ix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:13 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000004000000000000000aaff02"], 0x0) 02:49:13 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000003000000000000aaff"], 0x0) [ 1597.999872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9275 comm=syz-executor.3 02:49:31 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x5, 0x0, 0x0, 0x241808, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000002100800009001f00706879310000000005002000000000000c000500000000000000000010da09a33237beec793eede95d78f206fc7994f1ceab5ce2141b19cf4b8e86a5f53ecdc2806e900b6e9fce9bb0cb7fadcd15859c3750d778de1775d9"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = mmap$IORING_OFF_SQES(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x200000e, 0x11, r4, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x0, @fd=r0, 0x1f, 0x0, 0x0, 0x1, 0x1}, 0x3d3df0af) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={0x0, 0x37}}, 0x4000000) 02:49:31 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:31 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:31 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000006000000000000000aaff02"], 0x0) 02:49:31 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:31 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000005000000000000aaff"], 0x0) 02:49:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000fffffff500000000000000aaff02"], 0x0) 02:49:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000003c000000000000aaff"], 0x0) 02:49:31 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000010000aaff"], 0x0) 02:49:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000f5ffffff00000000000000aaff02"], 0x0) 02:49:31 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="2000000000000000f8", 0x9, 0x4000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00d16de0b561e7867776924a95129f2dad9f0b7b44fe5df1700b50dc344d777492b39a211b0fd26bd3c2e6f43e16de360463d69cab5749"]) r1 = dup2(r0, r0) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x12000, 0x1a1) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x3, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000540)=0x0) r6 = syz_io_uring_complete(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000000140)) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r6, &(0x7f0000000440), &(0x7f0000000300)='./file0\x00', 0x8, 0x0, 0x1}, 0x3) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0xdc06635dc509ea7b}, 0x2) 02:49:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000030000aaff"], 0x0) [ 1615.820529] loop3: detected capacity change from 0 to 32768 02:49:31 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000050000aaff"], 0x0) [ 1615.888883] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1615.913855] FAT-fs (loop3): error, invalid access to FAT (entry 0x000000f8) [ 1615.915403] FAT-fs (loop3): Filesystem has been set read-only [ 1615.993058] loop3: detected capacity change from 0 to 32768 [ 1616.024272] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1616.041337] FAT-fs (loop3): error, invalid access to FAT (entry 0x000000f8) [ 1616.042999] FAT-fs (loop3): Filesystem has been set read-only 02:49:48 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:49:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000001000000aaff02"], 0x0) 02:49:48 executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = accept$inet6(r0, 0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001a00)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r1, 0x0, &(0x7f00000019c0)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)="a1caaa9a394b1efb6bb36c2449f38d03d8695989147e91e06972ec8d164737852fa83916ed6565f0e9c21dc8e9f2531aef62f710fdb9561fbeaad21ea96f5886152bc8d2a0db9145f7f42ccb8d941c8617e89fe4a9bc357e4351ebacca7113e054ca473af1fc5f13b23d6cacc966fd4e92517ae86d666de2ac52bc9cd52f0b29dedafa794ae68c431f13d976bddb55af59b84c77e9a5fd1ce95e02b22e39e4b380cc954de8e52cf1483b7dde0cadae66df3435e3377bfe37373f92230256554aaf6fe179a48075d8d1836598a384da9fa23bb4fc7722c08609e0297b1406024fc56b0e51cd43de693863ebc95e444efec8b5ff3a", 0xf4}, {&(0x7f0000000400)="c747ebd6a5999921574de385f8412fb3988ac9d5785fb526361d3a1505e4fceb6cc07cd604f71f5ef15000103b7e795b5b5d6200183463ee3cecf9060fabc98e7fa3caf9de0b84f20dfc90bdb6d632a1d598e32fca0da107b03857134006d4a39ae253d514170a1f2c905e914186d7714ea5a529d6c430fb7affa4ec322c7c51f42555c0083dd521cb560ffd0f60d27da9546e3bca5b870381760177d65b90ff3edaf218829e6dea83501ff823a242071f1f955ab09a003feaa8128c8bcaab47e7", 0xc1}, {&(0x7f0000000240)="68ce8a53eb2568d2d9", 0x9}, {&(0x7f0000000500)="433f8d236c624540658294111155a999be203f1e332c773a1f10f20eb6eb68ac4e1c7cd8b64142c61d42310bc475dd86c8cac6dcb1b6affeacd333874c46445db1d97081150d18dae9a9e988495018d2bbf9aa6cf1895197c2cef7b4fe0759ffc8a71937", 0x64}, {&(0x7f0000000580)="a9c69f44fcff42a7e261aada6903f750c2eb9cc0273ab0ca7faedd4934c5d23f4299471b3614a87b3b8f9a57f48301d496a97be2f14c8c25cf0e4e4f771e08a40df795eae8a6bf17b7dac19133401dfcb62a2339bada97926d3ab7421da9fa91f0102d4e1ffac8b7f13c54268de539b30e19ad3ed317b1ecd5f63307bea617baf3016bef03", 0x85}, {&(0x7f0000000640)="c14b710a412422aee193b5ef4c7e8729bef92499c8d3cfcbd9e63c9f50403f55821196fc29f89b6d6e1f407d0d5cf8e2ecb8d1fab5dc0f812693d75c69f85be98595ad1e2e06ef25f647e9d77ff4a9a2cece0448a4e95e6416dde10916bec8447c95f16c94846c63628a598a622ccac6f0a43e5f420f7563f03afe83f32c21c8df08a8d0954c11edd56f32ae95ca4221111ac595a4c848454f8aa19cfa9fb77291c699b3eece5ef397907ccc1378435b14c6596fd05339270bb4e491e7d54977918f8a25546f3e66955df8a52667201b73153cc1aa67a30c", 0xd8}, {&(0x7f0000000280)="2a4965a426111004b020292dec9eeda1ea05f62d6a8c8a2083f19b8641644670c17fd9ec", 0x24}], 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x11e0}, 0x0, 0x4000}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) recvmsg(r2, &(0x7f0000001b40)={&(0x7f0000001a40)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001ac0)=""/59, 0x3b}], 0x1, &(0x7f0000001e00)=""/4096, 0x1000}, 0x102) accept$unix(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x100000001) 02:49:48 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:48 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:48 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:48 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:48 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000003c0000aaff"], 0x0) [ 1633.428662] loop3: detected capacity change from 0 to 41948160 02:49:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000ffffffff0000aaff"], 0x0) 02:49:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000003000000aaff02"], 0x0) 02:49:49 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:49:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000ffffffffffffffff0000aaff"], 0x0) 02:49:49 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:49:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000005000000aaff02"], 0x0) 02:49:49 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:50:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000030000000000000000aaff"], 0x0) 02:50:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000003c000000aaff02"], 0x0) 02:50:04 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x7ffd) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x60002004}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 02:50:04 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:04 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:04 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 02:50:04 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:04 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000040000000aaff02"], 0x0) [ 1648.861194] FAULT_INJECTION: forcing a failure. [ 1648.861194] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.864164] CPU: 1 PID: 9410 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1648.865607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1648.867352] Call Trace: [ 1648.867909] dump_stack+0x107/0x167 [ 1648.868676] should_fail.cold+0x5/0xa [ 1648.869487] should_failslab+0x5/0x20 [ 1648.870295] kmem_cache_alloc_bulk+0x4b/0x320 [ 1648.871247] io_submit_sqes+0x6fe6/0x8610 [ 1648.872131] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1648.873176] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1648.874212] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1648.875245] ? io_submit_sqes+0x8610/0x8610 [ 1648.876153] ? recalibrate_cpu_khz+0x10/0x10 [ 1648.877073] ? ktime_get+0x158/0x1f0 [ 1648.877857] ? setup_APIC_eilvt+0x2f0/0x2f0 02:50:04 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1648.878780] ? clockevents_program_event+0x131/0x360 [ 1648.880044] ? tick_program_event+0xa8/0x140 [ 1648.880970] ? hrtimer_interrupt+0x771/0x9b0 [ 1648.881911] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 02:50:04 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1648.883030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1648.884226] do_syscall_64+0x33/0x40 [ 1648.885015] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1648.886103] RIP: 0033:0x7f7726e3cb19 [ 1648.886902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1648.890811] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1648.892414] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1648.893929] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1648.895444] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.896946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.898462] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:50:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000050000000000000000aaff"], 0x0) 02:50:04 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x24041004) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000180)='\x00', &(0x7f00000002c0)='./file1\x00', r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4bc4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@version_L}, {@posixacl}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 02:50:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000060000000aaff02"], 0x0) 02:50:04 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:04 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000003c0000000000000000aaff"], 0x0) 02:50:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000fffffff5000000aaff02"], 0x0) 02:50:04 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:04 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:20 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:20 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xffff) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = dup(r1) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r4, 0x0, 0x0, 0x6, 0x4}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x10000) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6, 0x8, 0x1f, 0x5, 0x0, 0xc6e7, 0x40000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x6408, 0x1, 0x3, 0xc, 0x2, 0xfce, 0x9, 0x0, 0x5, 0x0, 0x4}, r7, 0xffffffffffffffff, r5, 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000001007cf7fc58"]) mkdirat(r6, &(0x7f0000000200)='./file0\x00', 0x86) 02:50:20 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:20 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:20 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 02:50:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000ffffffff000000aaff02"], 0x0) 02:50:20 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000300000000000000aaff"], 0x0) 