc_bulk+0x4b/0x320 [ 1594.664013] io_submit_sqes+0x6fe6/0x8610 [ 1594.664580] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1594.665268] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1594.665940] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1594.666598] ? find_held_lock+0x2c/0x110 [ 1594.667150] ? io_submit_sqes+0x8610/0x8610 [ 1594.667743] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1594.668411] ? wait_for_completion_io+0x270/0x270 [ 1594.669081] ? rcu_read_lock_any_held+0x75/0xa0 [ 1594.669715] ? vfs_write+0x354/0xb10 [ 1594.670223] ? fput_many+0x2f/0x1a0 [ 1594.670724] ? ksys_write+0x1a9/0x260 [ 1594.671241] ? __ia32_sys_read+0xb0/0xb0 [ 1594.671794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1594.672501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1594.673207] do_syscall_64+0x33/0x40 [ 1594.673710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1594.674409] RIP: 0033:0x7f701d82bb19 [ 1594.674915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1594.677437] RSP: 002b:00007f701ada1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1594.678470] RAX: ffffffffffffffda RBX: 00007f701d93ef60 RCX: 00007f701d82bb19 [ 1594.679439] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1594.680407] RBP: 00007f701ada11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.681389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.682354] R13: 00007ffef891663f R14: 00007f701ada1300 R15: 0000000000022000 [ 1594.716419] FAULT_INJECTION: forcing a failure. [ 1594.716419] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.718868] CPU: 1 PID: 9002 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1594.720316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1594.722076] Call Trace: [ 1594.722650] dump_stack+0x107/0x167 [ 1594.723437] should_fail.cold+0x5/0xa [ 1594.724253] ? create_object.isra.0+0x3a/0xa20 [ 1594.725247] should_failslab+0x5/0x20 [ 1594.726049] kmem_cache_alloc+0x5b/0x310 [ 1594.726927] create_object.isra.0+0x3a/0xa20 [ 1594.727854] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1594.728935] kmem_cache_alloc_trace+0x151/0x320 [ 1594.729911] ? lock_downgrade+0x6d0/0x6d0 [ 1594.730789] __io_queue_sqe+0x666/0x9d0 [ 1594.731630] ? io_issue_sqe+0x77b0/0x77b0 [ 1594.732501] ? __fget_files+0x2f8/0x520 [ 1594.733345] ? io_prep_rw+0x7f5/0x1050 [ 1594.734178] io_submit_sqes+0x44aa/0x8610 [ 1594.735076] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1594.736120] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1594.737142] ? find_held_lock+0x2c/0x110 [ 1594.737997] ? io_submit_sqes+0x8610/0x8610 [ 1594.738919] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1594.739939] ? wait_for_completion_io+0x270/0x270 [ 1594.740972] ? rcu_read_lock_any_held+0x75/0xa0 [ 1594.741948] ? vfs_write+0x354/0xb10 [ 1594.742732] ? fput_many+0x2f/0x1a0 [ 1594.743505] ? ksys_write+0x1a9/0x260 [ 1594.744304] ? __ia32_sys_read+0xb0/0xb0 [ 1594.745173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1594.746265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1594.747356] do_syscall_64+0x33/0x40 [ 1594.748141] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1594.749216] RIP: 0033:0x7f6a6cb03b19 [ 1594.749995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1594.753842] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1594.755435] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1594.756934] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1594.758420] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.759911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1594.761411] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 14:41:21 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x79, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="b3fd4d67bd56c71331cc75c1a25d6041e677687fbf9127f181f730b549e8ae899422268b456b41f96acd93cdf33043b6c1b82353542ec7f241e89e664d48e3057bc9f36211cc458c9aa5474f1aa766a86065fc1aa6d46cb0510b5fc438e5c740332b16f828061f3da4158805215ab9ab7a2f87a980a3f9990807ebd584a77f4544903aff9e0486a9b2ea90c9542387e56d728ae77fe1d9d7db0486db1e2ba54cdeb9c87be6c3a73dc6a5a29dafc920886b67a584dbc8f52a41c0a87672eaade3279142bf52d2fe", 0xc7, 0x6}], 0x100000, &(0x7f0000000540)={[{@sysvgroups}, {@test_dummy_encryption}, {@nodelalloc}, {@mblk_io_submit}, {@nogrpid}, {@mblk_io_submit}], [{@subj_user={'subj_user', 0x3d, 'ramfs\x00'}}, {@euid_lt={'euid<', r0}}, {@euid_lt={'euid<', r1}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffc}}, {@smackfsdef={'smackfsdef', 0x3d, '+'}}, {@measure}, {@uid_gt={'uid>', r2}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) mount(&(0x7f0000000680)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='jffs2\x00', 0x1801c04, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) 14:41:21 executing program 0: perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000005100)=""/4099, 0x1003}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/89, 0x59}], 0x3) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) pwritev2(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="c7d2", 0x2}, {&(0x7f0000000200)="e1e065cc3e3e0e9d0bcd7da75b4245745a7b040de4c7dc94abdeef1cb1f5e38607a6d2f4a64052ffca9612a17685f9ab18fb5cc593d6ea714ab5e9390e48f2fd2cce95565aca41cd2c847d534f54321041d9e2e51c077c87dab1bee497339522a155fc763e523f3849a8cc4e", 0x6c}], 0x2, 0x10000, 0x6, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f0000000640)='net/hci\x00') sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x2bc0}, 0x1, 0x0, 0x0, 0x40051}, 0x800) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/131, 0x83, 0xfffffffffffffff8) 14:41:21 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:21 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 14:41:21 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000440)="c58435b56fadce6925a8c5ef8299d1c9436890996f121c55fd3949c7ffe74e562d5b7ad3ba81ec2ee03296fc177baf9eb677c3b886f2d2f6f15bbb7648f0411a0e88a7e1de93ae4056fd27712f2d24552e5d7d39ec16e048786d22b4989871bad0f0ee169831b6e6f3e5f6aec27d337087b8119f6d755f6e40547c31e63fdaf4b4593725c72c370172c9527216a415009b28cfab12175e4c530e215b70f7b654b1cc73e9eabfb340bcf589b70ae5e8acd00b6770b80a2a135bf9bd68f3679d8a46b4c50a69d29136daef4804fe9cb5f8caceaeb2b7310d7154d547c522215a4a59b9787a63c4e818bd23c5668aa30f9e030613", 0x0}}, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @binary="04002d18"}]}]}, 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000001940)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000019c0)=""/78, 0x4e}, {&(0x7f0000001a40)=""/1, 0x1}], 0x2, &(0x7f0000001ac0)=""/207, 0xcf}}, {{&(0x7f0000001bc0)=@ieee802154, 0x80, &(0x7f0000002180)=[{&(0x7f0000001c40)=""/152, 0x98}, {&(0x7f0000001e00)=""/242, 0xf2}, {&(0x7f0000001d00)=""/121, 0x79}, {&(0x7f0000001fc0)=""/111, 0x6f}, {&(0x7f0000002040)=""/154, 0x9a}, {&(0x7f0000002100)=""/51, 0x33}, {0x0}], 0x7, &(0x7f0000002200)=""/54, 0x36}, 0x1d70}, {{&(0x7f0000002240)=@nl=@unspec, 0x80, &(0x7f0000002700)=[{&(0x7f00000022c0)=""/79, 0x4f}, {&(0x7f0000002340)=""/43, 0x2b}, {&(0x7f0000002380)=""/96, 0x60}, {&(0x7f0000002400)=""/247, 0xf7}, {&(0x7f0000002600)=""/219, 0xdb}], 0x5, &(0x7f0000002780)=""/71, 0x47}, 0x1000}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002800)=""/102, 0x66}], 0x1, &(0x7f00000028c0)=""/17, 0x11}, 0x8}, {{&(0x7f0000002900)=@xdp, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002980)}, {&(0x7f00000029c0)=""/188, 0xbc}, {&(0x7f0000002a80)=""/72, 0x48}, {&(0x7f0000002b00)=""/181, 0xb5}, {0x0}, {&(0x7f0000002d00)=""/121, 0x79}, {&(0x7f0000002d80)=""/16, 0x10}], 0x7, &(0x7f0000002e40)=""/232, 0xe8}, 0x2}], 0x5, 0x40002001, 0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x34}, &(0x7f0000000880)) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0x3, 0x1f, 0x2}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:41:35 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 14:41:35 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="090000eb", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf25530000000c0099000000000028000000"], 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0x404c000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:41:35 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 14:41:35 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 14:41:35 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:35 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 14:41:35 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 14:41:35 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x7, 0x1e, 0x0, 0x40080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = syz_open_dev$hiddev(&(0x7f0000000200), 0x98d, 0x10080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x9ac9bb26206c4639) mknod(&(0x7f0000000180)='./file0/../file0\x00', 0x10, 0x7fff) truncate(&(0x7f00000002c0)='./file1\x00', 0x0) openat(r1, &(0x7f0000000280)='./file1\x00', 0x840002, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f00000000c0)=ANY=[@ANYBLOB='barrier=Jx00000Z>0000000C0,\x00']) [ 1608.721721] FAULT_INJECTION: forcing a failure. [ 1608.721721] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.725112] CPU: 0 PID: 9045 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1608.726666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.728618] Call Trace: [ 1608.729252] dump_stack+0x107/0x167 [ 1608.730195] should_fail.cold+0x5/0xa [ 1608.731227] ? io_setup_async_rw+0x180/0x580 [ 1608.732389] should_failslab+0x5/0x20 [ 1608.733427] __kmalloc+0x72/0x390 [ 1608.734376] ? lock_downgrade+0x6d0/0x6d0 [ 1608.735510] io_setup_async_rw+0x180/0x580 [ 1608.736528] io_read+0xe98/0x11e0 [ 1608.737480] ? register_lock_class+0xbb/0x17b0 [ 1608.738729] ? kiocb_done+0xc90/0xc90 [ 1608.739763] ? mark_lock+0xf5/0x2df0 [ 1608.740771] ? lock_chain_count+0x20/0x20 [ 1608.741877] ? __lock_acquire+0xbb1/0x5b00 [ 1608.742815] io_issue_sqe+0x2e8a/0x77b0 [ 1608.743695] ? find_held_lock+0x2c/0x110 [ 1608.744597] ? perf_trace_lock+0xac/0x490 [ 1608.745568] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1608.746655] ? io_connect+0x610/0x610 [ 1608.747498] ? lock_acquire+0x197/0x470 [ 1608.748403] ? find_held_lock+0x2c/0x110 [ 1608.749331] ? __fget_files+0x2cf/0x520 [ 1608.750220] ? lock_downgrade+0x6d0/0x6d0 [ 1608.751175] __io_queue_sqe+0x90/0x9d0 [ 1608.752244] ? io_issue_sqe+0x77b0/0x77b0 [ 1608.753203] ? __fget_files+0x2f8/0x520 [ 1608.754111] ? io_prep_rw+0x7f5/0x1050 [ 1608.755004] io_submit_sqes+0x44aa/0x8610 [ 1608.756001] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1608.757345] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1608.758424] ? find_held_lock+0x2c/0x110 [ 1608.759349] ? io_submit_sqes+0x8610/0x8610 [ 1608.760526] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1608.761849] ? wait_for_completion_io+0x270/0x270 [ 1608.762955] ? rcu_read_lock_any_held+0x75/0xa0 [ 1608.763990] ? vfs_write+0x354/0xb10 [ 1608.764834] ? fput_many+0x2f/0x1a0 [ 1608.765695] ? ksys_write+0x1a9/0x260 [ 1608.766698] ? __ia32_sys_read+0xb0/0xb0 [ 1608.767610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1608.768793] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1608.769947] do_syscall_64+0x33/0x40 [ 1608.770760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1608.771898] RIP: 0033:0x7f6a6cb03b19 [ 1608.772753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.775105] EXT4-fs (sda): Unrecognized mount option "barrier=Jx00000Z>0000000C0" or missing value [ 1608.776897] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1608.776921] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1608.776932] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1608.776942] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.776953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1608.776964] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1608.803160] FAULT_INJECTION: forcing a failure. [ 1608.803160] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.806200] CPU: 1 PID: 9046 Comm: syz-executor.2 Not tainted 5.10.232 #1 [ 1608.807889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.809972] Call Trace: [ 1608.810644] dump_stack+0x107/0x167 [ 1608.811553] should_fail.cold+0x5/0xa [ 1608.812513] ? create_object.isra.0+0x3a/0xa20 [ 1608.813657] ? create_object.isra.0+0x3a/0xa20 [ 1608.814790] should_failslab+0x5/0x20 [ 1608.815741] kmem_cache_alloc+0x5b/0x310 [ 1608.816759] create_object.isra.0+0x3a/0xa20 [ 1608.817850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1608.819115] kmem_cache_alloc_bulk+0x168/0x320 [ 1608.820256] io_submit_sqes+0x6fe6/0x8610 [ 1608.821284] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1608.822511] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1608.823734] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1608.824925] ? find_held_lock+0x2c/0x110 [ 1608.825953] ? io_submit_sqes+0x8610/0x8610 [ 1608.827038] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1608.828240] ? wait_for_completion_io+0x270/0x270 [ 1608.829436] ? rcu_read_lock_any_held+0x75/0xa0 [ 1608.830580] ? vfs_write+0x354/0xb10 [ 1608.831508] ? fput_many+0x2f/0x1a0 [ 1608.832406] ? ksys_write+0x1a9/0x260 [ 1608.833336] ? __ia32_sys_read+0xb0/0xb0 [ 1608.834329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1608.835613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1608.836886] do_syscall_64+0x33/0x40 [ 1608.837809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1608.839066] RIP: 0033:0x7f701d82bb19 [ 1608.839967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.844386] RSP: 002b:00007f701ada1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1608.846238] RAX: ffffffffffffffda RBX: 00007f701d93ef60 RCX: 00007f701d82bb19 [ 1608.848006] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1608.849749] RBP: 00007f701ada11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.851487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.853219] R13: 00007ffef891663f R14: 00007f701ada1300 R15: 0000000000022000 14:41:35 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) readv(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4085, 0xff5}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:41:35 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:35 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) setresuid(0xee00, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'security.selinux\x00'}, {}], 0xa, "b16294f881301a1f3c433c8427096bedd52dc1a950c86ec4bdc3640b175a11015a516b300cefac6c14cf3824bbe94992978e35bb69852c1b01a143173069ce2171eba9d94d63afc4faeac37a0dc6a60c5cdd991ec686b643cc4899ecd19b658831a90cbfd1bdd13d2fd66a9449dbf950aa16ae9c1ac9978120ce275af023f3521f56a80e5bd4e5213441764633945da93cfc3c5224412a38950dd81816decbc9028bdacc7c864ca85eba777b30641c"}, 