02:50:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000500000000000000aaff"], 0x0) [ 1665.185322] FAULT_INJECTION: forcing a failure. [ 1665.185322] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.187308] CPU: 1 PID: 9459 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1665.188468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1665.189880] Call Trace: [ 1665.190328] dump_stack+0x107/0x167 [ 1665.190955] should_fail.cold+0x5/0xa [ 1665.191630] ? create_object.isra.0+0x3a/0xa20 [ 1665.192418] should_failslab+0x5/0x20 [ 1665.193064] kmem_cache_alloc+0x5b/0x310 [ 1665.193746] create_object.isra.0+0x3a/0xa20 [ 1665.194482] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1665.195351] kmem_cache_alloc_bulk+0x168/0x320 [ 1665.196130] io_submit_sqes+0x6fe6/0x8610 [ 1665.196841] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1665.197683] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1665.198518] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1665.199341] ? find_held_lock+0x2c/0x110 [ 1665.200034] ? io_submit_sqes+0x8610/0x8610 [ 1665.200771] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1665.201609] ? wait_for_completion_io+0x270/0x270 [ 1665.202437] ? rcu_read_lock_any_held+0x75/0xa0 [ 1665.203224] ? vfs_write+0x354/0xb10 [ 1665.203860] ? fput_many+0x2f/0x1a0 [ 1665.204477] ? ksys_write+0x1a9/0x260 [ 1665.205124] ? __ia32_sys_read+0xb0/0xb0 [ 1665.205813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1665.206694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1665.207567] do_syscall_64+0x33/0x40 [ 1665.208197] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1665.209065] RIP: 0033:0x7f7726e3cb19 [ 1665.209695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.212798] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1665.214083] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1665.215332] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1665.216535] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.217752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.218969] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:50:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000ffffffffffffffff000000aaff02"], 0x0) 02:50:20 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:20 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1665.294734] cgroup2: Unknown parameter '' 02:50:36 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000003c00000000000000aaff"], 0x0) 02:50:36 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:36 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:36 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="e6f5d69772ee99ed0000000086dd6096033f00303a00fc020000000000000000000000000000ff1200000000000000dcec93cb08649ad208ed421bc3fa000000000000010200907800000000600009e600"/90], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) syz_extract_tcp_res(&(0x7f0000005100), 0x9, 0x5) write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x892f}, @void, @mpls={[], @llc={@llc={0x7e, 0xfc, 's', "84ded4defb7338bd4667bf822bb44cf412c429a5fbba394b6a6b89a490316d2e6052438309092a3fe7087087bdf23c27cd"}}}}, 0x38) syz_emit_ethernet(0x91, &(0x7f0000005900)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb00173fead35768d5088654533f16c7de6d592a3b6614f97f677b6a4779f51864dafb805221703209b8f5f98fe83b4481d99c49fda56ecc5c72fcbbfd07817d4b2d3c86178e584f2f74c6dbee0bb4e0b8669cbf6a5b204088dc628fd40e6fb0f908000000000000008404113b093f20d0723ca443ec28224cbff7192248b0d57e5f9140cf97"], 0x0) syz_emit_ethernet(0x1d, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000006a80)) syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbfbbbbbbbaaaaaaaaaaaa000c040000c004010000004ae69c7c4765c9"], &(0x7f0000000200)={0x0, 0x3, [0xf03, 0xf7b, 0x49, 0x9b8]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000100)=@newspdinfo={0x14, 0x24, 0x100, 0x70bf27, 0x25dfdbfc, 0x1f}, 0x14}}, 0x0) dup3(r0, r2, 0x80000) getpgrp(0x0) r3 = getpgid(r1) process_vm_readv(r3, 0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/175, 0xaf}, {&(0x7f0000001a80)=""/3, 0x3}], 0x2, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'lo\x00'}) 02:50:36 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 02:50:36 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000003000000000000000000aaff02"], 0x0) 02:50:36 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:36 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1680.843508] FAULT_INJECTION: forcing a failure. [ 1680.843508] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.846364] CPU: 0 PID: 9493 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1680.847854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1680.849617] Call Trace: [ 1680.850184] dump_stack+0x107/0x167 [ 1680.850965] should_fail.cold+0x5/0xa [ 1680.851787] ? create_object.isra.0+0x3a/0xa20 [ 1680.852763] should_failslab+0x5/0x20 [ 1680.853594] kmem_cache_alloc+0x5b/0x310 [ 1680.854468] ? mark_held_locks+0x9e/0xe0 [ 1680.855353] create_object.isra.0+0x3a/0xa20 [ 1680.856295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1680.857378] kmem_cache_alloc_bulk+0x168/0x320 [ 1680.858382] io_submit_sqes+0x6fe6/0x8610 [ 1680.859293] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1680.860378] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1680.861429] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1680.862450] ? find_held_lock+0x2c/0x110 [ 1680.863327] ? io_submit_sqes+0x8610/0x8610 [ 1680.864248] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1680.865274] ? wait_for_completion_io+0x270/0x270 [ 1680.866296] ? rcu_read_lock_any_held+0x75/0xa0 [ 1680.867289] ? vfs_write+0x354/0xb10 [ 1680.868077] ? fput_many+0x2f/0x1a0 [ 1680.868859] ? ksys_write+0x1a9/0x260 [ 1680.869664] ? __ia32_sys_read+0xb0/0xb0 [ 1680.870532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1680.871658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1680.872778] do_syscall_64+0x33/0x40 [ 1680.873567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1680.874669] RIP: 0033:0x7f7726e3cb19 [ 1680.875470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1680.879403] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1680.881022] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1680.882540] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1680.884064] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1680.885586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.887114] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:50:36 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000005000000000000000000aaff02"], 0x0) 02:50:36 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:36 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000010000000000aaff"], 0x0) 02:50:36 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:36 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000003c000000000000000000aaff02"], 0x0) 02:50:36 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="e6f5d69772ee99ed0000000086dd6096033f00303a00fc020000000000000000000000000000ff1200000000000000dcec93cb08649ad208ed421bc3fa000000000000010200907800000000600009e600"/90], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) syz_extract_tcp_res(&(0x7f0000005100), 0x9, 0x5) write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x892f}, @void, @mpls={[], @llc={@llc={0x7e, 0xfc, 's', "84ded4defb7338bd4667bf822bb44cf412c429a5fbba394b6a6b89a490316d2e6052438309092a3fe7087087bdf23c27cd"}}}}, 0x38) syz_emit_ethernet(0x91, &(0x7f0000005900)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb00173fead35768d5088654533f16c7de6d592a3b6614f97f677b6a4779f51864dafb805221703209b8f5f98fe83b4481d99c49fda56ecc5c72fcbbfd07817d4b2d3c86178e584f2f74c6dbee0bb4e0b8669cbf6a5b204088dc628fd40e6fb0f908000000000000008404113b093f20d0723ca443ec28224cbff7192248b0d57e5f9140cf97"], 0x0) syz_emit_ethernet(0x1d, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000006a80)) syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbfbbbbbbbaaaaaaaaaaaa000c040000c004010000004ae69c7c4765c9"], &(0x7f0000000200)={0x0, 0x3, [0xf03, 0xf7b, 0x49, 0x9b8]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000100)=@newspdinfo={0x14, 0x24, 0x100, 0x70bf27, 0x25dfdbfc, 0x1f}, 0x14}}, 0x0) dup3(r0, r2, 0x80000) getpgrp(0x0) r3 = getpgid(r1) process_vm_readv(r3, 0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/175, 0xaf}, {&(0x7f0000001a80)=""/3, 0x3}], 0x2, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'lo\x00'}) 02:50:36 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000030000000000aaff"], 0x0) 02:50:36 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:36 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:51 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:51 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000060000000000000000000aaff02"], 0x0) 02:50:51 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:51 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 02:50:51 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:51 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000050000000000aaff"], 0x0) 02:50:51 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xffffffc6}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 02:50:51 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1695.908551] FAULT_INJECTION: forcing a failure. [ 1695.908551] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.909965] CPU: 1 PID: 9529 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1695.910740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1695.911697] Call Trace: [ 1695.912001] dump_stack+0x107/0x167 [ 1695.912423] should_fail.cold+0x5/0xa [ 1695.912857] ? create_object.isra.0+0x3a/0xa20 [ 1695.913379] should_failslab+0x5/0x20 [ 1695.913811] kmem_cache_alloc+0x5b/0x310 [ 1695.914274] ? mark_held_locks+0x9e/0xe0 [ 1695.914736] create_object.isra.0+0x3a/0xa20 [ 1695.915237] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1695.915836] kmem_cache_alloc_bulk+0x168/0x320 [ 1695.916370] io_submit_sqes+0x6fe6/0x8610 [ 1695.916847] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1695.917414] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1695.917977] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1695.918527] ? find_held_lock+0x2c/0x110 [ 1695.918992] ? io_submit_sqes+0x8610/0x8610 [ 1695.919495] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1695.920043] ? wait_for_completion_io+0x270/0x270 [ 1695.920595] ? rcu_read_lock_any_held+0x75/0xa0 [ 1695.921121] ? vfs_write+0x354/0xb10 [ 1695.921546] ? fput_many+0x2f/0x1a0 [ 1695.921961] ? ksys_write+0x1a9/0x260 [ 1695.922395] ? __ia32_sys_read+0xb0/0xb0 [ 1695.922861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1695.923473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1695.924063] do_syscall_64+0x33/0x40 [ 1695.924488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1695.925071] RIP: 0033:0x7f7726e3cb19 [ 1695.925500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1695.927590] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1695.928465] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1695.929277] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1695.930090] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1695.930900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.931719] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:50:51 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000003c0000000000aaff"], 0x0) 02:50:51 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:51 