0xcd) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) fstat(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', r0, r4) 14:41:35 executing program 0: timer_create(0x2, &(0x7f0000000100)={0x0, 0x32, 0x4, @thr={&(0x7f0000000000)="8933008c26d738da0cb348a7a52de9432be3e8a4678a8f69807d48e33441ffbd29bcd20801e1150932247562cab75453f58eafae39c0504ce6a196ace048a24541f1582082330c42a6e40422e91123b3190c0462f74f92f4", &(0x7f00000000c0)="396eb5efa43466161bec73410e19e5842de84c0e40de78b0dd15012f86f68ed782eef602772399c6281c377642d83c2abea3ce6b6b86bf3ae8"}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x9) 14:41:35 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1609.090571] audit: type=1401 audit(1735915296.012:246): op=setxattr invalid_context="" [ 1609.099965] audit: type=1401 audit(1735915296.022:247): op=setxattr invalid_context="" 14:41:36 executing program 4: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x1ff, 0x0, 0x401}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd=r0, 0x1000000000000000, 0x0, 0x0, 0x1, 0x1}, 0x3) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) syz_io_uring_setup(0x2fc2, &(0x7f0000000180)={0x0, 0x608d, 0x20, 0x3, 0x17b}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)=""/64, 0x40}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/91, 0x5b}], 0x3, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x10001) read(r5, &(0x7f0000000680)=""/153, 0x99) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r2, 0x10000000) syz_io_uring_setup(0x6459, &(0x7f0000000740)={0x0, 0xbe3, 0x10, 0x0, 0x2a4, 0x0, r4}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) syz_io_uring_setup(0x2875, &(0x7f0000000840)={0x0, 0x59d8, 0x0, 0x1, 0x36a, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000940)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x7, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x5) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x7) 14:41:36 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0x101, 0x1, {0x3, 0x1, 0x0, 0x0, 0x1f}, 0x6}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:41:50 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:50 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 14:41:50 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 14:41:50 executing program 4: r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) fstatfs(r1, &(0x7f00000006c0)=""/182) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x4001c0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, r5, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100), 0x7d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002480), 0x800, 0x0) ioctl$CDROMREADAUDIO(r6, 0x530e, &(0x7f0000000ac0)={@msf, 0x1, 0x1, &(0x7f0000000a80)=""/1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 14:41:50 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 14:41:50 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 14:41:50 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 14:41:50 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1623.870663] FAULT_INJECTION: forcing a failure. [ 1623.870663] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.872490] CPU: 0 PID: 9088 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1623.873414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1623.874538] Call Trace: [ 1623.874895] dump_stack+0x107/0x167 [ 1623.875389] should_fail.cold+0x5/0xa [ 1623.875911] ? create_object.isra.0+0x3a/0xa20 [ 1623.876538] should_failslab+0x5/0x20 [ 1623.877053] kmem_cache_alloc+0x5b/0x310 [ 1623.877603] create_object.isra.0+0x3a/0xa20 [ 1623.878217] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1623.878914] __kmalloc+0x16e/0x390 [ 1623.879397] ? lock_downgrade+0x6d0/0x6d0 [ 1623.879933] io_setup_async_rw+0x180/0x580 [ 1623.880472] io_read+0xe98/0x11e0 [ 1623.880919] ? register_lock_class+0xbb/0x17b0 [ 1623.881536] ? kiocb_done+0xc90/0xc90 [ 1623.882072] ? mark_lock+0xf5/0x2df0 [ 1623.882551] ? lock_chain_count+0x20/0x20 [ 1623.883149] ? __lock_acquire+0xbb1/0x5b00 [ 1623.883727] io_issue_sqe+0x2e8a/0x77b0 [ 1623.884281] ? find_held_lock+0x2c/0x110 [ 1623.884848] ? perf_trace_lock+0xac/0x490 [ 1623.885417] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1623.886086] ? io_connect+0x610/0x610 [ 1623.886611] ? lock_acquire+0x197/0x470 [ 1623.887154] ? find_held_lock+0x2c/0x110 [ 1623.887708] ? __fget_files+0x2cf/0x520 [ 1623.888260] ? lock_downgrade+0x6d0/0x6d0 [ 1623.888796] __io_queue_sqe+0x90/0x9d0 [ 1623.888813] ? io_issue_sqe+0x77b0/0x77b0 [ 1623.888839] ? __fget_files+0x2f8/0x520 [ 1623.890779] ? io_prep_rw+0x7f5/0x1050 [ 1623.891321] io_submit_sqes+0x44aa/0x8610 [ 1623.891900] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1623.892569] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1623.893252] ? find_held_lock+0x2c/0x110 [ 1623.893789] ? io_submit_sqes+0x8610/0x8610 [ 1623.894387] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1623.895045] ? wait_for_completion_io+0x270/0x270 [ 1623.895703] ? rcu_read_lock_any_held+0x75/0xa0 [ 1623.896337] ? vfs_write+0x354/0xb10 [ 1623.896848] ? fput_many+0x2f/0x1a0 [ 1623.897337] ? ksys_write+0x1a9/0x260 [ 1623.897855] ? __ia32_sys_read+0xb0/0xb0 [ 1623.898402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1623.899105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1623.899803] do_syscall_64+0x33/0x40 [ 1623.900304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1623.900999] RIP: 0033:0x7f6a6cb03b19 [ 1623.901500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.903988] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1623.905037] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1623.906017] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1623.906993] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1623.907949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1623.908917] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1623.929278] FAULT_INJECTION: forcing a failure. [ 1623.929278] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.931886] CPU: 1 PID: 9085 Comm: syz-executor.2 Not tainted 5.10.232 #1 [ 1623.933311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1623.935058] Call Trace: [ 1623.935626] dump_stack+0x107/0x167 [ 1623.936410] should_fail.cold+0x5/0xa [ 1623.937229] ? create_object.isra.0+0x3a/0xa20 [ 1623.938206] should_failslab+0x5/0x20 [ 1623.939014] kmem_cache_alloc+0x5b/0x310 [ 1623.939874] ? mark_held_locks+0x9e/0xe0 [ 1623.940732] create_object.isra.0+0x3a/0xa20 [ 1623.941658] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1623.942741] kmem_cache_alloc_bulk+0x168/0x320 [ 1623.943707] io_submit_sqes+0x6fe6/0x8610 [ 1623.944595] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1623.945641] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1623.946703] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1623.947719] ? find_held_lock+0x2c/0x110 [ 1623.948586] ? io_submit_sqes+0x8610/0x8610 [ 1623.949503] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1623.950540] ? wait_for_completion_io+0x270/0x270 [ 1623.951560] ? rcu_read_lock_any_held+0x75/0xa0 [ 1623.952540] ? vfs_write+0x354/0xb10 [ 1623.953324] ? fput_many+0x2f/0x1a0 [ 1623.954110] ? ksys_write+0x1a9/0x260 [ 1623.954915] ? __ia32_sys_read+0xb0/0xb0 [ 1623.955768] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1623.956883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1623.957992] do_syscall_64+0x33/0x40 [ 1623.958786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1623.959878] RIP: 0033:0x7f701d82bb19 [ 1623.960661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.964545] RSP: 002b:00007f701ada1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1623.966152] RAX: ffffffffffffffda RBX: 00007f701d93ef60 RCX: 00007f701d82bb19 [ 1623.967656] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1623.969157] RBP: 00007f701ada11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1623.970678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.972181] R13: 00007ffef891663f R14: 00007f701ada1300 R15: 0000000000022000 14:41:50 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:50 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:41:51 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 14:41:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x100) r2 = memfd_create(&(0x7f0000000240)='-\xcd\x00', 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) io_submit(0x0, 0x5, &(0x7f0000001580)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)="71ae2a783c7d0fe7bd6a7f2a14f508082d949dbd0aa20b00e65d7336a9b4564d3a70b3bbfeca79f53165152574f7582fbfe98bb65c67ab1b9461688adaaef7681bd8ffa75158a4c7846fbcddea84417054ced8e2e0550fbb0c1a285206b8d96fca8c70026a1280a3cf2ae174ed17fdc9768f63e13dd905b1ef6fb3224bfeb4bba47055b7c7f3f242169d96b0cfd05e24d2f28ac4cfcbfe38790099b81fd8e2e2c11d6a1b797bd5a485447c77fa84eacbda85e87abd692149be69a2ff550967b5b76ae592b8d65cc97ba87f24a0dee24b9d565b", 0xd3, 0x6, 0x0, 0x3, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xb, 0xf2, r1, &(0x7f00000001c0)="f18cf5da1fb065c3411d4bc1a27c20d812185b3c318d090f6dcb8552cc", 0x1d, 0x5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f00000002c0)="f0e96e40056ca56aebcd70abda43365a64a91f9edf4bd3bd288fb67fb84d503d1571ea280d10fbb6d39dc56d3ab573379b4fee6cd55959cd61b0e05aeea96826f12219343a017bf66e5878ae86b68b35c2c53c47ee2edb1e6f4711b271cd2168ca9b", 0x62, 0xb000, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x3f, 0xffffffffffffffff, &(0x7f0000000380)="ebbeed18dab614350bdcf2ae6e331b2b7e9bfabcea8bf6ae2d1ed7aebcf210f1d2", 0x21, 0x101, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000001500)="c18bbc5959783ef06c5d81863fcf43e151809c168e20ed3671c801bd888876d3c1e877625e78c3e0d12a610cb3b71545bdcd68c3abe9ba712be8d8c76464ae45a901375453648bc37266c304b4aed0c867", 0x51, 0x90000000, 0x0, 0x1, r3}]) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:41:51 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:51 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:41:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x6359, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x200, @private1, 0xdd}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) dup2(r2, r1) fallocate(r1, 0x3, 0x0, 0x30000000000) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x7, 0x80, 0x1, 0x40, 0x0, 0x7f, 0x11a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffffffffff99, 0x8000}, 0x400, 0x98bd, 0x9, 0x7, 0x4, 0x2c84, 0x4, 0x0, 0x1f, 0x0, 0xf74}, 0x0, 0x2, 0xffffffffffffffff, 0x8) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x12, 0xc21}, 0x14}, 0x1, 0x0, 0x0, 0x8881}, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x9}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000003e00)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) 14:41:51 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 14:41:51 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x10000000}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) close_range(r1, r4, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:42:04 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 14:42:04 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 14:42:04 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 14:42:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000c80)=@disckey={0x2, 0x0, "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"}) fadvise64(r0, 0x4, 0x9, 0x0) 14:42:04 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 14:42:04 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 14:42:04 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:42:04 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = pidfd_getfd(r0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x1, 0x1f, 0x81, 0x0, 0x9, 0x91011, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x7, 0x100}, 0x0, 0xe000000000, 0x2, 0x1, 0x1, 0x3ff, 0x7, 0x0, 0x8c8c, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r2, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xbf, 0x7, 0x7, 0x20, 0x0, 0x802, 0x408, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_config_ext={0x991, 0x8001}, 0x6040, 0x2, 0x80, 0x2, 0x4, 0x3, 0x1, 0x0, 0xff, 0x0, 0x7fff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 1637.755552] FAULT_INJECTION: forcing a failure. [ 1637.755552] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.757187] CPU: 0 PID: 9151 Comm: syz-executor.2 Not tainted 5.10.232 #1 [ 1637.758085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.759146] Call Trace: [ 1637.759489] dump_stack+0x107/0x167 [ 1637.759955] should_fail.cold+0x5/0xa [ 1637.760486] ? create_object.isra.0+0x3a/0xa20 [ 1637.761069] should_failslab+0x5/0x20 [ 1637.761553] kmem_cache_alloc+0x5b/0x310 [ 1637.762066] ? mark_held_locks+0x9e/0xe0 [ 1637.762597] create_object.isra.0+0x3a/0xa20 [ 1637.763147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1637.763790] kmem_cache_alloc_bulk+0x168/0x320 [ 1637.764372] io_submit_sqes+0x6fe6/0x8610 [ 1637.764906] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1637.765530] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1637.766157] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1637.766833] ? find_held_lock+0x2c/0x110 [ 1637.767347] ? io_submit_sqes+0x8610/0x8610 [ 1637.767894] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.768502] ? wait_for_completion_io+0x270/0x270 [ 1637.769107] ? rcu_read_lock_any_held+0x75/0xa0 [ 1637.769688] ? vfs_write+0x354/0xb10 [ 1637.770192] ? fput_many+0x2f/0x1a0 [ 1637.770691] ? ksys_write+0x1a9/0x260 [ 1637.771204] ? __ia32_sys_read+0xb0/0xb0 [ 1637.771715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1637.772370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.773075] do_syscall_64+0x33/0x40 [ 1637.773545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.774243] RIP: 0033:0x7f701d82bb19 [ 1637.774752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.777055] RSP: 002b:00007f701ada1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1637.778013] RAX: ffffffffffffffda RBX: 00007f701d93ef60 RCX: 00007f701d82bb19 [ 1637.778922] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1637.779814] RBP: 00007f701ada11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.780712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.781688] R13: 00007ffef891663f R14: 00007f701ada1300 R15: 0000000000022000 [ 1637.784983] FAULT_INJECTION: forcing a failure. [ 1637.784983] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.786704] CPU: 0 PID: 9152 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1637.787599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.788655] Call Trace: [ 1637.789007] dump_stack+0x107/0x167 [ 1637.789502] should_fail.cold+0x5/0xa [ 1637.790012] ? __io_queue_sqe+0x666/0x9d0 [ 