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) syncfs(r0) creat(&(0x7f0000000000)='./file0\x00', 0x40) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x115400, 0x33) 02:50:51 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:50:51 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000100aaff"], 0x0) 02:50:51 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000030000000000000000aaff02"], 0x0) 02:50:51 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 1696.216582] FAULT_INJECTION: forcing a failure. [ 1696.216582] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.219614] CPU: 0 PID: 9559 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1696.221214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.223134] Call Trace: [ 1696.223755] dump_stack+0x107/0x167 [ 1696.224596] should_fail.cold+0x5/0xa [ 1696.225485] ? create_object.isra.0+0x3a/0xa20 [ 1696.226541] should_failslab+0x5/0x20 [ 1696.227427] kmem_cache_alloc+0x5b/0x310 [ 1696.228371] ? mark_held_locks+0x9e/0xe0 [ 1696.229321] create_object.isra.0+0x3a/0xa20 [ 1696.230336] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1696.231519] kmem_cache_alloc_bulk+0x168/0x320 [ 1696.232580] io_submit_sqes+0x6fe6/0x8610 [ 1696.233551] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1696.234703] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1696.235864] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1696.236986] ? find_held_lock+0x2c/0x110 [ 1696.237945] ? io_submit_sqes+0x8610/0x8610 [ 1696.238945] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.240068] ? wait_for_completion_io+0x270/0x270 [ 1696.241180] ? rcu_read_lock_any_held+0x75/0xa0 [ 1696.242252] ? vfs_write+0x354/0xb10 [ 1696.243108] ? fput_many+0x2f/0x1a0 [ 1696.243962] ? ksys_write+0x1a9/0x260 [ 1696.244842] ? __ia32_sys_read+0xb0/0xb0 [ 1696.245785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1696.246995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1696.248191] do_syscall_64+0x33/0x40 [ 1696.249057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1696.250237] RIP: 0033:0x7f7726e3cb19 [ 1696.251096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.255374] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1696.257129] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1696.258776] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1696.260429] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.262070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.263714] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:51:04 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 02:51:04 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:04 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:04 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2284, &(0x7f00000011c0)={0x53, 0x0, 0x0, 0x40, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x20, 0x5, 0x3f, 0x96, 0x0, 0x8e, 0x40000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffff7f, 0x1ec}, 0xe, 0x800, 0x1, 0x6, 0x9, 0x1, 0x7, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x3, 0x10000}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', r4, 0x2f, 0x21, 0x8, 0x200, 0x0, @empty, @private1, 0x700, 0x20, 0x3, 0xfffffffd}}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendfile(r0, r1, 0x0, 0x7f1) 02:51:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000300aaff"], 0x0) 02:51:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000050000000000000000aaff02"], 0x0) 02:51:04 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:04 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000003c0000000000000000aaff02"], 0x0) [ 1708.821733] FAULT_INJECTION: forcing a failure. [ 1708.821733] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.824519] CPU: 1 PID: 9576 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1708.825968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1708.827734] Call Trace: [ 1708.828299] dump_stack+0x107/0x167 [ 1708.829063] should_fail.cold+0x5/0xa [ 1708.829871] ? create_object.isra.0+0x3a/0xa20 [ 1708.830838] should_failslab+0x5/0x20 [ 1708.831668] kmem_cache_alloc+0x5b/0x310 [ 1708.832534] ? mark_held_locks+0x9e/0xe0 [ 1708.833392] create_object.isra.0+0x3a/0xa20 [ 1708.834316] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1708.835395] kmem_cache_alloc_bulk+0x168/0x320 [ 1708.836383] io_submit_sqes+0x6fe6/0x8610 [ 1708.837266] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1708.838321] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1708.839378] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1708.840404] ? find_held_lock+0x2c/0x110 [ 1708.841276] ? io_submit_sqes+0x8610/0x8610 [ 1708.842198] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1708.843224] ? wait_for_completion_io+0x270/0x270 [ 1708.844248] ? rcu_read_lock_any_held+0x75/0xa0 [ 1708.845218] ? vfs_write+0x354/0xb10 [ 1708.846001] ? fput_many+0x2f/0x1a0 [ 1708.846775] ? ksys_write+0x1a9/0x260 [ 1708.847604] ? __ia32_sys_read+0xb0/0xb0 [ 1708.848468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1708.849575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1708.850666] do_syscall_64+0x33/0x40 [ 1708.851461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1708.852534] RIP: 0033:0x7f7726e3cb19 [ 1708.853319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1708.857211] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1708.858807] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1708.860333] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1708.861834] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1708.863352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.864867] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:51:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000500aaff"], 0x0) 02:51:04 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000003c00aaff"], 0x0) 02:51:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000400000000000000000aaff02"], 0x0) 02:51:04 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 02:51:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$nfs4(&(0x7f0000004800), 0x0, 0x100040, 0x0, &(0x7f0000004c40), 0x0, &(0x7f0000004d00)={[], [{@pcr}]}) [ 1709.122322] FAULT_INJECTION: forcing a failure. [ 1709.122322] name failslab, interval 1, probability 0, space 0, times 0 [ 1709.123890] CPU: 0 PID: 9600 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1709.124690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1709.125678] Call Trace: [ 1709.125991] dump_stack+0x107/0x167 [ 1709.126425] should_fail.cold+0x5/0xa [ 1709.126881] ? create_object.isra.0+0x3a/0xa20 [ 1709.127420] should_failslab+0x5/0x20 [ 1709.127894] kmem_cache_alloc+0x5b/0x310 [ 1709.128372] ? mark_held_locks+0x9e/0xe0 [ 1709.128853] create_object.isra.0+0x3a/0xa20 [ 1709.129477] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1709.130113] kmem_cache_alloc_bulk+0x168/0x320 [ 1709.130660] io_submit_sqes+0x6fe6/0x8610 [ 1709.131153] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1709.131743] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1709.132323] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1709.132890] ? find_held_lock+0x2c/0x110 [ 1709.133369] ? io_submit_sqes+0x8610/0x8610 [ 1709.133884] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1709.134452] ? wait_for_completion_io+0x270/0x270 [ 1709.135019] ? rcu_read_lock_any_held+0x75/0xa0 [ 1709.135566] ? vfs_write+0x354/0xb10 [ 1709.136003] ? fput_many+0x2f/0x1a0 [ 1709.136429] ? ksys_write+0x1a9/0x260 [ 1709.136875] ? __ia32_sys_read+0xb0/0xb0 [ 1709.137351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1709.137968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1709.138573] do_syscall_64+0x33/0x40 [ 1709.139009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1709.139624] RIP: 0033:0x7f7726e3cb19 [ 1709.140066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1709.142231] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1709.143121] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1709.143972] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1709.144804] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1709.145633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.146465] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1709.149756] loop3: detected capacity change from 0 to 1048576 [ 1709.170656] loop3: detected capacity change from 0 to 1048576 02:51:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000600000000000000000aaff02"], 0x0) 02:51:17 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)=""/203, 0xcb}, {0x0}], 0x2, 0x1000, 0x0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000400)="31d56dad8a828f7420896611aae246777aa037cac76a32d0f37322c544e34bfbafb5f9a76164149cc72f0c9e64e5ddffbf42eb43ca68b9bfbbb7a5b8a1a07148760e17afb38f8527614e8db330caae8729a47ca3476e8e05a6b5a938565ec13986a2c53a800699c95002c67c41f778e9260b4e963107bbf3aff2196b0f") socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0xffffffffffffffcd) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r0, 0x21, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10200, &(0x7f0000000b00)={0x77359400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd649, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x1001000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESDEC]) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000480), 0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = signalfd4(r1, &(0x7f00000000c0)={[0x52]}, 0x8, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x7f, 0x0, 0x96f, 0x2, 0x7}) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x20, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc621010}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 02:51:17 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:17 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000ffffffff00aaff"], 0x0) 02:51:17 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 02:51:17 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000ffffffffffffffff00aaff"], 0x0) [ 1721.895258] EXT4-fs (sda): re-mounted. Opts: (null) [ 1721.905377] EXT4-fs (sda): re-mounted. Opts: (null) [ 1721.907243] FAULT_INJECTION: forcing a failure. [ 1721.907243] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.908652] CPU: 1 PID: 9626 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1721.909499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1721.910547] Call Trace: [ 1721.910895] dump_stack+0x107/0x167 [ 1721.911368] should_fail.cold+0x5/0xa [ 1721.911873] ? create_object.isra.0+0x3a/0xa20 [ 1721.912459] should_failslab+0x5/0x20 [ 1721.912927] kmem_cache_alloc+0x5b/0x310 [ 1721.913430] ? mark_held_locks+0x9e/0xe0 [ 1721.913933] create_object.isra.0+0x3a/0xa20 [ 1721.914485] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1721.915119] kmem_cache_alloc_bulk+0x168/0x320 [ 1721.915693] io_submit_sqes+0x6fe6/0x8610 [ 1721.916211] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1721.916824] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1721.917443] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1721.918039] ? find_held_lock+0x2c/0x110 [ 1721.918542] ? io_submit_sqes+0x8610/0x8610 [ 1721.919090] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1721.919692] ? wait_for_completion_io+0x270/0x270 [ 1721.920289] ? rcu_read_lock_any_held+0x75/0xa0 [ 1721.920861] ? vfs_write+0x354/0xb10 [ 1721.921320] ? fput_many+0x2f/0x1a0 [ 1721.921770] ? ksys_write+0x1a9/0x260 [ 1721.922241] ? __ia32_sys_read+0xb0/0xb0 [ 1721.922745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1721.923397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1721.924044] do_syscall_64+0x33/0x40 [ 1721.924503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1721.925132] RIP: 0033:0x7f7726e3cb19 [ 1721.925591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.927873] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1721.928806] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1721.929677] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1721.930549] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1721.931434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.932284] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:51:17 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x100000001, 0x6c84, 0x1, 0x3}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) lsetxattr$system_posix_acl(&(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='system.posix_acl_access\x00', &(0x7f0000000d00)={{}, {0x4}}, 0x24, 0x0) 02:51:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000001000000000000aaff02"], 0x0) 02:51:17 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 02:51:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000004ec0)=[{{&(0x7f00000046c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004c40)="e27871567c6f", 0x6}, {&(0x7f0000004c80)="80357fab862013de05db636390f30aca3a2e72ca1a6330c1caa65617bf4d8a09cf9e35ee8433d9d2a529fc06f4e0aa01db40773400e349b40654250719e4709f07dc11d9c2a29001def7255a7bb9bee95dce0f652db42ef66fa16c3806d3caed72a8d4bf9137232787170f3fff5890623db3516d8ae2a7b1d9dc4abf4386ac5b087c35e2cf1cfa28", 0x88}], 0x2, &(0x7f0000004d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}], 0x40}}, {{&(0x7f0000004dc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004e80)=[{&(0x7f0000004e00)="ec7d6b791af86c2723ec60b556c3240ce8944ba5ed206ba03f44f64d1c7fce8de38e7404c139592d7af074a8676f04fa7c7583c34bb2311edec4fdc4ae3b6df191e30dc03878deeca2ef46fdea98cf3e0d25fea4cc0b30886cca95dc38c007bf0ff458136a8c", 0x66}], 0x1}}], 0x2, 0x20000044) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000000058000000000000070000000000f7ff00"/40, @ANYRES32=r2], 0x38}}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000048c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000440)="f54ef366a4f322b62f45a1a52c7cfed40103a686212f708def5eca6ac7e00677839e7a0d7d8d2396ffd6c23a942482a9d5031dda3eb2806c96b322f6c9c5e1b1e693716afcbfdce32a7537ee37f92cfe22718326766c1d2357999401db5594404602c6e020389900e4bcd0716c8cec6c32", 0x71}, {&(0x7f00000004c0)="a7ca770d9ad452c301873b1d2507f752f9a6126a2d818f5bf3dee4348742cb63f0e85db9fe7ca78aa956594cc3e566ec21c79339d6d448ec9c4286f7f4d6f5a3063d23ba1091ac2a1f06b4d32b1d772a407becf2ef2e3f65ec81350466a6e38bfc127de0e92ba6f94e17e68ca08ee0b9572a8238977586ed42a50b11bb184f2e74b320379d062ac28daf2379b6edc35a706abba6874ae6b737aff433933b7d43082d991f2a8d91a9d0409755079a0f38841dded7eef908587d4197c085ada827", 0xc0}, {&(0x7f0000000580)="31ec369ae5ba43fff8fe604f6f39972d165d27a392bc04", 0x17}, {&(0x7f00000005c0)="de8624ca56d0d83bb6a6f774904960e9ba58419c89e0359f27a52796a913a787f0857d19129c2773336b6c1de98c23c9fb546f61f27cd65b864d76f79043118cfba0e615dcb5d5f4d58aa5cf3420dd1b24bc59582e558d74d005b949e7719156ac8bacc188e2a2c31879f3a2fcf87e87ed2783326fa5ab2308c9c1ce5417a809b627183b065c453055b5651c7e85feb15afe1eb72b4cdb4b8743adb3e766bbed2d14b1d961ee1e67ab479058622cbfd16219d712f754c3a1bf78dc4643f0c85f20308838f76d1ebe7de1d022cd8d8feb3d7bf4718223fbf221f7cf7b1307e0a89b84ea6de8a9a28f460edd6aca3db7df56960ae7acd2", 0xf6}, {&(0x7f00000006c0)="072065f44bc9b4f7530b1f2eb958b9c7fec23e1476e3cfea442a18ed0d001edd5bd37473654b638f407a", 0x2a}], 0x5, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f00000007c0)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000800)="22e25f12897e7c173bd9422aa4fe659da6f1bfe04b2cc4c19efb32424f9e4b33c57552ac2608d2e00fde28b8941d8cabe55b88c75e938ae6808e692a11e0aece4daa7c407f75cbcb490a713cb0000820be4d718ac6c0b0a94301b20c417dbeee0714e54b58f212ec040c342aa1541935786c9bc5f2b097e4d2de5a2195c7051f1535b165544dea97e2fb161be6d64a700424", 0x92}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="3681f28c8e8efff88cfb72a493f4909dfc6c7f4f80067b9277d4e7bae5ce57c0ffdd8c98f0cf02837736a3af02506f33fd0f8db39850580e380b3d5b875d15889dc930bc4cc3cff758f9f45b4c4defca9e31fec3b8d464c370bcacdde444e63e2f5fba9e8f460b273e5052ea4103233b815d3728e405bfdb9207fa8a0f417ebc7309f7e26b7a0d86545ce92f", 0x8c}, {&(0x7f0000001980)="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", 0xfc}, {&(0x7f0000001a80)="57b98dcf846457299c8d071897866fe4d384ad1376bb2a1ced68602cac0777a729e4e1d00d8e09bc38bcc83a72d987d1e14d3eab5b6f31f9ffe6317bdd94779de3f53b5fd906cf518af85ae4f9696babded5d7a2c1f2ed0580046fae42cdace52241ffab5fb4d3b26e0b80329f1d65e9e551431d2452a76f77b6068c4b6f8e8e9a846f58976c47fb94088719667f5fdf7ec221ef3889f3c4818879c48f178c6f28078ecc944af36e13", 0xa9}], 0x5}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001bc0)="227111da08083cde462af788346f550ee98c7a3f439cb5fc00991364f8adf7316efec096c8d83dfd54b18b8d9628afe9de6b8d6559a93463cd7a6a3737cd1a5b5065400ea3680d0b6b59454c8953bd3f1fbe4374ec657bab36c886d7d5ad59af32f482be8cd1282720f587fc74e3d35fae72b6acd72f908fe05e250d0a904b5de659439c6f9dd415e4770c1b24b3ddaa0d63ab75d33f74f0d591ee2c05edd5f55956ff32414580ddd7df544314f46367019765f066402e70bcb3e8db5d68a22dc6fce23e", 0xc4}, {&(0x7f0000001cc0)="f5b540a5f65c7388e8b2f913bb52e1aed7f9f63492a7ab740a052e16cebc00130ca52384e28c6188255c131c131208a726704fb2be327af416f61e47f686a5e0cdd67a0984f8de16640520fe06b825c9cf2b689650220af653fad619cc1d6dbe2e4ae8c6dbac02cf", 0x68}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="e168a992d121c340c8b4d9e73a9543e310610add7afa240b842172c6cb28b784394ef6b1c8f59b8e0f7e1b944d2ca64664a41703e9d315b6a05d5ca5e46981b176cd7beb1db1987154e84d19a80c62b07c2b19eca5352fa5e0953d81aad9e5de2b52f809140ec6eb6d6747c447e66f255eae25ecb8aab3e82e5f5b60c150f0effdb1bd20b6e3edf8733308e731ce408d92ce9c2e19417341a92c33288175768d1372ba8f3d69ddcc887615f1c948aecedd1348bd75", 0xb5}], 0x4, &(0x7f0000002e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x100}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002e80)="4e377b052de772fb821ac6806099de2ed7356e4f82bf620b03e3ef6b06a625b7a17ed9f3b1ef95ebab0f431d23073d65551536f1508ea3949a9f0f1014b34f0a535e700022dbadb5c73883cd752a42dee38934f9fc965022856edc757d8e37d6f543ba294fe2761a2f390d10ab1196faca421029af1aafc37359f83a68eaa4e23f82c035e0bcf725ad730327", 0x8c}], 0x1}}, {{&(0x7f0000002f80)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000003fc0)=[{&(0x7f0000002fc0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000004000)="8090bb20d4", 0x5}, {&(0x7f0000004040)="2bcd9f53dc3ee0aa10f21aea202944ea208382186b2767f6", 0x18}, {&(0x7f0000004080)="baa85f06c5fbd61274e8d69c740dac8d3f1c55240f69750f10a494382b44e157abfec49a0b8184ff3752ce86990bdcecdf688dcb30dcad85a9f39448d2cf0240d58cc42b58eacc4bee5fc65579fce49e8e75e625dcb0d97ec44e20794822d8baabacf68cc7081d45e9c914afe0c6a7b2daadb2a664be70c2d2f61f11f89fdd8fa376f55c542ae39f15d8883b426ce660f3e4e5c2309fbb159382035accc2d704120cb31f4b23e4fce29f22e89bdcb65283992a0e72a272486befcf647135e6dba70d5c9a191c786b", 0xc8}], 0x3, &(0x7f00000041c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0xa, [{@multicast2, 0x5}]}, @rr={0x7, 0xf, 0xc7, [@multicast2, @empty, @local]}, @generic={0x86, 0x4, "e4ff"}]}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @cipso={0x86, 0x16, 0x2, [{0x2, 0x10, "3328c470226d4ee811eff23323c4"}]}, @lsrr={0x83, 0x1b, 0xa4, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010101, @rand_addr=0x64010102]}, @noop, @ssrr={0x89, 0xb, 0x1c, [@rand_addr=0x64010102, @local]}]}}}], 0x80}}, {{&(0x7f0000004240)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000004540)=[{&(0x7f0000004280)="024fd85ff157f689ea9c7489c0d349d4d284330a4150a1ab94518b36596357715647f691284226f5caf3b133be579c413489b7379e9a21dccab422d633dae866354b0e24946cacfb8b57441fb3c626dfa1abcb3e4bfbdddf1cc65befe63899e41e726cd792d8746ca760e412db5842d372f0d6b5a61ced7ccb27c443bef0f2e8dc900b6bd3dfa902e9468956c8504492d2cd8743bcd0618da057a5f20f81f4981fbe8a1ad0363db3729464b66795627e88b9c9281897071e472cf4026a07e83f8b63048a06bc2e8470e42eae3bb2f8774882d1033dff6b70e6c3", 0xda}, {&(0x7f0000004380)="0a433f4e094ff2a6a7c0f2210575138f0a2c280bae72fe085e4e048dc71c169ee435d0b688747d8fa81ebcfe94268043e4678e0647302f0af01b91956b2173c013a2d06ede6020eaa9dd6cdc70fe11e04cf8a043254a3666b406514eb5bffc221e1ef1ba306d56c6138146b87a8da19a81fa62af5823c9cf406339c294758a097cdbd5bf67527e", 0x87}, {&(0x7f0000004440)="8344da371ec1dd57abddbe50fc7a09ced0c1d2448327b3e07e15ded736a98b02afac6ae2dad740f34cb59e67107de092c94d0d2a853868732c2dae84d9c655fb6f0042caed5efe51580954a566c1dd93d8cd8f0cd04adcb2fae5d1c6ff3acb5aba6bf59b623f7c15147876b7b3b1b9c805040f68cc6cdad1ce8fcf7f45735174878d17a8fe696f453f23a29f88ddd935168b069ab346b7ce9c4a79fd5a0ff75181275185a1426fe01fc5f96d8b", 0xad}, {&(0x7f0000004500)="94dcb1af0939cc2869d04e645a622ebdb3c2e69f4f781fb69b2c469ae8b7", 0x1e}], 0x4, &(0x7f0000004580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc62b}}], 0x30}}, {{&(0x7f00000045c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000004600), 0x0, &(0x7f0000004640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x18}}, {{&(0x7f0000004680)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000046c0), 0x0, &(0x7f0000004700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{&(0x7f0000004740)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f00000047c0)=[{&(0x7f0000004780)="03dac3f51408", 0x6}], 0x1, &(0x7f0000004800)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x95a9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8f}}], 0x98}}], 0xa, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000004600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000004b40)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, 0x4e23, 0x2, 0x4e24, 0x61, 0x0, 0x0, 0x20, 0x33, 0x0, 0xee00}, {0x81, 0x5c08, 0x1000, 0xfffffffffffffff9, 0x6, 0x7, 0x7fff, 0x4}, {0x1, 0x8, 0x243, 0x6}, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3507, 0x4, 0x2, 0x20, 0x7, 0x8, 0x1ff}}, 0xe8) r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002800000000000028252f4500000000000000000000000000000000000000000000000000000000000100000101e70001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000100)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000200)) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x52400, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="676009a98e137ab7ba0e2a09ad6d1d8a0d5636c32280aedb76548b4c515f587a95f090f06fc53a279e44f7f2b3605911fc588b31c085595034eb97e7be761374177bcf0c9394cebd1246aa82b638f2638e734eaf9bab7d00375cc9c115a04bb25e4eeb7924348fbcd56fd599efc3e20ec389a70815744042f8e79d798df53e6c2fbad18812bf3e1b3809e8a545d5661b0e8941a5abb55fb5f88ff8518d8f69678768f73815a33411f3368b09a111c6", 0xaf, 0x1}], 0x0, &(0x7f0000000300)={[{@nonumtail}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb94}}, {@fat=@nfs_nostale_ro}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}], [{@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}, {@fsname}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, '&)\\#\xddb'}}, {@appraise_type}]}) [ 1722.062084] loop3: detected capacity change from 0 to 122880 [ 1722.075212] isofs_fill_super: root inode is not a directory. Corrupted media? 