1637.790582] should_failslab+0x5/0x20 [ 1637.791110] kmem_cache_alloc_trace+0x55/0x320 [ 1637.791723] ? lock_downgrade+0x6d0/0x6d0 [ 1637.792293] __io_queue_sqe+0x666/0x9d0 [ 1637.792811] ? io_issue_sqe+0x77b0/0x77b0 [ 1637.793328] ? __fget_files+0x2f8/0x520 [ 1637.793869] ? io_prep_rw+0x7f5/0x1050 [ 1637.794376] io_submit_sqes+0x44aa/0x8610 [ 1637.794911] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1637.795536] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1637.796137] ? find_held_lock+0x2c/0x110 [ 1637.796645] ? io_submit_sqes+0x8610/0x8610 [ 1637.797185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.797787] ? wait_for_completion_io+0x270/0x270 [ 1637.798417] ? rcu_read_lock_any_held+0x75/0xa0 [ 1637.798998] ? vfs_write+0x354/0xb10 [ 1637.799500] ? fput_many+0x2f/0x1a0 [ 1637.799987] ? ksys_write+0x1a9/0x260 [ 1637.800463] ? __ia32_sys_read+0xb0/0xb0 [ 1637.801020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1637.801728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.802430] do_syscall_64+0x33/0x40 [ 1637.802937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.803626] RIP: 0033:0x7f6a6cb03b19 [ 1637.804125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.806544] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1637.807480] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1637.808362] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1637.809242] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.810121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1637.811013] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 14:42:04 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:42:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000002040)=ANY=[@ANYBLOB="7f454c4600000007000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000200000000000000030000000000e8c78873000000e0fff2ffffffffffffff000000474c1b619792a7"], 0xaf2) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat(r1, &(0x7f0000000040)='./file1\x00', 0x100, 0x44) 14:42:04 executing program 0: syz_open_dev$vcsu(&(0x7f0000000580), 0x27f25a86, 0x80002) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0x1, 0x81, 0x6, 0x2, 0x7, "645910a2d12e26e40e1a9ce44798185dbf9aed", 0x0, 0x5}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) sched_getattr(0x0, &(0x7f000000bb40)={0x38}, 0x99, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000"}) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000080)={0x1, 0x8, 0x9}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x810, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r7}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x4, 0x7, 0x0, 0x7, 0x7, "3b6589ea086f7dd493ad034825fe29c3b869ba", 0x8, 0x3}) openat(r5, &(0x7f00000003c0)='./file0/file0\x00', 0x100, 0x1d1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x8000, 0x40000008, 0x1f, 0x40a6, 0x89, "fd0ac8760c2123c0200feeb5463a043c13b934", 0xc823, 0x1000}) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 14:42:05 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:42:05 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 14:42:05 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 14:42:05 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 14:42:05 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:42:05 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 14:42:05 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 14:42:05 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1638.565268] FAULT_INJECTION: forcing a failure. [ 1638.565268] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.568668] CPU: 0 PID: 9185 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1638.570239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1638.572126] Call Trace: [ 1638.572728] dump_stack+0x107/0x167 [ 1638.573562] should_fail.cold+0x5/0xa [ 1638.574446] ? __io_queue_sqe+0x666/0x9d0 [ 1638.575391] should_failslab+0x5/0x20 [ 1638.576261] kmem_cache_alloc_trace+0x55/0x320 [ 1638.577294] ? lock_downgrade+0x6d0/0x6d0 [ 1638.578247] __io_queue_sqe+0x666/0x9d0 [ 1638.579160] ? io_issue_sqe+0x77b0/0x77b0 [ 1638.580100] ? __fget_files+0x2f8/0x520 [ 1638.581009] ? io_prep_rw+0x7f5/0x1050 [ 1638.581904] io_submit_sqes+0x44aa/0x8610 [ 1638.582884] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1638.584014] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1638.585115] ? find_held_lock+0x2c/0x110 [ 1638.586043] ? io_submit_sqes+0x8610/0x8610 [ 1638.587038] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1638.588135] ? wait_for_completion_io+0x270/0x270 [ 1638.589233] ? rcu_read_lock_any_held+0x75/0xa0 [ 1638.590297] ? vfs_write+0x354/0xb10 [ 1638.591151] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1638.592189] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1638.593433] ? ksys_write+0x1a9/0x260 [ 1638.594297] ? __ia32_sys_read+0xb0/0xb0 [ 1638.595213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1638.596390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1638.597547] do_syscall_64+0x33/0x40 [ 1638.598391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1638.599538] RIP: 0033:0x7f6a6cb03b19 [ 1638.600377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1638.604526] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1638.606217] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1638.607817] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1638.609410] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.611007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1638.612589] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1638.636546] FAULT_INJECTION: forcing a failure. [ 1638.636546] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.639334] CPU: 0 PID: 9187 Comm: syz-executor.2 Not tainted 5.10.232 #1 [ 1638.640868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1638.642749] Call Trace: [ 1638.643354] dump_stack+0x107/0x167 [ 1638.644194] should_fail.cold+0x5/0xa [ 1638.645068] ? create_object.isra.0+0x3a/0xa20 [ 1638.646114] should_failslab+0x5/0x20 [ 1638.646989] kmem_cache_alloc+0x5b/0x310 [ 1638.647909] ? mark_held_locks+0x9e/0xe0 [ 1638.648837] create_object.isra.0+0x3a/0xa20 [ 1638.649812] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1638.650956] kmem_cache_alloc_bulk+0x168/0x320 [ 1638.651976] io_submit_sqes+0x6fe6/0x8610 [ 1638.652914] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1638.654024] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1638.655133] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1638.656208] ? find_held_lock+0x2c/0x110 [ 1638.657115] ? io_submit_sqes+0x8610/0x8610 [ 1638.658084] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1638.659170] ? wait_for_completion_io+0x270/0x270 [ 1638.660244] ? rcu_read_lock_any_held+0x75/0xa0 [ 1638.661276] ? vfs_write+0x354/0xb10 [ 1638.662104] ? fput_many+0x2f/0x1a0 [ 1638.662925] ? ksys_write+0x1a9/0x260 [ 1638.663773] ? __ia32_sys_read+0xb0/0xb0 [ 1638.664679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1638.665834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1638.666989] do_syscall_64+0x33/0x40 [ 1638.667815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1638.668958] RIP: 0033:0x7f701d82bb19 [ 1638.669785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1638.673875] RSP: 002b:00007f701ada1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1638.675575] RAX: ffffffffffffffda RBX: 00007f701d93ef60 RCX: 00007f701d82bb19 [ 1638.677153] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1638.678750] RBP: 00007f701ada11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.680326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1638.681911] R13: 00007ffef891663f R14: 00007f701ada1300 R15: 0000000000022000 14:42:05 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:42:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xe164, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000300)={0x4, 0x80, 0x0, 0x0, 0x8, 0xff, 0x0, 0xfffffffffffff801, 0x10000, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000040), 0x3}, 0x5000, 0x100000001, 0x80000000, 0x4, 0x4, 0x6, 0x400, 0x0, 0x6, 0x0, 0x5f53}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054c00)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "336545c2542a4c"}) sendmsg$inet6(r1, &(0x7f0000000680)={&(0x7f0000000380)={0xa, 0x4e21, 0x6436, @local, 0x3}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000003c0)="01000f43986e9b02ccd8fd258d9c10dbb04fb473685fe00fd44a5c05d0eb9c045936416d424c94b30ccddd99b86da63bae3230c7d72161625e69f5ae301e0221f91c3950e73321889b689752823cb315d749a64b938345d446c06d4e816e2d91bce6b09e4f0f23813329c012d44c08ce301d5ec0a8d6a9687a6b00705c9a1a5abb7e1978956e330316818ab572615ec72ba272294ece92d2d2b543b922287600ce32af4f", 0xa4}, {&(0x7f0000000500)="247afa31d3b5f72bfc3a4ecc54b87c6f98b7af99af62e0ab7e24bf956fd3b11225331431883bd0fea069a29b1ad762d38c736572a61ca0e15b4ba122414506cb5fc21f147fa1e97064f5534c58", 0x4d}, {&(0x7f0000000580)="01cd94bffda03a0bef6f7f5ff44fb261319e939782137136eaba6f41d0f56060e1ad59c450ff6152f5c1275619", 0x2d}, {&(0x7f00000005c0)="afd0371b9b81af3c09049bcd39dbdb3b73975768ad9044894ddd35d3dbca0c799d44f83cb30440f9bda2328400a6bd5e31746161fb98f08e979f6717586f6b92ccbf77a4c404", 0x46}], 0x4, &(0x7f0000000740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts={{0x30, 0x29, 0x36, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x21, 0x7, '\x00', [@pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x2e, 0x1, [0x81]}}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfc}, @padn={0x1, 0x1, [0x0]}, @pad1, @ra={0x5, 0x2, 0x101}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x1d, 0x6, 0x1, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x3b, 0x8, '\x00', [@pad1, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0xfffc}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x1, 0x3, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}], 0x190}, 0x80) r8 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:42:21 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 14:42:21 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 14:42:21 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 14:42:21 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 14:42:21 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 14:42:21 executing program 0: syz_open_dev$vcsu(&(0x7f0000000580), 0x27f25a86, 0x80002) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0x1, 0x81, 0x6, 0x2, 0x7, "645910a2d12e26e40e1a9ce44798185dbf9aed", 0x0, 0x5}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) sched_getattr(0x0, &(0x7f000000bb40)={0x38}, 0x99, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000"}) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000080)={0x1, 0x8, 0x9}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x810, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r7}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x4, 0x7, 0x0, 0x7, 0x7, "3b6589ea086f7dd493ad034825fe29c3b869ba", 0x8, 0x3}) openat(r5, &(0x7f00000003c0)='./file0/file0\x00', 0x100, 0x1d1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x8000, 0x40000008, 0x1f, 0x40a6, 0x89, "fd0ac8760c2123c0200feeb5463a043c13b934", 0xc823, 0x1000}) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 14:42:21 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 14:42:21 executing program 4: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0), 0x4) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x10, &(0x7f0000000340)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x23, 0x1, &(0x7f0000000100)="c7731f89a2a924e3ffd877c10cf48b4dc5ad2c38502168a25e472158d7a9ef271988ef0b3f6f12d1ea3b1de4482e06f83b0d9c9ba10a02e9cf2ceed34e5aaa6e990c527da62ba0ee8afeefc4ce5a4415801f165f5b2e18a4e2d5d1202f6593", 0x6, 0x0, 0x1, {0x2}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x308) [ 1655.035327] FAULT_INJECTION: forcing a failure. [ 1655.035327] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.038226] CPU: 0 PID: 9218 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1655.039789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.041665] Call Trace: [ 1655.042268] dump_stack+0x107/0x167 [ 1655.043102] should_fail.cold+0x5/0xa [ 1655.043971] ? io_setup_async_rw+0x180/0x580 [ 1655.044977] should_failslab+0x5/0x20 [ 1655.044995] __kmalloc+0x72/0x390 [ 1655.045014] ? lock_downgrade+0x6d0/0x6d0 [ 1655.045037] io_setup_async_rw+0x180/0x580 [ 1655.045060] io_read+0xe98/0x11e0 [ 1655.045094] ? kiocb_done+0xc90/0xc90 [ 1655.045110] ? mark_lock+0xf5/0x2df0 [ 1655.045137] ? lock_chain_count+0x20/0x20 [ 1655.045196] ? __lock_acquire+0xbb1/0x5b00 [ 1655.045221] io_issue_sqe+0x2e8a/0x77b0 [ 1655.045242] ? find_held_lock+0x2c/0x110 [ 1655.045263] ? perf_trace_lock+0xac/0x490 [ 1655.045283] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1655.045305] ? io_connect+0x610/0x610 [ 1655.045330] ? lock_acquire+0x197/0x470 [ 1655.045347] ? find_held_lock+0x2c/0x110 [ 1655.045372] ? __fget_files+0x2cf/0x520 [ 1655.045392] ? lock_downgrade+0x6d0/0x6d0 [ 1655.045416] __io_queue_sqe+0x90/0x9d0 [ 1655.045442] ? io_issue_sqe+0x77b0/0x77b0 [ 1655.045458] ? __fget_files+0x2f8/0x520 [ 1655.045482] ? io_prep_rw+0x7f5/0x1050 [ 1655.045508] io_submit_sqes+0x44aa/0x8610 [ 1655.045559] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1655.045576] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1655.045598] ? find_held_lock+0x2c/0x110 [ 1655.045623] ? io_submit_sqes+0x8610/0x8610 [ 1655.045653] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1655.045678] ? wait_for_completion_io+0x270/0x270 [ 1655.045701] ? rcu_read_lock_any_held+0x75/0xa0 [ 1655.045719] ? vfs_write+0x354/0xb10 [ 1655.045739] ? fput_many+0x2f/0x1a0 [ 1655.045759] ? ksys_write+0x1a9/0x260 [ 1655.045779] ? __ia32_sys_read+0xb0/0xb0 [ 1655.045803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.045822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1655.045844] do_syscall_64+0x33/0x40 [ 1655.045862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1655.045875] RIP: 0033:0x7f6a6cb03b19 [ 1655.045893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.045904] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1655.045927] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1655.045938] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1655.045949] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.045960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1655.045971] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1655.053081] FAULT_INJECTION: forcing a failure. [ 1655.053081] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.061023] FAULT_INJECTION: forcing a failure. [ 1655.061023] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.061046] CPU: 1 PID: 9227 Comm: syz-executor.2 Not tainted 5.10.232 #1 [ 1655.106904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.106911] Call Trace: [ 1655.106940] dump_stack+0x107/0x167 [ 1655.106961] should_fail.cold+0x5/0xa [ 1655.106985] ? create_object.isra.0+0x3a/0xa20 [ 1655.107007] should_failslab+0x5/0x20 [ 1655.107027] kmem_cache_alloc+0x5b/0x310 [ 1655.107047] ? mark_held_locks+0x9e/0xe0 [ 1655.107070] create_object.isra.0+0x3a/0xa20 [ 1655.107086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1655.107111] kmem_cache_alloc_bulk+0x168/0x320 [ 1655.107138] io_submit_sqes+0x6fe6/0x8610 [ 1655.107167] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1655.107204] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1655.107221] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1655.107243] ? find_held_lock+0x2c/0x110 [ 1655.107269] ? io_submit_sqes+0x8610/0x8610 [ 1655.107298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1655.107323] ? wait_for_completion_io+0x270/0x270 [ 1655.107346] ? rcu_read_lock_any_held+0x75/0xa0 [ 1655.107363] ? vfs_write+0x354/0xb10 [ 1655.107382] ? fput_many+0x2f/0x1a0 [ 1655.107402] ? ksys_write+0x1a9/0x260 [ 1655.107421] ? __ia32_sys_read+0xb0/0xb0 [ 1655.107445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.107464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1655.107486] do_syscall_64+0x33/0x40 [ 1655.107504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1655.107517] RIP: 0033:0x7f701d82bb19 [ 1655.107535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.107545] RSP: 002b:00007f701ada1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1655.107569] RAX: ffffffffffffffda RBX: 00007f701d93ef60 RCX: 00007f701d82bb19 [ 1655.107580] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1655.107590] RBP: 00007f701ada11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.107601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.107612] R13: 00007ffef891663f R14: 00007f701ada1300 R15: 0000000000022000 [ 1655.107661] CPU: 0 PID: 9225 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1655.107674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.107680] Call Trace: [ 1655.107703] dump_stack+0x107/0x167 [ 1655.107724] should_fail.cold+0x5/0xa [ 1655.107755] should_failslab+0x5/0x20 [ 1655.107773] kmem_cache_alloc_bulk+0x4b/0x320 [ 1655.107798] io_submit_sqes+0x6fe6/0x8610 [ 1655.107827] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1655.107864] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1655.107880] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1655.107903] ? find_held_lock+0x2c/0x110 [ 1655.107928] ? io_submit_sqes+0x8610/0x8610 [ 1655.107956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1655.107980] ? wait_for_completion_io+0x270/0x270 [ 1655.108001] ? rcu_read_lock_any_held+0x75/0xa0 [ 1655.108018] ? vfs_write+0x354/0xb10 [ 1655.108036] ? fput_many+0x2f/0x1a0 [ 1655.108056] ? ksys_write+0x1a9/0x260 [ 1655.108076] ? __ia32_sys_read+0xb0/0xb0 [ 1655.108100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1655.108118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1655.108139] do_syscall_64+0x33/0x40 [ 1655.108157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1655.108170] RIP: 0033:0x7f13d8adab19 [ 1655.108188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.108198] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1655.108219] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1655.108230] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1655.108241] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.108251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.108261] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 14:42:36 executing program 0: syz_open_dev$vcsu(&(0x7f0000000580), 0x27f25a86, 0x80002) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0x1, 0x81, 0x6, 0x2, 0x7, "645910a2d12e26e40e1a9ce44798185dbf9aed", 0x0, 0x5}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) sched_getattr(0x0, &(0x7f000000bb40)={0x38}, 0x99, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000"}) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000080)={0x1, 0x8, 0x9}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x810, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r7}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x4, 0x7, 0x0, 0x7, 0x7, "3b6589ea086f7dd493ad034825fe29c3b869ba", 0x8, 0x3}) openat(r5, &(0x7f00000003c0)='./file0/file0\x00', 0x100, 0x1d1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x8000, 0x40000008, 0x1f, 0x40a6, 0x89, "fd0ac8760c2123c0200feeb5463a043c13b934", 0xc823, 0x1000}) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 14:42:36 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 14:42:36 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 14:42:36 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 14:42:36 executing program 4: perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85", 0x3}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r7, 0x8000000) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x2, 0x86, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r8, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0, 0x4010, r5, 0x8000000) syz_io_uring_setup(0x27a8, &(0x7f0000000340)={0x0, 0xb717, 0x10, 0xfffffffc, 0x1e6, 0x0, r0}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 14:42:36 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 14:42:36 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 14:42:36 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1669.742378] FAULT_INJECTION: forcing a failure. [ 1669.742378] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.744314] CPU: 1 PID: 9246 Comm: syz-executor.3 Not tainted 5.10.232 #1 [ 1669.745424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.746769] Call Trace: [ 1669.747205] dump_stack+0x107/0x167 [ 1669.747805] should_fail.cold+0x5/0xa [ 1669.748423] ? create_object.isra.0+0x3a/0xa20 [ 1669.749169] should_failslab+0x5/0x20 [ 1669.749788] kmem_cache_alloc+0x5b/0x310 [ 1669.750453] create_object.isra.0+0x3a/0xa20 [ 1669.751172] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.752000] __kmalloc+0x16e/0x390 [ 1669.752583] io_setup_async_rw+0x180/0x580 [ 1669.753275] io_read+0xe98/0x11e0 [ 1669.753839] ? kiocb_done+0xc90/0xc90 [ 1669.754456] ? mark_lock+0xf5/0x2df0 [ 1669.755068] ? lock_chain_count+0x20/0x20 [ 1669.756170] ? __lock_acquire+0xbb1/0x5b00 [ 1669.757269] io_issue_sqe+0x2e8a/0x77b0 [ 1669.758294] ? find_held_lock+0x2c/0x110 [ 1669.759357] ? perf_trace_lock+0xac/0x490 [ 1669.760421] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1669.761499] ? io_connect+0x610/0x610 [ 1669.762328] ? lock_acquire+0x197/0x470 [ 1669.763186] ? find_held_lock+0x2c/0x110 [ 1669.764083] ? __fget_files+0x2cf/0x520 [ 1669.764939] ? lock_downgrade+0x6d0/0x6d0 [ 1669.765836] __io_queue_sqe+0x90/0x9d0 [ 1669.766681] ? io_issue_sqe+0x77b0/0x77b0 [ 1669.767579] ? __fget_files+0x2f8/0x520 [ 1669.768444] ? io_prep_rw+0x7f5/0x1050 [ 1669.769288] io_submit_sqes+0x44aa/0x8610 [ 1669.770212] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1669.771284] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1669.772333] ? find_held_lock+0x2c/0x110 [ 1669.773213] ? io_submit_sqes+0x8610/0x8610 [ 1669.774153] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1669.775196] ? wait_for_completion_io+0x270/0x270 [ 1669.776244] ? rcu_read_lock_any_held+0x75/0xa0 [ 1669.777244] ? vfs_write+0x354/0xb10 [ 1669.778047] ? fput_many+0x2f/0x1a0 [ 1669.778834] ? ksys_write+0x1a9/0x260 [ 1669.779662] ? __ia32_sys_read+0xb0/0xb0 [ 1669.780536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.781643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.782733] do_syscall_64+0x33/0x40 [ 1669.783527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.784610] RIP: 0033:0x7f6a6cb03b19 [ 1669.785404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.789294] RSP: 002b:00007f6a6a079188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1669.790905] RAX: ffffffffffffffda RBX: 00007f6a6cc16f60 RCX: 00007f6a6cb03b19 [ 1669.792422] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1669.793925] RBP: 00007f6a6a0791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.795449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.796966] R13: 00007ffedf426f4f R14: 00007f6a6a079300 R15: 0000000000022000 [ 1669.828427] FAULT_INJECTION: forcing a failure. [ 1669.828427] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.830903] CPU: 1 PID: 9247 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1669.832371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.834162] Call Trace: [ 1669.834752] dump_stack+0x107/0x167 [ 1669.835555] should_fail.cold+0x5/0xa [ 1669.836387] ? create_object.isra.0+0x3a/0xa20 [ 1669.837379] should_failslab+0x5/0x20 [ 1669.838201] kmem_cache_alloc+0x5b/0x310 [ 1669.839076] create_object.isra.0+0x3a/0xa20 [ 1669.840018] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.841100] kmem_cache_alloc_bulk+0x168/0x320 [ 1669.842076] io_submit_sqes+0x6fe6/0x8610 [ 1669.842964] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1669.844032] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1669.845087] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1669.846116] ? find_held_lock+0x2c/0x110 [ 1669.846983] ? io_submit_sqes+0x8610/0x8610 [ 1669.847917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1669.848950] ? wait_for_completion_io+0x270/0x270 [ 1669.849975] ? rcu_read_lock_any_held+0x75/0xa0 [ 1669.850959] ? vfs_write+0x354/0xb10 [ 1669.851758] ? fput_many+0x2f/0x1a0 [ 1669.852534] ? ksys_write+0x1a9/0x260 [ 1669.853344] ? __ia32_sys_read+0xb0/0xb0 [ 1669.854209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.855320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.856430] do_syscall_64+0x33/0x40 [ 1669.857222] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.858309] RIP: 0033:0x7f13d8adab19 [ 1669.859100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.863022] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1669.864647] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1669.866165] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1669.867693] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.869210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.870721] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 [ 1669.878436] FAULT_INJECTION: forcing a failure. [ 1669.878436] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.881476] CPU: 0 PID: 9257 Comm: syz-executor.2 Not tainted 5.10.232 #1 [ 1669.883112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1669.885063] Call Trace: [ 1669.885689] dump_stack+0x107/0x167 [ 1669.886545] should_fail.cold+0x5/0xa [ 1669.887454] ? create_object.isra.0+0x3a/0xa20 [ 1669.888528] should_failslab+0x5/0x20 [ 1669.889423] kmem_cache_alloc+0x5b/0x310 [ 1669.890382] ? mark_held_locks+0x9e/0xe0 [ 1669.891358] create_object.isra.0+0x3a/0xa20 [ 1669.892392] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1669.893587] kmem_cache_alloc_bulk+0x168/0x320 [ 1669.894669] io_submit_sqes+0x6fe6/0x8610 [ 1669.895660] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1669.896816] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1669.897988] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1669.899110] ? find_held_lock+0x2c/0x110 [ 1669.900066] ? io_submit_sqes+0x8610/0x8610 [ 1669.901085] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1669.902246] ? wait_for_completion_io+0x270/0x270 [ 1669.903422] ? rcu_read_lock_any_held+0x75/0xa0 [ 1669.904497] ? vfs_write+0x354/0xb10 [ 1669.905370] ? fput_many+0x2f/0x1a0 [ 1669.906227] ? ksys_write+0x1a9/0x260 [ 1669.907126] ? __ia32_sys_read+0xb0/0xb0 [ 1669.908080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1669.909287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1669.910478] do_syscall_64+0x33/0x40 [ 1669.911345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1669.912530] RIP: 0033:0x7f701d82bb19 [ 1669.913392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.917642] RSP: 002b:00007f701ada1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1669.919399] RAX: ffffffffffffffda RBX: 00007f701d93ef60 RCX: 00007f701d82bb19 [ 1669.921068] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1669.922696] RBP: 00007f701ada11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.924350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.925983] R13: 00007ffef891663f R14: 00007f701ada1300 R15: 0000000000022000 14:42:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210000, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001640)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000200)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x900, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) unshare(0x48020200) 14:42:37 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 14:42:37 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 14:42:37 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 1670.664686] FAULT_INJECTION: forcing a failure. [ 1670.664686] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.667121] CPU: 1 PID: 9276 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1670.668578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1670.670331] Call Trace: [ 1670.670894] dump_stack+0x107/0x167 [ 1670.671677] should_fail.cold+0x5/0xa [ 1670.672483] ? create_object.isra.0+0x3a/0xa20 [ 1670.673451] should_failslab+0x5/0x20 [ 1670.674254] kmem_cache_alloc+0x5b/0x310 [ 1670.675119] create_object.isra.0+0x3a/0xa20 [ 1670.676055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1670.677132] kmem_cache_alloc_bulk+0x168/0x320 [ 1670.678104] io_submit_sqes+0x6fe6/0x8610 [ 1670.678992] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1670.680057] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1670.681107] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1670.682131] ? find_held_lock+0x2c/0x110 [ 1670.682993] ? io_submit_sqes+0x8610/0x8610 [ 1670.683926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1670.684950] ? wait_for_completion_io+0x270/0x270 [ 1670.685972] ? rcu_read_lock_any_held+0x75/0xa0 [ 1670.686957] ? vfs_write+0x354/0xb10 [ 1670.687756] ? fput_many+0x2f/0x1a0 [ 1670.688527] ? ksys_write+0x1a9/0x260 [ 1670.689337] ? __ia32_sys_read+0xb0/0xb0 [ 1670.690199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1670.691306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1670.692409] do_syscall_64+0x33/0x40 [ 1670.693198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1670.694279] RIP: 0033:0x7f13d8adab19 [ 1670.695067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.698972] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1670.700597] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1670.702111] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1670.703632] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.705147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.706656] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 14:42:37 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 14:42:37 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000340)='cifs.spnego\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={0x0, 0x35, 0xc5}, &(0x7f0000000380)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736d332d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000e10000"], &(0x7f0000000300)="23e5380db0af4bc759f1ad4917640ed0d0bf66e2a9f0774b1f0c48c82e3a5942bc13c69aa219596afdef1f45f179a82937165aaee4", &(0x7f0000000400)=""/197) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x1f, 0x1}, 0x800, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) 14:42:37 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:42:37 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:42:37 executing program 0: syz_open_dev$vcsu(&(0x7f0000000580), 0x27f25a86, 0x80002) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0x1, 0x81, 0x6, 0x2, 0x7, "645910a2d12e26e40e1a9ce44798185dbf9aed", 0x0, 0x5}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) sched_getattr(0x0, &(0x7f000000bb40)={0x38}, 0x99, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000"}) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000080)={0x1, 0x8, 0x9}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x810, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r7}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x4, 0x7, 0x0, 0x7, 0x7, "3b6589ea086f7dd493ad034825fe29c3b869ba", 0x8, 0x3}) openat(r5, &(0x7f00000003c0)='./file0/file0\x00', 0x100, 0x1d1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x8000, 0x40000008, 0x1f, 0x40a6, 0x89, "fd0ac8760c2123c0200feeb5463a043c13b934", 0xc823, 0x1000}) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 14:42:37 executing program 4: inotify_init1(0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000440)='\"\xff\xff\xff\x7f\x00\x00\x00\x00\xcf]?L\ay\x17\x80\xda\x03F\xcfg)\x9d!z\xdf\xc6\x1d\xb0\xa5\xc7%]GP\xc7\xb0@%\xe4p]\xd9q\\\x1f\xa5\x89N\xac]\xa6zZ\xda\xb0\xfd\xcb\x86\xfb\xc3=X\x1c\x82\x05\xc0\x9c\x82:k\xff]\x1c\x1f\x90\xa5&\x7f|=m\xa5\xfa\xbd\xf2R\x94TG\xdcK\xd5\x06\xab)\xc7\xd0\aH\'kE\xf5UH\x88by.\xc6\xf2\xae\xfa^4,\xc5\xd1\x85\xacoV:\x11\x04\x9f\x1c\xd4e3\xacI\x83\xf0Fv\xb6&I\x16\x93\x9c\xe7(;\xd893o\x03+Q\x97\xd3r\xb4G\xd0\x040x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 14:42:38 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 14:42:38 executing program 4: inotify_init1(0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000440)='\"\xff\xff\xff\x7f\x00\x00\x00\x00\xcf]?L\ay\x17\x80\xda\x03F\xcfg)\x9d!z\xdf\xc6\x1d\xb0\xa5\xc7%]GP\xc7\xb0@%\xe4p]\xd9q\\\x1f\xa5\x89N\xac]\xa6zZ\xda\xb0\xfd\xcb\x86\xfb\xc3=X\x1c\x82\x05\xc0\x9c\x82:k\xff]\x1c\x1f\x90\xa5&\x7f|=m\xa5\xfa\xbd\xf2R\x94TG\xdcK\xd5\x06\xab)\xc7\xd0\aH\'kE\xf5UH\x88by.\xc6\xf2\xae\xfa^4,\xc5\xd1\x85\xacoV:\x11\x04\x9f\x1c\xd4e3\xacI\x83\xf0Fv\xb6&I\x16\x93\x9c\xe7(;\xd893o\x03+Q\x97\xd3r\xb4G\xd0\x040x0}) setresuid(0xffffffffffffffff, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_mount_image$nfs4(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x7ff, 0x4, &(0x7f0000000a00)=[{&(0x7f0000001880)="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", 0x1000, 0x4000}, {&(0x7f0000000840)="1e55689a193c2a40d0d8e71947d9ccf8fe7a57049fe9af466c2cea28151a3732b68aa710a36782ab2fefb145282ebdb4c8afc506affb9ffba1302eb7c587cfece80384ec019897311c25254d46167daacdc585a86f3cd4862410daf28991ea463e5482e8fc7b859e41e9b4945b9dd8a520fa8ba2ee2f452d7c0155927302c805d506f12fe89dfa6cdba1acf3d213299eb2f6d204a38be8e50c683bd2c9e5ae89b5e721938071de626615b7e0b592db302655605b97746a820ef5789d03ce050b2769c0ebc86c8faa23203b", 0xcb, 0xe5}, {&(0x7f0000000940), 0x0, 0x9}, {&(0x7f0000000980)="eea4cb30e61e32e68c6a2dea8648121958f7ed3624d93c70534764cbf519d2f67ce90c54e7c5fba6bb7f64f51dc8e66e84928d60d36cced468ffbf39f7f873aef4f0d518182b7643349cddd5f0a925e189d9a0cec2b2af0267716efc015e1573bcf852d396fc6664bc2dcc884afb69e03a53afd315eb9a9f673d0d2697ad8a", 0x7f, 0x8468}], 0x3159765d94a419d7, &(0x7f0000000b40)={[{'euid'}, {'smackfsdef'}, {':2\x97'}, {'+-%'}, {}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'pcr'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfshat={'smackfshat', 0x3d, 'fowner'}}]}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x7, &(0x7f0000000580)=[{&(0x7f0000000180)="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", 0xfc, 0x100000001}, {&(0x7f00000000c0)="eedf4978d1b6eb", 0x7, 0x6}, {&(0x7f0000000300)="f47ae9baaaa505d033d78f52881867e15d1e667d53678d3b75f229a1f649416d8b68e6b81d47739fefc3ea5855ba2c0591ff277bf23b5c11124840255ed9f24e4b08c147203284dc0c599651e7a05509446b003fc027fd6d66d77d4b20b138b5f919087477751a9e12ed8b5d9628bbff64ca687828864e0ce4e50057f2e673671dacde6c2991c4453eeabc8073a109914eec0f89125edf6988f84d48c13c86e886bedfe53e7fbe31f1cfe72f24281e6801f7b647a7e62a33a90075ec11", 0xbd, 0x8000}, {&(0x7f00000003c0)="7b9c36ae021f53d3356b5cb31346c626f164f7445fb2c2270b9eccde34d14330f92e309a86e0bb21b4904230827671f41c23cd590f7f31", 0x37, 0x5}, {&(0x7f0000000400)="c6eacb5447453adf54e17dd0d783d16a95f2939b7c0b76c06a27f8fffb31935bbc50866747be39a179a72db779a96ddca300510d5241991808b2d32578470b44e6ba39002e33de3dfb780a3e52d7eb50548cb9841e17ae3281dd9218775b4af9d06ca47c080e56c070ce21dedafd9825470bcf18a84f3e9cf9a5d98dc300ee8a94f8f379ee1e219cc854284c4a31668e3ee61d9565677e6fbd943e298c9dbe80e65a25730281aabfc4f1a579d8646a1f71b9473a8ef47e31b18f342ca4faed9228bc91f2dc1a66f8c29651136dc872a250d2a024cfeacab5ed1b1f4be9bb90a567fa33ca8dd093ac2ebebb945acce3a7e0c5d501", 0xf4, 0x5}, {&(0x7f0000000500)="da75ca7286f6b526d279ad2315184f9b1eb8f5c393", 0x15, 0x200}, {&(0x7f0000000540)="459507ab07ef497747a612dd34884ba0299b7b79f2d63bf57b08eb8efb69416e36036a6b", 0x24, 0x2}], 0x10, &(0x7f0000000700)={[{}, {'abort'}, {'+-%'}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@subj_role={'subj_role', 0x3d, 'abort'}}, {@pcr={'pcr', 0x3d, 0x2d}}]}) 14:42:38 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:42:38 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 14:42:38 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 14:42:38 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56de, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x800) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x80000}, 0x200) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') syz_io_uring_setup(0x60c0, &(0x7f0000000300)={0x0, 0x67e7, 0x8, 0x0, 0x1f1, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x7fffffff, 0x2, &(0x7f00000003c0)="b20f7ffca9efaf7fbd88a8b1a2e290a308a52997c59182bbc463ac7e9ef21386aa551d935b65803fb2a51f064e4bf2369a2ad8484b4a004406ca606ec5e508342dab62704aab261338ae3930e69d5d7d7227adab5e5294b02746a046d8d51651ee411e80b7c8e710fa54f7f825dd4510a19ca9c6429819", 0x9, 0x0, 0x0, {0x3}}, 0xfffffc01) setresuid(0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$unix(0x1, 0x5, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r9}}, 0xfffffffb) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r9}}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:42:38 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 14:42:38 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) [ 1671.793379] FAULT_INJECTION: forcing a failure. [ 1671.793379] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.796328] CPU: 0 PID: 9321 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1671.797880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1671.799760] Call Trace: [ 1671.800365] dump_stack+0x107/0x167 [ 1671.801186] should_fail.cold+0x5/0xa [ 1671.802050] ? create_object.isra.0+0x3a/0xa20 [ 1671.803091] should_failslab+0x5/0x20 [ 1671.803956] kmem_cache_alloc+0x5b/0x310 [ 1671.804874] ? mark_held_locks+0x9e/0xe0 [ 1671.805793] create_object.isra.0+0x3a/0xa20 [ 1671.806785] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1671.807949] kmem_cache_alloc_bulk+0x168/0x320 [ 1671.808992] io_submit_sqes+0x6fe6/0x8610 [ 1671.809936] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1671.811063] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1671.812201] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1671.813295] ? find_held_lock+0x2c/0x110 [ 1671.814218] ? io_submit_sqes+0x8610/0x8610 [ 1671.815210] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1671.816318] ? wait_for_completion_io+0x270/0x270 [ 1671.817413] ? rcu_read_lock_any_held+0x75/0xa0 [ 1671.818456] ? vfs_write+0x354/0xb10 [ 1671.819298] ? fput_many+0x2f/0x1a0 [ 1671.820127] ? ksys_write+0x1a9/0x260 [ 1671.820991] ? __ia32_sys_read+0xb0/0xb0 [ 1671.821912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1671.823103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1671.824285] do_syscall_64+0x33/0x40 [ 1671.825126] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1671.826296] RIP: 0033:0x7f13d8adab19 [ 1671.827138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1671.831313] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1671.833032] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1671.834645] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1671.836272] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1671.837891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1671.839510] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 14:42:52 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 14:42:52 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:42:52 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 14:42:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0/file0\x00', 0x10000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000294fc266f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="0000000072724161450000001a000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000294fc266f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x80000001}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100076e970325132510000e97032510300000000002e2e202020202020202020100076e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200076e970325132510000e970325104001a040000", 0x80, 0x4600}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4800}, {&(0x7f0000000040)="73797a6b616c6c652ac5b391133c0da54e2cff00540000ff0000000000000000f6006d5056ce000000", 0x29, 0x4e00}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7400}], 0x0, &(0x7f0000011100)) 14:42:52 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getegid() r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x16, 0x20, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@loopback}]}, 0x30}}, 0x0) openat(r0, &(0x7f0000000280)='./file0\x00', 0x488000, 0x4e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000000040), 0x0, 0x8080) keyctl$read(0xb, 0x0, &(0x7f0000001e00)=""/4096, 0x1000) unshare(0x48020200) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x5, 0xfffffff9}]}, 0xc, 0x2) 14:42:52 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 14:42:52 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 14:42:52 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) [ 1685.386554] FAULT_INJECTION: forcing a failure. [ 1685.386554] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.389080] CPU: 1 PID: 9356 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1685.390529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.392305] Call Trace: [ 1685.392867] dump_stack+0x107/0x167 [ 1685.393646] should_fail.cold+0x5/0xa [ 1685.394456] ? create_object.isra.0+0x3a/0xa20 [ 1685.395428] should_failslab+0x5/0x20 [ 1685.396244] kmem_cache_alloc+0x5b/0x310 [ 1685.397103] ? mark_held_locks+0x9e/0xe0 [ 1685.397964] create_object.isra.0+0x3a/0xa20 [ 1685.398892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1685.399988] kmem_cache_alloc_bulk+0x168/0x320 [ 1685.400965] io_submit_sqes+0x6fe6/0x8610 [ 1685.401852] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1685.402956] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1685.404078] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1685.405304] ? find_held_lock+0x2c/0x110 [ 1685.406340] ? io_submit_sqes+0x8610/0x8610 [ 1685.407407] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1685.408579] ? wait_for_completion_io+0x270/0x270 [ 1685.409729] ? rcu_read_lock_any_held+0x75/0xa0 [ 1685.410824] ? vfs_write+0x354/0xb10 [ 1685.411704] ? fput_many+0x2f/0x1a0 [ 1685.412585] ? ksys_write+0x1a9/0x260 [ 1685.413490] ? __ia32_sys_read+0xb0/0xb0 [ 1685.414457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1685.415701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1685.416938] do_syscall_64+0x33/0x40 [ 1685.417827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1685.419040] RIP: 0033:0x7f13d8adab19 [ 1685.419933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1685.424275] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1685.426071] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1685.427747] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1685.429441] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.431120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1685.432831] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 14:43:07 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 14:43:07 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x3e7, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './mnt\x00'}) chdir(&(0x7f0000000400)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:43:07 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 14:43:07 executing program 4: flistxattr(0xffffffffffffffff, &(0x7f00000000c0)=""/175, 0xaf) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x400) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x450403) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) syz_emit_ethernet(0xab7, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0) 14:43:07 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 14:43:07 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 14:43:07 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 14:43:07 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 1700.319624] FAULT_INJECTION: forcing a failure. [ 1700.319624] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.322294] CPU: 1 PID: 9387 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1700.323849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.325722] Call Trace: [ 1700.326319] dump_stack+0x107/0x167 [ 1700.327145] should_fail.cold+0x5/0xa [ 1700.328003] ? create_object.isra.0+0x3a/0xa20 [ 1700.329055] should_failslab+0x5/0x20 [ 