02:51:17 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1722.133367] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 02:51:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000300000000000000aaff"], 0x0) [ 1722.165777] FAULT_INJECTION: forcing a failure. [ 1722.165777] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.167117] CPU: 1 PID: 9642 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1722.167905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1722.168871] Call Trace: [ 1722.169177] dump_stack+0x107/0x167 [ 1722.169597] should_fail.cold+0x5/0xa [ 1722.170034] ? create_object.isra.0+0x3a/0xa20 [ 1722.170549] should_failslab+0x5/0x20 [ 1722.170991] kmem_cache_alloc+0x5b/0x310 [ 1722.171458] ? mark_held_locks+0x9e/0xe0 [ 1722.171937] create_object.isra.0+0x3a/0xa20 [ 1722.172445] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1722.173025] kmem_cache_alloc_bulk+0x168/0x320 [ 1722.173555] io_submit_sqes+0x6fe6/0x8610 [ 1722.174033] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1722.174601] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1722.175167] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1722.175725] ? find_held_lock+0x2c/0x110 [ 1722.176193] ? io_submit_sqes+0x8610/0x8610 [ 1722.176686] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1722.177237] ? wait_for_completion_io+0x270/0x270 [ 1722.177787] ? rcu_read_lock_any_held+0x75/0xa0 [ 1722.178313] ? vfs_write+0x354/0xb10 [ 1722.178737] ? fput_many+0x2f/0x1a0 [ 1722.179147] ? ksys_write+0x1a9/0x260 [ 1722.179592] ? __ia32_sys_read+0xb0/0xb0 [ 1722.180057] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1722.180657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1722.181244] do_syscall_64+0x33/0x40 [ 1722.181666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.182247] RIP: 0033:0x7f7726e3cb19 [ 1722.182671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.184770] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1722.185645] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1722.186461] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1722.187273] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.188092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.188905] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:51:17 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1722.204996] loop3: detected capacity change from 0 to 122880 [ 1722.208343] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1722.219012] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 02:51:17 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 1722.292251] FAULT_INJECTION: forcing a failure. [ 1722.292251] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.293731] CPU: 1 PID: 9656 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1722.294509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1722.295459] Call Trace: [ 1722.295781] dump_stack+0x107/0x167 [ 1722.296197] should_fail.cold+0x5/0xa [ 1722.296633] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1722.297228] should_failslab+0x5/0x20 [ 1722.297670] __kmalloc_node+0x76/0x420 [ 1722.298119] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1722.298703] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1722.299277] ? trace_hardirqs_on+0x5b/0x180 [ 1722.299780] kmem_cache_alloc_bulk+0x182/0x320 [ 1722.300310] io_submit_sqes+0x6fe6/0x8610 [ 1722.300795] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1722.301374] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1722.301957] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1722.302519] ? find_held_lock+0x2c/0x110 [ 1722.302992] ? io_submit_sqes+0x8610/0x8610 [ 1722.303493] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1722.304054] ? wait_for_completion_io+0x270/0x270 [ 1722.304609] ? rcu_read_lock_any_held+0x75/0xa0 [ 1722.305152] ? vfs_write+0x354/0xb10 [ 1722.305579] ? fput_many+0x2f/0x1a0 [ 1722.306001] ? ksys_write+0x1a9/0x260 [ 1722.306441] ? __ia32_sys_read+0xb0/0xb0 [ 1722.306916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1722.307525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1722.308124] do_syscall_64+0x33/0x40 [ 1722.308552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1722.309143] RIP: 0033:0x7f7726e3cb19 [ 1722.309569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.311696] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1722.312572] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1722.313392] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1722.314208] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.315037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1722.315867] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:51:33 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:33 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r2]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x8b, 0x8, 0x9, 0x9, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7fffffff}, 0x1090a, 0x5, 0x8, 0x6, 0x8, 0x5c, 0x8, 0x0, 0x401, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = socket$inet(0x2, 0x1, 0x0) dup3(r5, r4, 0x0) io_uring_enter(r1, 0x3491, 0x0, 0x0, 0x0, 0x0) 02:51:33 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:33 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:33 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000500000000000000aaff"], 0x0) 02:51:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000003000000000000aaff02"], 0x0) 02:51:33 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 02:51:33 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1738.354309] FAULT_INJECTION: forcing a failure. [ 1738.354309] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.357208] CPU: 1 PID: 9679 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1738.358663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1738.360440] Call Trace: [ 1738.361001] dump_stack+0x107/0x167 [ 1738.361779] should_fail.cold+0x5/0xa [ 1738.362591] ? io_setup_async_rw+0x180/0x580 [ 1738.363530] should_failslab+0x5/0x20 [ 1738.364347] __kmalloc+0x72/0x390 [ 1738.365087] io_setup_async_rw+0x180/0x580 [ 1738.365985] ? iov_iter_restore+0x195/0x3a0 [ 1738.366917] io_read+0x775/0x11e0 [ 1738.367666] ? kiocb_done+0xc90/0xc90 [ 1738.368482] ? mark_lock+0xf5/0x2df0 [ 1738.369282] ? lock_chain_count+0x20/0x20 [ 1738.370175] ? stack_trace_consume_entry+0x160/0x160 [ 1738.371259] ? lock_acquire+0x197/0x470 [ 1738.372115] ? __lock_acquire+0xbb1/0x5b00 [ 1738.373015] io_issue_sqe+0x2e8a/0x77b0 [ 1738.373870] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1738.374980] ? SOFTIRQ_verbose+0x10/0x10 [ 1738.375852] ? lock_chain_count+0x20/0x20 [ 1738.376737] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1738.377847] ? io_connect+0x610/0x610 [ 1738.378658] ? lock_acquire+0x197/0x470 [ 1738.379505] ? find_held_lock+0x2c/0x110 [ 1738.380385] ? __fget_files+0x2cf/0x520 [ 1738.381230] ? lock_downgrade+0x6d0/0x6d0 [ 1738.382110] __io_queue_sqe+0x90/0x9d0 [ 1738.382943] ? io_issue_sqe+0x77b0/0x77b0 [ 1738.383827] ? __fget_files+0x2f8/0x520 [ 1738.384675] ? __io_file_supports_nowait+0x22a/0x510 [ 1738.385754] ? io_prep_rw+0x7f5/0x1050 [ 1738.386585] io_submit_sqes+0x44aa/0x8610 [ 1738.387493] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1738.388554] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1738.389580] ? find_held_lock+0x2c/0x110 [ 1738.390447] ? io_submit_sqes+0x8610/0x8610 [ 1738.391364] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1738.392378] ? wait_for_completion_io+0x270/0x270 [ 1738.393408] ? rcu_read_lock_any_held+0x75/0xa0 [ 1738.394399] ? vfs_write+0x354/0xb10 [ 1738.395193] ? fput_many+0x2f/0x1a0 [ 1738.395979] ? ksys_write+0x1a9/0x260 [ 1738.396794] ? __ia32_sys_read+0xb0/0xb0 [ 1738.397659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1738.398775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1738.399884] do_syscall_64+0x33/0x40 [ 1738.400672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1738.401755] RIP: 0033:0x7f7726e3cb19 [ 1738.402550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.406471] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1738.408105] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1738.409629] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1738.411150] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.412674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.414194] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:51:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000003c00000000000000aaff"], 0x0) 02:51:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000005000000000000aaff02"], 0x0) 02:51:34 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000003000000000000aaff"], 0x0) 02:51:34 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) creat(0x0, 0x0) r1 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x3f, 0x2, 0x10000, 0x3, 0x3, 0x9, 0x25f, 0x40, 0x1ac, 0x33, 0x40, 0x38, 0x1, 0xfff9, 0x2, 0xab4b}, [{0x70000003, 0x1, 0x3, 0xb20a, 0x5d9, 0x1f, 0xfff, 0xfff}, {0x3, 0x0, 0x2, 0x9, 0xfffffffffffffffc, 0x100, 0x4, 0x7f}], "e275a8dfb5c7d7001da7067c6d792d7bbe88de364da4751433d155192e844d1b0bba064dcf640a14f38a867456464cade5988889500e2a936f65328d25afade643d4197d81b178bf9df9f2f4e8ff0f3b651247f3233b117734a7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x80a) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) pwrite64(r1, &(0x7f0000000140)="b2", 0x20000141, 0x8001) 02:51:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000003c000000000000aaff02"], 0x0) 02:51:48 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) creat(0x0, 0x0) r1 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x20, 0x3f, 0x2, 0x10000, 0x3, 0x3, 0x9, 0x25f, 0x40, 0x1ac, 0x33, 0x40, 0x38, 0x1, 0xfff9, 0x2, 0xab4b}, [{0x70000003, 0x1, 0x3, 0xb20a, 0x5d9, 0x1f, 0xfff, 0xfff}, {0x3, 0x0, 0x2, 0x9, 0xfffffffffffffffc, 0x100, 0x4, 0x7f}], "e275a8dfb5c7d7001da7067c6d792d7bbe88de364da4751433d155192e844d1b0bba064dcf640a14f38a867456464cade5988889500e2a936f65328d25afade643d4197d81b178bf9df9f2f4e8ff0f3b651247f3233b117734a7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x80a) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) pwrite64(r1, &(0x7f0000000140)="b2", 0x20000141, 0x8001) 02:51:48 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000005000000000000aaff"], 0x0) 02:51:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000040000000000000aaff02"], 0x0) 02:51:48 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:48 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:51:48 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 02:51:48 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:48 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1752.823347] FAULT_INJECTION: forcing a failure. [ 1752.823347] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.825062] CPU: 1 PID: 9717 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1752.826003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.827174] Call Trace: [ 1752.827555] dump_stack+0x107/0x167 [ 1752.828096] should_fail.cold+0x5/0xa [ 1752.828650] ? create_object.isra.0+0x3a/0xa20 [ 1752.829284] should_failslab+0x5/0x20 [ 1752.829815] kmem_cache_alloc+0x5b/0x310 [ 1752.830385] create_object.isra.0+0x3a/0xa20 [ 1752.830986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.831682] __kmalloc+0x16e/0x390 [ 1752.832191] io_setup_async_rw+0x180/0x580 [ 1752.832764] ? iov_iter_restore+0x195/0x3a0 [ 1752.833349] io_read+0x775/0x11e0 [ 1752.833837] ? kiocb_done+0xc90/0xc90 [ 1752.834348] ? mark_lock+0xf5/0x2df0 [ 1752.834859] ? lock_chain_count+0x20/0x20 [ 