1700.329912] kmem_cache_alloc+0x5b/0x310 [ 1700.330830] ? mark_held_locks+0x9e/0xe0 [ 1700.331731] create_object.isra.0+0x3a/0xa20 [ 1700.332728] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.333885] kmem_cache_alloc_bulk+0x168/0x320 [ 1700.334913] io_submit_sqes+0x6fe6/0x8610 [ 1700.335868] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1700.336992] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1700.338109] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1700.339188] ? find_held_lock+0x2c/0x110 [ 1700.340107] ? io_submit_sqes+0x8610/0x8610 [ 1700.341079] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1700.342159] ? wait_for_completion_io+0x270/0x270 [ 1700.343238] ? rcu_read_lock_any_held+0x75/0xa0 [ 1700.344301] ? vfs_write+0x354/0xb10 [ 1700.345156] ? fput_many+0x2f/0x1a0 [ 1700.345986] ? ksys_write+0x1a9/0x260 [ 1700.346852] ? __ia32_sys_read+0xb0/0xb0 [ 1700.347784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.348983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.350157] do_syscall_64+0x33/0x40 [ 1700.351003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.352162] RIP: 0033:0x7f13d8adab19 [ 1700.353012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.357164] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1700.358878] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1700.360500] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1700.362105] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.363708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1700.365331] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 14:43:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) 14:43:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x4f, 0x7f, 0x40, 0x0, 0xb1, 0x10, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x3f, 0x4}, 0x619, 0x3f, 0x100, 0x9, 0x400, 0x5, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$read(0xb, 0x0, &(0x7f0000000880)=""/191, 0xbf) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x20000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffffff9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) unshare(0x48020200) [ 1700.457508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32 sclass=netlink_audit_socket pid=9394 comm=syz-executor.4 14:43:07 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 14:43:07 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 14:43:07 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 14:43:07 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 1700.772955] FAULT_INJECTION: forcing a failure. [ 1700.772955] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.774536] CPU: 0 PID: 9412 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1700.775364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.776376] Call Trace: [ 1700.776715] dump_stack+0x107/0x167 [ 1700.777163] should_fail.cold+0x5/0xa [ 1700.777630] ? create_object.isra.0+0x3a/0xa20 [ 1700.778186] should_failslab+0x5/0x20 [ 1700.778649] kmem_cache_alloc+0x5b/0x310 [ 1700.779151] ? mark_held_locks+0x9e/0xe0 [ 1700.779652] create_object.isra.0+0x3a/0xa20 [ 1700.780190] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.780826] kmem_cache_alloc_bulk+0x168/0x320 [ 1700.781406] io_submit_sqes+0x6fe6/0x8610 [ 1700.781930] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1700.782553] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1700.783168] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1700.783784] ? io_submit_sqes+0x8610/0x8610 [ 1700.784317] ? recalibrate_cpu_khz+0x10/0x10 [ 1700.784863] ? ktime_get+0x158/0x1f0 [ 1700.785325] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1700.785860] ? clockevents_program_event+0x131/0x360 [ 1700.786489] ? tick_program_event+0xa8/0x140 [ 1700.787035] ? hrtimer_interrupt+0x771/0x9b0 [ 1700.787585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.788231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.788882] do_syscall_64+0x33/0x40 [ 1700.789339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.789971] RIP: 0033:0x7f13d8adab19 [ 1700.790429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.792713] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1700.793658] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1700.794544] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1700.795422] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.796301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1700.797188] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 14:43:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) [ 1700.878211] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32 sclass=netlink_audit_socket pid=9419 comm=syz-executor.4 14:43:07 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 14:43:07 executing program 0: r0 = syz_io_uring_setup(0x1841, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x300, 0xffffffffffffffff, &(0x7f0000000000)={0x90000008}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r6, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, r0, 0x10000000) syz_io_uring_submit(r5, r8, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1}, 0x5) 14:43:07 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 14:43:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:43:08 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080)="9b092f6d4da7d173fbc970301e3efff493a04ced5782a5cd6755bbcc95af47e62284", 0x22, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1, @private2, 0x20, 0x0, 0x61, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 14:43:08 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) [ 1701.154064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1701.154814] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.156094] buffer_io_error: 6 callbacks suppressed [ 1701.156101] Buffer I/O error on dev sr0, logical block 0, async page read [ 1701.157981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1701.158636] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.159987] Buffer I/O error on dev sr0, logical block 1, async page read [ 1701.160923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1701.161582] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.162804] Buffer I/O error on dev sr0, logical block 2, async page read [ 1701.164137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1701.164836] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.166087] Buffer I/O error on dev sr0, logical block 3, async page read [ 1701.167032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1701.167683] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.168923] Buffer I/O error on dev sr0, logical block 4, async page read [ 1701.170111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1701.170808] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.172034] Buffer I/O error on dev sr0, logical block 5, async page read [ 1701.172985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1701.173636] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.174861] Buffer I/O error on dev sr0, logical block 6, async page read [ 1701.176037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1701.176708] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.177991] Buffer I/O error on dev sr0, logical block 7, async page read 14:43:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:43:08 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 14:43:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) fadvise64(0xffffffffffffffff, 0x4, 0xfffffffffffffff7, 0x1) r1 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x38) statx(r1, 0x0, 0x1000, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xffffffffffffff02, 0x5}) sendto$inet(r3, &(0x7f0000000340)="e298c9", 0x3, 0x0, &(0x7f0000000380)={0x2, 0x4e20, @private=0xa010100}, 0x10) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000680)={r1, 0x0, 0x7fff}) move_mount(0xffffffffffffffff, &(0x7f0000000640)='./file2\x00', r5, &(0x7f0000000700)='./file2\x00', 0x46) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x48, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0xa008, 0x0, 0x400, 0x2, 0x37, 0xffeffffd}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r8 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) sendfile(r8, r7, &(0x7f0000000180)=0x6, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000004c0)={0x20000000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003e40)=ANY=[@ANYBLOB="1c0000001d00210c00e600eaed002b8692fe99da548dfaac0000000007825b9c564239ebcec4cb1e786b540181ad360d88a6ae2b34cb4467d0295c92096327a335c2c71497fc25013224704f62282841c647aa5db265fbf45794433aa164d5b02862c57a0ca0388944d30c0ddd2a34"], 0x1c}}, 0x0) uselib(&(0x7f0000000040)='./file2\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000740)="06cc826c784fe7171ee6382191810b01a7cb2b7af239db332a2cf05c35c9369613542e0d41b878590ea881e491a8a256a200583198c0a6324e75a50076c7c6bfc505d6401d205566053077b63dce64bf04b2590e991ba1e20d3ef63ec4f00279ac2a9eefb7b47300693eb1e5de7fa06e60b48915bb5930a170bf7460279cc1258fdc3caa1c7fb52165ac31f44e67f66b24b4b7ffc16cf5b122432c93d88ed541da167379025c5d8b6f023eb1e44e59db036de063b7129d06565f22cdd1edee52af2570f8367d", 0xc6}, {&(0x7f0000000840)="96c5ba2304e7c775ededeff4f4909d4699901a86bb4645183bb5f9c3765e864de0ac835f2b0c4067a55b0af610f01d917c4b070d4b7d43f6c017655e2570bb3f46086e5957c2a37f09e188eeaf62204a9d1b628886f6ddbf780d613790f9ee873d912ed160ff385e2f04fa940ea3149f9ee3282d9144c24ea799656cc170fac5f0047ac59193a3d466238e076321a979ff973b697cc0ccf43be2f44cf7bd70efdacb7ac1bf28abfeff3a24cbbb4b06695457372f4ee812970a8e71ca16016185abcf0cb3e444597f3449428500d052459f1f6bb06f3844857738e0df30ba759cf888c41d98d5056799f169f415", 0xed}, {&(0x7f0000000580)="49e825d5c9c83b8ccd680e198a0ace96c801bd88c95f0dd6242f232f84b9a94d4c7530f75ca20fa990638da5c89d", 0x2e}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f00000005c0)="f3f688369ca7d772eb5a9ff858071a5b45fadc0d4a67df6e3c1290d5b9092821f78fbc05beeb227cedd71acd9ccaa4bb49d519d800e45bbdb79fcb4cd00365bf522ae5d132acfac4df549cb815", 0x4d}, {&(0x7f0000001940)="0f8b0f660c6afde8e6eb99ff74e17b8ba5bb934af52021ac893f3ea2725ded20acce3175130234c85f86df6417e1813bf5cb53b3fc858285c11e20ec08eb4b0a8b4d1fc23bb30cba469b109fab0432cfd9359ed1668ca7b01f0a3ae9ce4045fd55b29166cc6e81f19b9cbdc0a79f6a85d80820200e153d0750774531f4656a39c80ddb2ae27646d9dcc33c57781cade9d4563f1e933cafa8321743e82313e70ef6913339303c12a331293cbbf4b06d472a5801f5ea8cffae439444ab77a87080668a17a42c97476e941073e4bc2b346b523216a7a8d37265206b3065457bd131914dd44c1962616225e2", 0xea}, {&(0x7f0000001a40)="e70ff09528a76b679fbcc0478d81f00f4105a4ffdc6263876f6f753c4b5f834ab785a714eb02e51a81e2ce4629c23428ccef62e09243d1b0a6012a134f38af3e807ad5191bd7271babe76fb8b7ea6e8afd87b08eb597ffdd2740c2dd8c2f7e44861200f59f9e3f84bb50ee2821444ac26d89fe602f9e8232a51ea47ce0558adebeda7b7537cd84dcc1942a0476676bdc38cf5ab87bfc9792365de1d790753a46e21d933087e52716dc3bbc009b817e075a6c00a1badda8bf7ab9a16d31a28e1607d5d426db9e", 0xc6}, {&(0x7f0000001e00)="e641b57c7a040eb132eb60b3102075d3ec1a95c03b680cd5cd24f43cb35c50b3c04b8078ce21cba424333304a9d4002a79819502ea867892bba358cd64547977aab0cd1ae10cf161eddba34ded38eae4de2542a2cdc1e8038ff89b8713fe0b5ee15bcfdb44b78b6412caa2f1f94c4dfaf01ee0d6fe7b3e51eee7f19d9801bcd323ef022e1cd57ae23cc3ab33f4d80b77699f0f8403bb72f0bddada7387caabd7ec1f16794544c99970228c0506aba981a436d9c221b92c3ef82fb9f37a94a35451a7e3bb82c8e7ccdf8749a6ade1871089f3b0e4da7f4c5d74c4260b2ff91d15bb1e00f87c7e2591eca8e14f4a21db23968257103b2c8239294635408c4434662bd8aba71a70cf5b042b87b8416b6e274881dd723d22a379370bf380d41f35b2da3d91daf22fce760e9531cf6796d3978d9d0ebdd0473e788ef88a72223d11b0d3ab99d9ea0e9a60a1b1348c0795918b1bdbda09d5d6bc5ea91834a443d8c5ea9322ba874e446a5884f583b22c3f9653cd756c43bf00e2bfd065fcb998a120bf5f108a113c43f70f827f34c6eab2631d3649d2792de3bd8ad3d2ec529f5b77c837b02d917412fc7795bcb63dd70e391b4d286b76fd8ffb4e41850d8fea202d8c4feb5f9bf649861ba1d9c1fcc42a3aa47f65f61c6ac04961a1f9a221cec88c6f8041aa9b52657cd40e027abe0a0c215dd799ab2f77c1053892e248808fcedd2b11bea39c5bfe9a0c378975d4c2bfea520ba8b90132f92fa9d77a63543c1e2c02514cf745de195a73d3ef86f01767559294b1cd07143912eb0a3f1d17f77e720f538d388f3bd7a1ab792fb3681ae2b7ca5140dc3b6701167035c78dd28cadeb77cdd058540ee488ef4a09cb45c4b8abb10428e3f5f05b1a377d7931360f7df3569e4eee3b658aa406f3036aa68d99cc9940f5137498b4d5b2b2db4d991b642a0ece0463b4861e45ab65761fda8b894056ee7a53fa535c168b703044c93ce26d1b761d03af2e88f30e19e47606db381b1dab30c15d17349a740292765afe81fe5d94819413f2e5a385254c2c96fada40f50e90c6ae56c4553aaee9760188b6e40d7dee13f073405b755a1fe74e2b39508161eb81c456873c923bf17df06866133bf9ef633bc91ac50f3121211035c42eb5f60230d2c42b77cf38fafab6e9347c11b194aa4a853acafe94ec8e6838d3a10991ab9e73bcbe10cbf2af703fac4f49e3a2fde8f7ac365c1a9bbc7fce3efbd533f9aa439576b15dbffb3d8a9f64fa6b85ee9602d525bed229cdaf4999cde31480f3ac0bbe82a30333ff7d758ce39f49a044dacefe8232147764e767552eacf045eaa80d388a437deec39a1a63b25074d379a801a23fbdb59b80f3e37109d2353a91e361c3af1147c374169d0fa8fbf87b2e3542fea00e441df43759610c629e35a666fbc1f6af6f7657129fcbf272a277a63c213bc0533ceaf665274d0fc2d13236e865107f6f8f9dfb68aed26f59c5a06cc087780edca3dd6bfdee421aa30a92a1f00bcefc127b6708d442efd9c233aff7a19e833740ff86d2b2b804c20a9254aa5cc3210c8a725de1dc6c1d3616feb3c83547f97156ca4855688333fe96a1548c5bfe1af0dce03495ff11bced6afe2780f0f021afd12531ae812ea206ba8d0037bc9d170e37a9dc68ebc740173ff2680e2c3c4795244f7d62b2e6906f9b699ae0211536ff98a2493ef1baf4021a24bd1643fd1b1c1332c8f88edfdf1b5d0278fc5c9ef1fd59f53314b22af2eefc29d3887f1ec74e54183bc6debc2ba87595397041a9dab276c1f7f941d074c536706d39091a82e03c5ad5ec77ed2b5533c890f2fa367498d7dfac1b3b2e63307cdd48503a979398737da881716f8a0b8a7670d12e1e9eaca950a670e257ecc319009f143604fdb39f98a1b3356a3cc919b8423fbe4ff5478d7bae7048b340baa7181043bd4d37626700cd7dc92b98568798609e49f99e80ade90639d358ec9912d29b43f097c834b5eb1255b61047811b20f42ab1c2b44d27a05d2ba93817d783cb3f94e1072352d9353dc9f6530013b9498413ac9ff905a6ef412cd2f292e0b87f0c97c918c26d5cb33e05bec0f8efd84e1d685ad874cd7ad32d05832e43d987e3f00fff31c3afcf83c2e25d4cf7d5037c1d80943ea06b528717b93c6b9fcaf115d9133f3f2c0cc7ed25de6196ff21b57b5b164742a5c55e2a1d6f06daa07bc9074139f39d76314e725fa0feac373665b76e2bb2fe47a4e037f2bf1e8118860305a4a5132cbeadf1c645ddc944634e624ea70510f7fbad2316efb453015daf6c915f7e61f91048847771139796c2028cd94ff9a8cecda6f104fc352b9b9af11b27042125c1087a248b55032815738fa4a4748b4fbe94dbb01df4e698a5e909b4ca1795c834faf54cad730fe4adfb226ad7769c580313aec537171a35148a16126c11b95ba51050cfee45a9b005f129810c0b6896e4099e4e90483d167bad62edffcf0d587c8846f2ab81af332535fd67871aadac1640fa59acebaea99e6337c86c8b49bddbd4c5bacfeac99fcdda3b338cf6fa28763ec5af112c169955991a4573929e13635fb9f82623ac4ee6f6fe7d42039ed7e59ad026818612cbf19b345f3940ee4a794c9cbc1bfdd07b49298d1b3c76e64feddf346fe8c086ae3e0a99bfd088