1752.835433] ? stack_trace_consume_entry+0x160/0x160 [ 1752.836143] ? lock_acquire+0x197/0x470 [ 1752.836695] ? __lock_acquire+0xbb1/0x5b00 [ 1752.837277] io_issue_sqe+0x2e8a/0x77b0 [ 1752.837809] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1752.838523] ? SOFTIRQ_verbose+0x10/0x10 [ 1752.839062] ? lock_chain_count+0x20/0x20 [ 1752.839632] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1752.840347] ? io_connect+0x610/0x610 [ 1752.840872] ? lock_acquire+0x197/0x470 [ 1752.841411] ? find_held_lock+0x2c/0x110 [ 1752.841979] ? __fget_files+0x2cf/0x520 [ 1752.842517] ? lock_downgrade+0x6d0/0x6d0 [ 1752.843097] __io_queue_sqe+0x90/0x9d0 [ 1752.843634] ? io_issue_sqe+0x77b0/0x77b0 [ 1752.844205] ? __fget_files+0x2f8/0x520 [ 1752.844751] ? __io_file_supports_nowait+0x22a/0x510 [ 1752.845447] ? io_prep_rw+0x7f5/0x1050 [ 1752.845972] io_submit_sqes+0x44aa/0x8610 [ 1752.846560] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1752.847234] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1752.847889] ? find_held_lock+0x2c/0x110 [ 1752.848444] ? io_submit_sqes+0x8610/0x8610 [ 1752.849032] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.849677] ? wait_for_completion_io+0x270/0x270 [ 1752.850337] ? rcu_read_lock_any_held+0x75/0xa0 [ 1752.850956] ? vfs_write+0x354/0xb10 [ 1752.851455] ? fput_many+0x2f/0x1a0 [ 1752.851949] ? ksys_write+0x1a9/0x260 [ 1752.852471] ? __ia32_sys_read+0xb0/0xb0 [ 1752.853020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.853716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.854418] do_syscall_64+0x33/0x40 [ 1752.854917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.855608] RIP: 0033:0x7f7726e3cb19 [ 1752.856112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.858574] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1752.859591] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1752.860551] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1752.861490] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.862447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.863406] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:51:48 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000003c000000000000aaff"], 0x0) 02:51:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000060000000000000aaff02"], 0x0) 02:51:48 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:51:48 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000100000000aaff"], 0x0) 02:51:48 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:51:48 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:51:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000fffffff5000000000000aaff02"], 0x0) 02:51:48 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1753.203815] FAULT_INJECTION: forcing a failure. [ 1753.203815] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.206627] CPU: 0 PID: 9734 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1753.208093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.209877] Call Trace: [ 1753.210449] dump_stack+0x107/0x167 [ 1753.211234] should_fail.cold+0x5/0xa [ 1753.212068] should_failslab+0x5/0x20 [ 1753.212890] kmem_cache_alloc_bulk+0x4b/0x320 [ 1753.213857] io_submit_sqes+0x6fe6/0x8610 [ 1753.214756] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1753.215826] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.216897] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.217928] ? find_held_lock+0x2c/0x110 [ 1753.218804] ? io_submit_sqes+0x8610/0x8610 [ 1753.219738] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1753.220779] ? wait_for_completion_io+0x270/0x270 [ 1753.221779] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.222774] ? vfs_write+0x354/0xb10 [ 1753.223571] ? fput_many+0x2f/0x1a0 [ 1753.224365] ? ksys_write+0x1a9/0x260 [ 1753.225161] ? __ia32_sys_read+0xb0/0xb0 [ 1753.226032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.227140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.228260] do_syscall_64+0x33/0x40 [ 1753.229049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.230152] RIP: 0033:0x7f8398de7b19 [ 1753.230921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.234782] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1753.236416] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1753.237942] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1753.239448] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.240942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.242453] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:52:01 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:01 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:01 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 02:52:01 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000300000000aaff"], 0x0) 02:52:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000f5ffffff000000000000aaff02"], 0x0) 02:52:01 executing program 3: io_uring_setup(0x10d1, &(0x7f00000002c0)={0x0, 0x2330, 0x2, 0x0, 0xffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f00000004c0)=""/174, 0xae}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000580)=""/14, 0xe}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000680)=""/149, 0x95}], 0xa) 02:52:01 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:01 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 1766.403586] FAULT_INJECTION: forcing a failure. [ 1766.403586] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.405175] CPU: 1 PID: 9753 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1766.406095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.407172] Call Trace: [ 1766.407531] dump_stack+0x107/0x167 [ 1766.408023] should_fail.cold+0x5/0xa [ 1766.408528] ? create_object.isra.0+0x3a/0xa20 [ 1766.409139] should_failslab+0x5/0x20 [ 1766.409649] kmem_cache_alloc+0x5b/0x310 [ 1766.410196] create_object.isra.0+0x3a/0xa20 [ 1766.410789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.411453] kmem_cache_alloc_bulk+0x168/0x320 [ 1766.412093] io_submit_sqes+0x6fe6/0x8610 [ 1766.412663] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1766.413336] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.413993] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.414648] ? find_held_lock+0x2c/0x110 [ 1766.415190] ? io_submit_sqes+0x8610/0x8610 [ 1766.415771] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1766.416426] ? wait_for_completion_io+0x270/0x270 [ 1766.417076] ? rcu_read_lock_any_held+0x75/0xa0 [ 1766.417285] FAULT_INJECTION: forcing a failure. [ 1766.417285] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.417694] ? vfs_write+0x354/0xb10 [ 1766.417708] ? fput_many+0x2f/0x1a0 [ 1766.417720] ? ksys_write+0x1a9/0x260 [ 1766.417742] ? __ia32_sys_read+0xb0/0xb0 [ 1766.422343] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.423037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.423723] do_syscall_64+0x33/0x40 [ 1766.424227] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.424908] RIP: 0033:0x7f8398de7b19 [ 1766.425398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.427844] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1766.428890] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1766.429863] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1766.430839] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.431803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.432787] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1766.433783] CPU: 0 PID: 9750 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1766.435525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.437572] Call Trace: [ 1766.438204] dump_stack+0x107/0x167 [ 1766.439066] should_fail.cold+0x5/0xa [ 1766.439970] ? __io_queue_sqe+0x666/0x9d0 [ 1766.440961] should_failslab+0x5/0x20 [ 1766.441859] kmem_cache_alloc_trace+0x55/0x320 [ 1766.442936] ? lock_downgrade+0x6d0/0x6d0 [ 1766.443918] __io_queue_sqe+0x666/0x9d0 [ 1766.444872] ? io_issue_sqe+0x77b0/0x77b0 [ 1766.445854] ? __fget_files+0x2f8/0x520 [ 1766.446788] ? __io_file_supports_nowait+0x22a/0x510 [ 1766.447982] ? io_prep_rw+0x7f5/0x1050 [ 1766.448915] io_submit_sqes+0x44aa/0x8610 [ 1766.449935] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.451110] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.452258] ? find_held_lock+0x2c/0x110 [ 1766.453220] ? io_submit_sqes+0x8610/0x8610 [ 1766.454245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1766.455383] ? wait_for_completion_io+0x270/0x270 [ 1766.456527] ? rcu_read_lock_any_held+0x75/0xa0 [ 1766.457617] ? vfs_write+0x354/0xb10 [ 1766.458494] ? fput_many+0x2f/0x1a0 [ 1766.459350] ? ksys_write+0x1a9/0x260 [ 1766.460255] ? __ia32_sys_read+0xb0/0xb0 [ 1766.461216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.462448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.463666] do_syscall_64+0x33/0x40 [ 1766.464554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.465760] RIP: 0033:0x7f7726e3cb19 [ 1766.466637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.470979] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1766.472852] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1766.474526] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1766.476209] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.477884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1766.479561] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:52:02 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000500000000aaff"], 0x0) 02:52:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000010000aaff02"], 0x0) 02:52:02 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:02 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000003c00000000aaff"], 0x0) 02:52:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000030000aaff02"], 0x0) 02:52:02 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:02 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:02 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000001aaff"], 0x0) 02:52:02 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 1766.869339] FAULT_INJECTION: forcing a failure. [ 1766.869339] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.870691] CPU: 1 PID: 9777 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1766.871482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.872443] Call Trace: [ 1766.872756] dump_stack+0x107/0x167 [ 1766.873179] should_fail.cold+0x5/0xa [ 1766.873619] ? create_object.isra.0+0x3a/0xa20 [ 1766.874148] should_failslab+0x5/0x20 [ 1766.874587] kmem_cache_alloc+0x5b/0x310 [ 1766.875058] create_object.isra.0+0x3a/0xa20 [ 1766.875559] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.876157] kmem_cache_alloc_bulk+0x168/0x320 [ 1766.876692] io_submit_sqes+0x6fe6/0x8610 [ 1766.877179] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1766.877760] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.878333] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.878894] ? find_held_lock+0x2c/0x110 [ 1766.879367] ? io_submit_sqes+0x8610/0x8610 [ 1766.879872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1766.880441] ? wait_for_completion_io+0x270/0x270 [ 1766.880998] ? rcu_read_lock_any_held+0x75/0xa0 [ 1766.881534] ? vfs_write+0x354/0xb10 [ 1766.881964] ? fput_many+0x2f/0x1a0 [ 1766.882385] ? ksys_write+0x1a9/0x260 [ 1766.882825] ? __ia32_sys_read+0xb0/0xb0 [ 1766.883297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.883908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.884510] do_syscall_64+0x33/0x40 [ 1766.884941] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.885530] RIP: 0033:0x7f8398de7b19 [ 1766.885960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.888057] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1766.888945] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1766.889760] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1766.890574] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.891388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.892223] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:52:15 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 02:52:15 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000050000aaff02"], 0x0) 02:52:15 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:15 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 02:52:15 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000003aaff"], 0x0) 02:52:15 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:15 executing program 3: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4081) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'}) statx(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x10, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x40040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000240001000000006a082e3e00feda00000000881aa9000009"], 0x1c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) [ 1780.298788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1780.302266] FAULT_INJECTION: forcing a failure. [ 1780.302266] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.305045] CPU: 0 PID: 9797 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1780.306669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1780.308608] Call Trace: [ 1780.309235] dump_stack+0x107/0x167 [ 1780.310080] should_fail.cold+0x5/0xa [ 1780.310967] ? create_object.isra.0+0x3a/0xa20 [ 1780.312018] should_failslab+0x5/0x20 [ 1780.312908] kmem_cache_alloc+0x5b/0x310 [ 1780.313865] ? mark_held_locks+0x9e/0xe0 [ 1780.314813] create_object.isra.0+0x3a/0xa20 [ 1780.315824] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1780.317013] kmem_cache_alloc_bulk+0x168/0x320 [ 1780.318076] io_submit_sqes+0x6fe6/0x8610 [ 1780.319038] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1780.320183] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1780.321342] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1780.322451] ? find_held_lock+0x2c/0x110 [ 1780.323390] ? io_submit_sqes+0x8610/0x8610 [ 1780.324425] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1780.325541] ? wait_for_completion_io+0x270/0x270 [ 1780.326821] ? rcu_read_lock_any_held+0x75/0xa0 [ 1780.327895] ? vfs_write+0x354/0xb10 [ 1780.328761] ? fput_many+0x2f/0x1a0 [ 1780.329609] ? ksys_write+0x1a9/0x260 [ 1780.330471] ? __ia32_sys_read+0xb0/0xb0 [ 1780.331395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1780.332600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1780.333781] do_syscall_64+0x33/0x40 [ 1780.334625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1780.335783] RIP: 0033:0x7f8398de7b19 [ 1780.336640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1780.340808] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1780.342529] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1780.344129] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1780.345752] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1780.347340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.348954] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1780.373818] FAULT_INJECTION: forcing a failure. [ 1780.373818] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.376625] CPU: 1 PID: 9801 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1780.378083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1780.379851] Call Trace: [ 1780.380437] dump_stack+0x107/0x167 [ 1780.381225] should_fail.cold+0x5/0xa [ 1780.382050] ? create_object.isra.0+0x3a/0xa20 [ 1780.383024] should_failslab+0x5/0x20 [ 1780.383846] kmem_cache_alloc+0x5b/0x310 [ 1780.384744] create_object.isra.0+0x3a/0xa20 [ 1780.385680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1780.386778] kmem_cache_alloc+0x159/0x310 [ 1780.387673] xas_alloc+0x336/0x440 [ 1780.388455] xas_create+0x34a/0x10d0 [ 1780.389274] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1780.390397] xas_store+0x8c/0x1c40 [ 1780.391176] __xa_store+0x164/0x2d0 [ 1780.391965] ? xa_delete_node+0x280/0x280 [ 1780.392881] ? trace_hardirqs_on+0x5b/0x180 [ 1780.393814] xa_store+0x31/0x50 [ 1780.394524] __io_uring_add_tctx_node+0x1cf/0x520 [ 1780.395553] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1780.396694] __do_sys_io_uring_enter+0x146f/0x1890 [ 1780.397749] ? find_held_lock+0x2c/0x110 [ 1780.398627] ? io_submit_sqes+0x8610/0x8610 [ 1780.399553] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1780.400592] ? wait_for_completion_io+0x270/0x270 [ 1780.401627] ? rcu_read_lock_any_held+0x75/0xa0 [ 1780.402619] ? vfs_write+0x354/0xb10 [ 1780.403420] ? fput_many+0x2f/0x1a0 [ 1780.404204] ? ksys_write+0x1a9/0x260 [ 1780.405034] ? __ia32_sys_read+0xb0/0xb0 [ 1780.405915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1780.407045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1780.408154] do_syscall_64+0x33/0x40 [ 1780.408961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1780.410051] RIP: 0033:0x7f7726e3cb19 [ 1780.410852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1780.414757] RSP: 002b:00007f7724391188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1780.416404] RAX: ffffffffffffffda RBX: 00007f7726f50020 RCX: 00007f7726e3cb19 [ 1780.417916] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1780.419436] RBP: 00007f77243911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1780.420960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1780.422474] R13: 00007ffc7920e16f R14: 00007f7724391300 R15: 0000000000022000 02:52:15 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:15 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000005aaff"], 0x0) 02:52:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000003c0000aaff02"], 0x0) 02:52:16 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000400000aaff02"], 0x0) 02:52:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000000000003caaff"], 0x0) 02:52:16 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) [ 1780.759653] FAULT_INJECTION: forcing a failure. [ 1780.759653] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.762604] CPU: 0 PID: 9816 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1780.764216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1780.766174] Call Trace: [ 1780.766799] dump_stack+0x107/0x167 [ 1780.767653] should_fail.cold+0x5/0xa [ 1780.768564] ? create_object.isra.0+0x3a/0xa20 [ 1780.769647] should_failslab+0x5/0x20 [ 1780.770526] kmem_cache_alloc+0x5b/0x310 [ 1780.771592] create_object.isra.0+0x3a/0xa20 [ 1780.772753] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1780.774083] __kmalloc+0x16e/0x390 [ 1780.774927] io_setup_async_rw+0x180/0x580 [ 1780.775918] ? iov_iter_restore+0x195/0x3a0 [ 1780.776943] io_read+0x775/0x11e0 [ 1780.777764] ? __is_insn_slot_addr+0x14c/0x290 [ 1780.778840] ? kiocb_done+0xc90/0xc90 [ 1780.779732] ? mark_lock+0xf5/0x2df0 [ 1780.780620] ? register_lock_class+0xbb/0x17b0 [ 1780.781712] ? arch_stack_walk+0x99/0xf0 [ 1780.782670] ? lock_chain_count+0x20/0x20 [ 1780.783653] ? is_dynamic_key+0x1e0/0x1e0 [ 1780.784655] ? __lock_acquire+0x1657/0x5b00 [ 1780.785678] ? __lock_acquire+0xbb1/0x5b00 [ 1780.786691] io_issue_sqe+0x2e8a/0x77b0 [ 1780.787639] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1780.788868] ? SOFTIRQ_verbose+0x10/0x10 [ 1780.789812] ? lock_chain_count+0x20/0x20 [ 1780.790784] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1780.792012] ? io_connect+0x610/0x610 [ 1780.792923] ? lock_acquire+0x197/0x470 [ 1780.793855] ? find_held_lock+0x2c/0x110 [ 1780.794821] ? __fget_files+0x2cf/0x520 [ 1780.795749] ? lock_downgrade+0x6d0/0x6d0 [ 1780.796735] __io_queue_sqe+0x90/0x9d0 [ 1780.797656] ? io_issue_sqe+0x77b0/0x77b0 [ 1780.798625] ? __fget_files+0x2f8/0x520 [ 1780.799540] ? __io_file_supports_nowait+0x22a/0x510 [ 1780.800764] ? io_prep_rw+0x7f5/0x1050 [ 1780.801668] io_submit_sqes+0x44aa/0x8610 [ 1780.802668] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1780.803840] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1780.804976] ? find_held_lock+0x2c/0x110 [ 1780.805931] ? io_submit_sqes+0x8610/0x8610 [ 1780.806953] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1780.808091] ? wait_for_completion_io+0x270/0x270 [ 1780.809260] ? rcu_read_lock_any_held+0x75/0xa0 [ 1780.810356] ? vfs_write+0x354/0xb10 [ 1780.811242] ? fput_many+0x2f/0x1a0 [ 1780.812101] ? ksys_write+0x1a9/0x260 [ 1780.813026] ? __ia32_sys_read+0xb0/0xb0 [ 1780.813994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1780.815248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1780.816492] do_syscall_64+0x33/0x40 [ 1780.817377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1780.818591] RIP: 0033:0x7f7726e3cb19 [ 1780.819488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1780.823881] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1780.825716] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1780.827432] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1780.829160] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1780.830870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1780.832603] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:52:31 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000600000aaff02"], 0x0) 02:52:31 executing program 3: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:31 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 02:52:31 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:31 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 02:52:31 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000ffffffffaaff"], 0x0) [ 1795.993470] FAULT_INJECTION: forcing a failure. [ 1795.993470] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.996161] CPU: 0 PID: 9830 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1795.998013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1796.000128] Call Trace: [ 1796.000841] dump_stack+0x107/0x167 [ 1796.001631] should_fail.cold+0x5/0xa [ 1796.002459] ? create_object.isra.0+0x3a/0xa20 [ 1796.003443] should_failslab+0x5/0x20 [ 1796.004262] kmem_cache_alloc+0x5b/0x310 [ 1796.005134] ? mark_held_locks+0x9e/0xe0 [ 1796.006006] create_object.isra.0+0x3a/0xa20 [ 1796.006944] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1796.008004] kmem_cache_alloc_bulk+0x168/0x320 [ 1796.008996] io_submit_sqes+0x6fe6/0x8610 [ 1796.009893] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1796.010953] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1796.012012] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1796.013048] ? find_held_lock+0x2c/0x110 [ 1796.013920] ? io_submit_sqes+0x8610/0x8610 [ 1796.014850] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1796.015876] ? wait_for_completion_io+0x270/0x270 [ 1796.016913] ? rcu_read_lock_any_held+0x75/0xa0 [ 1796.017889] ? vfs_write+0x354/0xb10 [ 1796.018685] ? fput_many+0x2f/0x1a0 [ 1796.019508] ? ksys_write+0x1a9/0x260 [ 1796.020319] ? __ia32_sys_read+0xb0/0xb0 [ 1796.021180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1796.022256] FAULT_INJECTION: forcing a failure. [ 