b12092d83707f80266a17e579177fd8359b5d591e7273193ad41fbc63fe0d52a8a903b6640249a866da5b5a725678cf9333fc46eb1cbcafc385a15d98c9043b9aa8f4d72337352d02951d56f02c2f70ad5e5bd7c8770fa1dbcc22468a23b7a1b34e98f657baf92b4e045cd6b12ae720a5ab3f926be39d52818029d9e03fc1d4ffbff5e19bf8a60e6ff4d5dfcc883e12980d00cc9afe74fd72ae84bfdb9c9a71cfcb4d0691a309776e202a9b11d804c7f37e8b7e07ab5fcfcbdbc31ad92ba3f24bf13ebe49b79ed16ead69144716862dbec778831d98c252ca7db92c07ee16e5102cf9a956a53e963e45ec2c69eb07cbad42cebe49e24d3d53a3c1b131ba2f54fb6267bfaa62294c7211dae5fc0151ae6cff4c65837612468094142fa2099b93677f62b07df5a87d1915979312bf74e00dc88d8e047771659a4eebd3baa2b0c310c60fd715f7710a8c67cbd643cdb3849caa28bfa95496206242bae84dc9321766bcff50601ffe20eb5528527f57c8b73c302b636577fabc8df7cdfbf873ab3932f1cbb734a4a8fd9512e752c42a870a99fba9439cadc7e467ea53767b1939a77f2b5ca02165d5a5fbbd8e36e6790404374ffc77e2e5247b1acf68dbfc4899106dbdcf907b069faa6acc2ad5b2f9ec5a8baa41c8a322bc22b2d6683f4317137703468ffce23850ed560cc10902706fc1bfe191094ee173e980d82c2fa8f0a3cc677af00b09f6d0e9d7408165647a899f0782d6541aab74eab6076b7c8a433a7b8fa325380505e85d1b7ef374078639d570e5c91fc2e60e19a9d82f4ad9165373d4b55d5749c6375e7d5ee184a56e6a1f380fa3f32e148379656048657230c63e96a5c7bc2018e4cc9a8a38240fbd9177b2b4060dd2e32928f50b019c508caa61504ff69f75af105196d952305261333e6d3f48b6c3f1546c733660702bd86611a39ec2dc7ac1cada79753153929a89d705cb0315272117b1622e04186a9e1ac742d0464422ec10627f67a629f6e3694ecb9d503b841869213a84961b0574ceec1a819bddb149311c1798b624c77139bb7414032afb5735c38bdabcac959ce22f8d0ce832ac5858e219ab734df7adb8a73af2f907b659b69cc59a6b5a91087cc5903631100ba98ce3981f2ba2930070f943082642d0c768b2cac49afb521e6b5a027a8f1fc4f18c4c5f95f49935e0e1f0b69363a73997038b023f00134ed4b355819fcf4e655751059b40463466d3ef333dd30b5b22426f7550aea9da3d9b5108e7257484037b60423e8c9e245bc56cb829edddfb16e714baa082bd0cd3033443f47d166ebe44fbd0c43f1ca44ddf5cf2bbdc4e6c2110f23d1d246d7f1cd4b1e084052b73251541f3068a807360235556f77e33abcc2d98ae6a4d639e9d921cac40975494e03d05fe3411d76a458c7f68d7c3c5287b792da8f66b1f313e0128b8d6c0c42480c0fd31711a11a315a9a1297f8974db27d0c363a182877f8690ce16650a93640e45f41168f0701e448d52f87fd20ed442c7dc3fc9f05e7ec9a687743fd2f5087b21a4bebf9bddad7bb1e02b3ba383de0148db0d247bb5ad89e9ad497bb6ae6d9e1a80dacb83a4649dc863cae857f3e9e9ea32071cf6bcc077a14f7ed6631b10511a9f7ae45422b1606770d1eea045377a11951a1a6dd7773aaf49416d874517b14e4592098207526b3d227c539870447331ce61311ca48ed5141df39883886e7515ed9cc745487d3cae4c74a49a130e565e3e36fe1826d0f00a94b596ee1db95aec8f3f87bc7db60fc0c089eb894e188634a979249491f342abae22f7aa904ffa4643a71e37cea1dbc7d83e83e9e5eb5598725f5f75227c413060f3f9b5dda7b7483342db47ac7e52ffdf99b3b536177c67772e960f0b758313797d7a0bafb02d73d3e3d8801525f003620b9842fdf06fb0e530997c38734a6de16d2823d630265a2af4b897c9bd4b4290e83c64be54b744b7467536de456d0a8df3f11977ff8366ddca2638a94fd0f89a92770ca5ebd7b9cd6a3f8f5f74dfdbb1734c7dc00a28f66de4a01f070d681c900fd4c12e8ebec4d947d119a546372e92a41c22e6d59bc44759a187410b52c4474bd6a3debaa0e48b3e4b612f86189db7239a292e1689c6907cc39c3c72a66cb2ce9364e924a07f973fb234b940c93414c4f6f1e7fc6d72157db83148dfd29fae5a0f3606c150fc7360db8ba6db868db86c33af5d1b00978b88e9dff8829f969768723d6199d55fe6ad803ed63a107fac1021084a26448265ab407d795102027c51313f242b394b1cda5ee7c1532718bc48dc5c777eb15ce2564aab1f5e2ceb8750f6acfefe00f9cdcc773007404e1958f5e2cfc8ccaabb562036e54522c2cff30dd5fffdbab76fa6a7ca84a762f6587cda656c15210d8c787cf61d2ccb36bff6fd16d04bc1530403826065bc90f715661bb6832ebc993f9fa4cb857e331eaae97afc000cd0cfcddb54506e57c8bca2332dbef1b43fc5405f7f926e228fed896f95d3df6098381ed0aaea9b037711efbe1045e88caa72e601a0b1c997248debb0685d67365b3e3bd3568a5cc02de3f09336ed87948bd74e893aa623f8e389c2f26d0656adb3693ede799100b0f89d344c3e568fe6bc76548f6e59fdf4d5fae0f987997f20c06aedfb8a4fd270bc0ca03563fbc17f2e617ce23b121d999d2aff573022b237cd0733bc31db7d27509e8ddf7116c454b636344c990413be5a401db30cab28e7453411e9fc2f326ad8463c4d6d0975b01b3e9b438f37dfaa97766854051d536c74d1f2bd01f93e806739182d2f10fd00721b7e08cc1a2a1307d387fd927074e7e601507614dba9caeb3dac9eea9463ff90479d98018cf9be28b14744aa2a54dd9be982aa9f0ee1e2f25baf0cbc0393e9999ea5f380c9e1a87b93b1ff82e174674b6f5c3dd2ca671fce53208fcc8b444cc22f758584ddcb6822e23b3c79eacc324560628cc4abd5aa117130f69c86246d3779f9bba205dd7367655ff2efa33fb4872c1d8431a3134ebe1a0fa5f079717b8e32705ba3cb98b2435bab0a34a9f292d01ad4ddbdc6c8f9102ad36b9adf7fcd386492bc9611c40fb6f725f641ae785e2a162cd1ccc7ea4ddec9ec2de40", 0x1000}, {&(0x7f0000002e00)="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", 0x1000}], 0x9, &(0x7f0000001c40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0000090014000039b013e34d0751acf1f462db02", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x4004844}, 0x4000010) 14:43:08 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 14:43:08 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 14:43:23 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 14:43:23 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 14:43:23 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 14:43:23 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f0000000100)='.\x00', r0, &(0x7f0000000140)='./file0\x00') openat2(r0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x8}, 0x18) 14:43:23 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 14:43:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:43:23 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 14:43:23 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) [ 1716.571510] FAULT_INJECTION: forcing a failure. [ 1716.571510] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.574006] CPU: 1 PID: 9481 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1716.575487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.577295] Call Trace: [ 1716.577871] dump_stack+0x107/0x167 [ 1716.578668] should_fail.cold+0x5/0xa [ 1716.579499] ? create_object.isra.0+0x3a/0xa20 [ 1716.580493] should_failslab+0x5/0x20 [ 1716.581329] kmem_cache_alloc+0x5b/0x310 [ 1716.582211] ? mark_held_locks+0x9e/0xe0 [ 1716.583097] create_object.isra.0+0x3a/0xa20 [ 1716.584047] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1716.585168] kmem_cache_alloc_bulk+0x168/0x320 [ 1716.586167] io_submit_sqes+0x6fe6/0x8610 [ 1716.587077] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1716.588158] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1716.589248] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1716.590297] ? find_held_lock+0x2c/0x110 [ 1716.591188] ? io_submit_sqes+0x8610/0x8610 [ 1716.592134] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1716.593194] ? wait_for_completion_io+0x270/0x270 [ 1716.594212] ? rcu_read_lock_any_held+0x75/0xa0 [ 1716.595219] ? vfs_write+0x354/0xb10 [ 1716.596028] ? fput_many+0x2f/0x1a0 [ 1716.596820] ? ksys_write+0x1a9/0x260 [ 1716.597659] ? __ia32_sys_read+0xb0/0xb0 [ 1716.598545] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1716.599681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1716.600801] do_syscall_64+0x33/0x40 [ 1716.601619] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1716.602734] RIP: 0033:0x7f13d8adab19 [ 1716.603540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.607528] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1716.609198] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1716.610740] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1716.612288] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.613849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.615394] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 14:43:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x2, 0x0, 0x20, 0x0, 0x7, 0x1020a, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x5, 0x5}, 0x800, 0x0, 0x4, 0x5, 0x5e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x6, r0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r7 = inotify_init1(0x800) copy_file_range(r6, &(0x7f0000000180)=0x8, r7, &(0x7f0000000280)=0x714, 0x0, 0x0) r8 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) sendmmsg$inet6(r8, 0x0, 0x0, 0x2004004) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file1/file0\x00', 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 14:43:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:43:23 executing program 0: sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x376) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x10040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005221000000000000000000000000001b"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="00042abd7000fbdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a001a00ffffffffffff00000a001a00ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x4044121}, 0x80) syz_io_uring_setup(0x4815, &(0x7f0000000080)={0x0, 0xe597, 0x2, 0x1, 0x2eb, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000140)) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mknodat$null(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x2000, 0x103) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r3, 0x3, 0x0, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80c08228}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf254b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0100000000000006009800810000000a00f500e29ad4da42a10000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x160, 0x300) 14:43:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) [ 1717.096028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8530 sclass=netlink_route_socket pid=9515 comm=syz-executor.0 [ 1717.220100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8530 sclass=netlink_route_socket pid=9515 comm=syz-executor.0 14:43:37 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 14:43:37 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 14:43:37 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 14:43:37 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 14:43:37 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 14:43:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:43:37 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 14:43:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xe164, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="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") setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0xc0000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x1}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="00cebc75668e7b95", 0x8}], 0x1}, 0x0) [ 1731.022412] FAULT_INJECTION: forcing a failure. [ 1731.022412] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.025049] CPU: 1 PID: 9539 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1731.026605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1731.028486] Call Trace: [ 1731.029094] dump_stack+0x107/0x167 [ 1731.029945] should_fail.cold+0x5/0xa [ 1731.030820] ? create_object.isra.0+0x3a/0xa20 [ 1731.031873] should_failslab+0x5/0x20 [ 1731.032746] kmem_cache_alloc+0x5b/0x310 [ 1731.033686] ? mark_held_locks+0x9e/0xe0 [ 1731.034621] create_object.isra.0+0x3a/0xa20 [ 1731.035626] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1731.036788] kmem_cache_alloc_bulk+0x168/0x320 [ 1731.037845] io_submit_sqes+0x6fe6/0x8610 [ 1731.038801] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1731.039941] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1731.041077] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1731.042192] ? find_held_lock+0x2c/0x110 [ 1731.043126] ? io_submit_sqes+0x8610/0x8610 [ 1731.044122] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1731.045230] ? wait_for_completion_io+0x270/0x270 [ 1731.046343] ? rcu_read_lock_any_held+0x75/0xa0 [ 1731.047407] ? vfs_write+0x354/0xb10 [ 1731.048258] ? fput_many+0x2f/0x1a0 [ 1731.049092] ? ksys_write+0x1a9/0x260 [ 1731.049971] ? __ia32_sys_read+0xb0/0xb0 [ 1731.050903] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1731.052101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1731.053282] do_syscall_64+0x33/0x40 [ 1731.054148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1731.055324] RIP: 0033:0x7f13d8adab19 [ 1731.056178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.060385] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1731.062135] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1731.063763] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1731.065392] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1731.067031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.068665] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 14:43:53 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 14:43:53 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:43:53 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 14:43:53 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 14:43:53 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}], 0x3, 0x8, 0x6aa12b08) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1) dup2(r2, 0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xca902, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x5652, &(0x7f0000000580)={0x0, 0xfffffffc, 0x20, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x13, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r4, @ANYRESDEC, @ANYRES16=r0, @ANYRES32=r5, @ANYRESHEX=r0, @ANYRESHEX=r5, @ANYRESDEC], 0xfffffffffffffe8a) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000500)=""/126, 0x7e}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, 0x13, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x5cb7c17, 0xffffffff}) fork() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 14:43:53 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 14:43:53 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 14:43:53 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) [ 1746.450182] FAULT_INJECTION: forcing a failure. [ 1746.450182] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.452849] CPU: 1 PID: 9572 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1746.454456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1746.456375] Call Trace: [ 1746.456993] dump_stack+0x107/0x167 [ 1746.457843] should_fail.cold+0x5/0xa [ 1746.458740] ? io_setup_async_rw+0x180/0x580 [ 1746.459766] should_failslab+0x5/0x20 [ 1746.460653] __kmalloc+0x72/0x390 [ 1746.461471] io_setup_async_rw+0x180/0x580 [ 1746.462467] io_read+0xe98/0x11e0 [ 1746.463292] ? kiocb_done+0xc90/0xc90 [ 1746.464175] ? mark_lock+0xf5/0x2df0 [ 1746.465055] ? lock_chain_count+0x20/0x20 [ 1746.466031] ? __lockdep_reset_lock+0x180/0x180 [ 1746.467112] ? lock_acquire+0x197/0x470 [ 1746.468042] ? __lock_acquire+0xbb1/0x5b00 [ 1746.469018] io_issue_sqe+0x2e8a/0x77b0 [ 1746.469937] ? perf_trace_lock+0xac/0x490 [ 1746.470898] ? lock_chain_count+0x20/0x20 [ 1746.471854] ? io_connect+0x610/0x610 [ 1746.472741] ? lock_acquire+0x197/0x470 [ 1746.473655] ? find_held_lock+0x2c/0x110 [ 1746.474607] ? __fget_files+0x2cf/0x520 [ 1746.475528] ? lock_downgrade+0x6d0/0x6d0 [ 1746.476488] __io_queue_sqe+0x90/0x9d0 [ 1746.477391] ? io_issue_sqe+0x77b0/0x77b0 [ 1746.478358] ? __fget_files+0x2f8/0x520 [ 1746.479275] ? io_prep_rw+0x7f5/0x1050 [ 1746.480175] io_submit_sqes+0x44aa/0x8610 [ 1746.481165] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1746.482312] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1746.483424] ? find_held_lock+0x2c/0x110 [ 1746.484363] ? io_submit_sqes+0x8610/0x8610 [ 1746.485360] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1746.486494] ? wait_for_completion_io+0x270/0x270 [ 1746.487597] ? rcu_read_lock_any_held+0x75/0xa0 [ 1746.488658] ? vfs_write+0x354/0xb10 [ 1746.489505] ? fput_many+0x2f/0x1a0 [ 1746.490348] ? ksys_write+0x1a9/0x260 [ 1746.491223] ? __ia32_sys_read+0xb0/0xb0 [ 1746.492163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1746.493347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1746.494523] do_syscall_64+0x33/0x40 [ 1746.495369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1746.496524] RIP: 0033:0x7f13d8adab19 [ 1746.497367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1746.501516] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1746.503231] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1746.504840] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1746.506449] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1746.508037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1746.509630] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 [ 1746.516225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:43:53 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) [ 1746.618695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:43:53 executing program 4: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 14:43:53 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 14:43:53 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 14:43:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x4, 0x8}]}, 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408a009}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x114, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000040}, 0x408d0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0xc) 14:43:53 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 14:43:53 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) [ 1746.888309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9597 comm=syz-executor.0 [ 1746.914663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9597 comm=syz-executor.0 14:43:53 executing program 4: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 14:43:53 executing program 4: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 14:43:54 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 14:43:54 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001880), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505331, &(0x7f00000000c0)={0x80}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000800)=ANY=[@ANYBLOB="060000000000000036"]) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fallocate(r2, 0x9, 0x3, 0xa44) 14:43:54 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:43:54 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 14:43:54 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) [ 1747.361062] FAULT_INJECTION: forcing a failure. [ 1747.361062] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.363777] CPU: 1 PID: 9634 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1747.365360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1747.367291] Call Trace: [ 1747.367905] dump_stack+0x107/0x167 [ 1747.368760] should_fail.cold+0x5/0xa [ 1747.369652] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1747.370877] should_failslab+0x5/0x20 [ 1747.371759] __kmalloc_node+0x76/0x420 [ 1747.372675] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1747.373854] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1747.375021] ? trace_hardirqs_on+0x5b/0x180 [ 1747.376029] kmem_cache_alloc_bulk+0x182/0x320 [ 1747.377103] io_submit_sqes+0x6fe6/0x8610 [ 1747.378087] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1747.379247] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1747.380406] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1747.381529] ? find_held_lock+0x2c/0x110 [ 1747.382488] ? io_submit_sqes+0x8610/0x8610 [ 1747.383500] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1747.384628] ? wait_for_completion_io+0x270/0x270 [ 1747.385751] ? rcu_read_lock_any_held+0x75/0xa0 [ 1747.386837] ? vfs_write+0x354/0xb10 [ 1747.387703] ? fput_many+0x2f/0x1a0 [ 1747.388555] ? ksys_write+0x1a9/0x260 [ 1747.389435] ? __ia32_sys_read+0xb0/0xb0 [ 1747.390390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1747.391601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1747.392799] do_syscall_64+0x33/0x40 [ 1747.393662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1747.394854] RIP: 0033:0x7f13d8adab19 [ 1747.395716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1747.399983] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1747.401746] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1747.403406] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1747.405058] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1747.406720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1747.408386] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 14:44:10 executing program 1: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 14:44:10 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 14:44:10 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 14:44:10 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 14:44:10 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:44:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) io_setup(0x0, &(0x7f0000000280)) r0 = openat(0xffffffffffffffff, 0x0, 0x101142, 0x6) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0x400, 0x10, 0x0, 0x3be}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x395e, &(0x7f0000000500)={0x0, 0xbb04, 0x20, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000480), &(0x7f0000000580)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) io_pgetevents(0x0, 0x1084, 0x0, &(0x7f0000001680), &(0x7f0000001740)={0x0, 0x3938700}, &(0x7f00000017c0)={&(0x7f0000001640)={[0x9]}, 0x8}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x66080, 0x1e4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 14:44:10 executing program 6: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 14:44:10 executing program 2: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) [ 1763.405957] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1763.427397] FAULT_INJECTION: forcing a failure. [ 1763.427397] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.430643] CPU: 0 PID: 9647 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1763.432389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1763.434497] Call Trace: [ 1763.435175] dump_stack+0x107/0x167 [ 1763.436104] should_fail.cold+0x5/0xa [ 1763.437066] ? __io_queue_sqe+0x666/0x9d0 [ 1763.438122] should_failslab+0x5/0x20 [ 1763.439091] kmem_cache_alloc_trace+0x55/0x320 [ 1763.440250] ? lock_downgrade+0x6d0/0x6d0 [ 1763.441305] __io_queue_sqe+0x666/0x9d0 [ 1763.442318] ? io_issue_sqe+0x77b0/0x77b0 [ 1763.443380] ? __fget_files+0x2f8/0x520 [ 1763.444392] ? io_prep_rw+0x7f5/0x1050 [ 1763.445383] io_submit_sqes+0x44aa/0x8610 [ 1763.446467] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1763.447728] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1763.448947] ? find_held_lock+0x2c/0x110 [ 1763.449979] ? io_submit_sqes+0x8610/0x8610 [ 1763.451088] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1763.452314] ? wait_for_completion_io+0x270/0x270 [ 1763.453536] ? rcu_read_lock_any_held+0x75/0xa0 [ 1763.454719] ? vfs_write+0x354/0xb10 [ 1763.455652] ? fput_many+0x2f/0x1a0 [ 1763.456564] ? ksys_write+0x1a9/0x260 [ 1763.457517] ? __ia32_sys_read+0xb0/0xb0 [ 1763.458541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1763.459860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1763.461154] do_syscall_64+0x33/0x40 [ 1763.462092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1763.463382] RIP: 0033:0x7f13d8adab19 [ 1763.464319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1763.468853] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1763.470688] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1763.472495] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1763.474199] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1763.476005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1763.477702] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 [ 1763.487241] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 14:44:10 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) [ 1763.607193] EXT4-fs (loop0): Unrecognized mount option "./file0" or missing value 14:44:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, r1, 0x3) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='.t`\x00\x00\x00\x00\x00']) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000080)=0xc0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a", 0x4c, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {&(0x7f0000000440)="ffdd14b2d545b969616d54fa413948ca8c884e05a5e0b29fda45678de5b6ea9b32040cfbe28f87c93cf898c2624a360384a71f96dc79194b8c9cf744da855ca0b5aaf22f51db7f7c1cf4850f245977421e5f993e2c5e97146ac61139caedb63455f06e0ac29e00f522a151c2774de3ac62b0621adbe8f1cfca71952a01bd410dbd0731eb96367acfaef362026b898c9311a95951a302f26d1b3d3c6fb59470b3ce9e99d98277d23940f8e92a64207f20951d9407895b748c", 0xb8, 0x5}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f00000005c0)=0x6, 0x4) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x200) dup3(r7, r6, 0x80000) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000100)) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x9}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 14:44:10 executing program 3: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) [ 1763.742832] nfs: Unknown parameter '-$/MlF_AK:2o()J2׉~%bo8xJZaCke^L5' 14:44:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:44:10 executing program 7: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 14:44:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 14:44:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@cache_loose}, {@cachetag}, {@access_client}, {@cache_none}, {@aname={'aname', 0x3d, '-'}}, {@cache_none}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '(&+^!'}}]}}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x5}) 14:44:10 executing program 5: r0 = syz_io_uring_setup(0x4d4c, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2004, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 1763.971792] EXT4-fs warning (device sda): ext4_group_extend:1805: can't shrink FS - resize aborted [ 1764.055416] FAULT_INJECTION: forcing a failure. [ 1764.055416] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.058322] CPU: 0 PID: 9697 Comm: syz-executor.5 Not tainted 5.10.232 #1 [ 1764.059924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1764.061854] Call Trace: [ 1764.062469] dump_stack+0x107/0x167 [ 1764.063326] should_fail.cold+0x5/0xa [ 1764.064216] ? __io_queue_sqe+0x666/0x9d0 [ 1764.065179] should_failslab+0x5/0x20 [ 1764.066043] kmem_cache_alloc_trace+0x55/0x320 [ 1764.067084] ? lock_downgrade+0x6d0/0x6d0 [ 1764.068029] __io_queue_sqe+0x666/0x9d0 [ 1764.068934] ? io_issue_sqe+0x77b0/0x77b0 [ 1764.069872] ? __fget_files+0x2f8/0x520 [ 1764.070787] ? io_prep_rw+0x7f5/0x1050 [ 1764.071671] io_submit_sqes+0x44aa/0x8610 [ 1764.072644] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1764.073772] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1764.074876] ? find_held_lock+0x2c/0x110 [ 1764.075800] ? io_submit_sqes+0x8610/0x8610 [ 1764.076788] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1764.077886] ? wait_for_completion_io+0x270/0x270 [ 1764.078991] ? rcu_read_lock_any_held+0x75/0xa0 [ 1764.080036] ? vfs_write+0x354/0xb10 [ 1764.080880] ? fput_many+0x2f/0x1a0 [ 1764.081702] ? ksys_write+0x1a9/0x260 [ 1764.082562] ? __ia32_sys_read+0xb0/0xb0 [ 1764.083491] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1764.084673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1764.085840] do_syscall_64+0x33/0x40 [ 1764.086686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1764.087846] RIP: 0033:0x7f13d8adab19 [ 1764.088682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1764.092834] RSP: 002b:00007f13d6050188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1764.094557] RAX: ffffffffffffffda RBX: 00007f13d8bedf60 RCX: 00007f13d8adab19 [ 1764.096174] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1764.097791] RBP: 00007f13d60501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1764.099411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1764.101034] R13: 00007fff01adf6ff R14: 00007f13d6050300 R15: 0000000000022000 VM DIAGNOSIS: 14:49:14 Registers: info registers vcpu 0 RAX=ffffffff83e7e960 RBX=0000000000000000 RCX=ffffffff83e6653c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7ef68 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85677688 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7e96e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056168dfac678 CR3=000000000df84000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000100000000 DR3=0000000100000000 DR6=00000000ffff0ff0 DR7=0000000000dd060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041520d7200000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e7e960 RBX=0000000000000001 RCX=ffffffff83e6653c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7ef68 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85677688 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7e96e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce4d325010 CR3=000000000df84000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=004002fe016c6c6f502e726567616e61 XMM02=b0b0b8c5567d91e3dbf180c671f2ecc2 XMM03=c9ee55d28d72b00b608812b1f64f5c8d XMM04=a2ce88c68ee67ade66435ff3c23ec3d4 XMM05=3e8e58d0119bf9eedf4d6f8f069c10ab XMM06=e1e21dda7dc3f68dc8f4956100c32031 XMM07=ad5f81dbae1699d1a05cfa9b6ba7e662 XMM08=6d6c98abf7d2312731eb0b14d2fff449 XMM09=00000000000000000000000000000000 XMM10=0c0d0e0f08090a0b0405060700010203 XMM11=34326163653833333761306664363933 XMM12=4c4ad799fd682256248bea86e2c1928f XMM13=1ca5030a4d41caa72c777b9eae212de2 XMM14=38d424f8817af12f9bf75d5564ca5a2c XMM15=50bc30020eb9115f76827bbfdbe022e1