1796.022256] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.022302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1796.022327] do_syscall_64+0x33/0x40 [ 1796.026599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1796.027695] RIP: 0033:0x7f8398de7b19 [ 1796.028499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1796.032444] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1796.034071] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1796.035602] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1796.037145] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1796.038671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1796.040202] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1796.041774] CPU: 1 PID: 9834 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1796.043252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1796.045017] Call Trace: [ 1796.045592] dump_stack+0x107/0x167 [ 1796.046374] should_fail.cold+0x5/0xa [ 1796.047184] ? io_setup_async_rw+0x180/0x580 [ 1796.048111] should_failslab+0x5/0x20 [ 1796.048936] __kmalloc+0x72/0x390 [ 1796.049680] io_setup_async_rw+0x180/0x580 [ 1796.050567] ? iov_iter_restore+0x195/0x3a0 [ 1796.051488] io_read+0x775/0x11e0 [ 1796.052234] ? __is_insn_slot_addr+0x14c/0x290 [ 1796.053215] ? register_lock_class+0xbb/0x17b0 [ 1796.054188] ? kiocb_done+0xc90/0xc90 [ 1796.054997] ? mark_lock+0xf5/0x2df0 [ 1796.055795] ? lock_chain_count+0x20/0x20 [ 1796.056729] ? __lock_acquire+0xbb1/0x5b00 [ 1796.057637] io_issue_sqe+0x2e8a/0x77b0 [ 1796.058479] ? find_held_lock+0x2c/0x110 [ 1796.059343] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1796.060455] ? SOFTIRQ_verbose+0x10/0x10 [ 1796.061326] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1796.062326] ? lock_downgrade+0x6d0/0x6d0 [ 1796.063209] ? io_connect+0x610/0x610 [ 1796.064026] ? lock_acquire+0x197/0x470 [ 1796.064875] ? find_held_lock+0x2c/0x110 [ 1796.065743] ? __fget_files+0x2cf/0x520 [ 1796.066590] ? lock_downgrade+0x6d0/0x6d0 [ 1796.067471] __io_queue_sqe+0x90/0x9d0 [ 1796.068314] ? io_issue_sqe+0x77b0/0x77b0 [ 1796.069203] ? __fget_files+0x2f8/0x520 [ 1796.070047] ? __io_file_supports_nowait+0x22a/0x510 [ 1796.071118] ? io_prep_rw+0x7f5/0x1050 [ 1796.071957] io_submit_sqes+0x44aa/0x8610 [ 1796.072881] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1796.073937] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1796.074963] ? find_held_lock+0x2c/0x110 [ 1796.075834] ? io_submit_sqes+0x8610/0x8610 [ 1796.076770] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1796.077794] ? wait_for_completion_io+0x270/0x270 [ 1796.078822] ? rcu_read_lock_any_held+0x75/0xa0 [ 1796.079812] ? vfs_write+0x354/0xb10 [ 1796.080615] ? fput_many+0x2f/0x1a0 [ 1796.081397] ? ksys_write+0x1a9/0x260 [ 1796.082207] ? __ia32_sys_read+0xb0/0xb0 [ 1796.083069] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1796.084175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1796.085285] do_syscall_64+0x33/0x40 [ 1796.086073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1796.087171] RIP: 0033:0x7f7726e3cb19 [ 1796.087958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1796.091889] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1796.093510] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1796.095018] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1796.096540] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1796.098067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1796.099594] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:52:31 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000fffffff50000aaff02"], 0x0) 02:52:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000ffffffffffffffffaaff"], 0x0) 02:52:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000ffffffff0000aaff02"], 0x0) 02:52:31 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000003000000000000aaff"], 0x0) 02:52:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000ffffffffffffffff0000aaff02"], 0x0) 02:52:32 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 02:52:32 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:32 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1796.624360] FAULT_INJECTION: forcing a failure. [ 1796.624360] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.626934] CPU: 1 PID: 9853 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1796.628391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1796.630173] Call Trace: [ 1796.630742] dump_stack+0x107/0x167 [ 1796.631524] should_fail.cold+0x5/0xa [ 1796.632346] ? create_object.isra.0+0x3a/0xa20 [ 1796.633326] should_failslab+0x5/0x20 [ 1796.634137] kmem_cache_alloc+0x5b/0x310 [ 1796.635001] create_object.isra.0+0x3a/0xa20 [ 1796.635932] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1796.637017] __kmalloc+0x16e/0x390 [ 1796.637779] io_setup_async_rw+0x180/0x580 [ 1796.638674] ? iov_iter_restore+0x195/0x3a0 [ 1796.639586] io_read+0x775/0x11e0 [ 1796.640340] ? __is_insn_slot_addr+0x14c/0x290 [ 1796.641321] ? kiocb_done+0xc90/0xc90 [ 1796.642123] ? mark_lock+0xf5/0x2df0 [ 1796.642912] ? register_lock_class+0xbb/0x17b0 [ 1796.643876] ? arch_stack_walk+0x99/0xf0 [ 1796.644747] ? lock_chain_count+0x20/0x20 [ 1796.645624] ? is_dynamic_key+0x1e0/0x1e0 [ 1796.646520] ? __lock_acquire+0x1657/0x5b00 [ 1796.647445] ? __lock_acquire+0xbb1/0x5b00 [ 1796.648345] io_issue_sqe+0x2e8a/0x77b0 [ 1796.649211] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1796.650320] ? SOFTIRQ_verbose+0x10/0x10 [ 1796.651175] ? lock_chain_count+0x20/0x20 [ 1796.652059] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1796.653174] ? io_connect+0x610/0x610 [ 1796.653989] ? lock_acquire+0x197/0x470 [ 1796.654833] ? find_held_lock+0x2c/0x110 [ 1796.655707] ? __fget_files+0x2cf/0x520 [ 1796.656562] ? lock_downgrade+0x6d0/0x6d0 [ 1796.657443] __io_queue_sqe+0x90/0x9d0 [ 1796.658274] ? io_issue_sqe+0x77b0/0x77b0 [ 1796.659151] ? __fget_files+0x2f8/0x520 [ 1796.659992] ? __io_file_supports_nowait+0x22a/0x510 [ 1796.661083] ? io_prep_rw+0x7f5/0x1050 [ 1796.661916] io_submit_sqes+0x44aa/0x8610 [ 1796.662830] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1796.663884] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1796.664912] ? find_held_lock+0x2c/0x110 [ 1796.665776] ? io_submit_sqes+0x8610/0x8610 [ 1796.666696] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1796.667718] ? wait_for_completion_io+0x270/0x270 [ 1796.668735] ? rcu_read_lock_any_held+0x75/0xa0 [ 1796.669697] ? vfs_write+0x354/0xb10 [ 1796.670484] ? fput_many+0x2f/0x1a0 [ 1796.671248] ? ksys_write+0x1a9/0x260 [ 1796.672050] ? __ia32_sys_read+0xb0/0xb0 [ 1796.672920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1796.674020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1796.675110] do_syscall_64+0x33/0x40 [ 1796.675893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1796.676990] RIP: 0033:0x7f7726e3cb19 [ 1796.677772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1796.681655] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1796.683257] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1796.684771] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1796.686269] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1796.687775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1796.689293] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:52:49 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 02:52:49 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:49 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:49 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:49 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 02:52:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x6) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r1, r1], 0x8, 0x0, 0x1, {0x0, r6}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012103, 0x1}, 0x80000001) io_uring_enter(r2, 0x58a7, 0xf6f4, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) creat(&(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0\x00') 02:52:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000005000000000000aaff"], 0x0) 02:52:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000030000000000000000aaff02"], 0x0) [ 1813.540774] FAULT_INJECTION: forcing a failure. [ 1813.540774] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.542478] CPU: 1 PID: 9874 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1813.543453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1813.544650] Call Trace: [ 1813.545032] dump_stack+0x107/0x167 [ 1813.545554] should_fail.cold+0x5/0xa [ 1813.546102] ? create_object.isra.0+0x3a/0xa20 [ 1813.546764] should_failslab+0x5/0x20 [ 1813.547307] kmem_cache_alloc+0x5b/0x310 [ 1813.547887] ? mark_held_locks+0x9e/0xe0 [ 1813.548478] create_object.isra.0+0x3a/0xa20 [ 1813.549110] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1813.549840] kmem_cache_alloc_bulk+0x168/0x320 [ 1813.550495] io_submit_sqes+0x6fe6/0x8610 [ 1813.551090] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1813.551795] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1813.552498] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1813.553194] ? find_held_lock+0x2c/0x110 [ 1813.553781] ? io_submit_sqes+0x8610/0x8610 [ 1813.554406] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1813.555116] ? wait_for_completion_io+0x270/0x270 [ 1813.555807] ? rcu_read_lock_any_held+0x75/0xa0 [ 1813.556469] ? vfs_write+0x354/0xb10 [ 1813.557011] ? fput_many+0x2f/0x1a0 [ 1813.557540] ? ksys_write+0x1a9/0x260 [ 1813.558090] ? __ia32_sys_read+0xb0/0xb0 [ 1813.558674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1813.559416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1813.560153] do_syscall_64+0x33/0x40 [ 1813.560691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1813.561417] RIP: 0033:0x7f8398de7b19 [ 1813.561943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1813.564565] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1813.565696] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1813.566701] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1813.567700] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1813.568734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1813.569746] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1813.592681] FAULT_INJECTION: forcing a failure. [ 1813.592681] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.595459] CPU: 0 PID: 9868 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1813.596953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1813.598791] Call Trace: [ 1813.599403] dump_stack+0x107/0x167 [ 1813.600260] should_fail.cold+0x5/0xa [ 1813.601108] ? __io_queue_sqe+0x666/0x9d0 [ 1813.602030] should_failslab+0x5/0x20 [ 1813.602898] kmem_cache_alloc_trace+0x55/0x320 [ 1813.604020] ? lock_downgrade+0x6d0/0x6d0 [ 1813.604909] __io_queue_sqe+0x666/0x9d0 [ 1813.605757] ? io_issue_sqe+0x77b0/0x77b0 [ 1813.606652] ? __fget_files+0x2f8/0x520 [ 1813.607480] ? __io_file_supports_nowait+0x22a/0x510 [ 1813.608575] ? io_prep_rw+0x7f5/0x1050 [ 1813.609428] io_submit_sqes+0x44aa/0x8610 [ 1813.610339] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1813.611417] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1813.612435] ? find_held_lock+0x2c/0x110 [ 1813.613338] ? io_submit_sqes+0x8610/0x8610 [ 1813.614276] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1813.615319] ? wait_for_completion_io+0x270/0x270 [ 1813.616361] ? rcu_read_lock_any_held+0x75/0xa0 [ 1813.617376] ? vfs_write+0x354/0xb10 [ 1813.618178] ? fput_many+0x2f/0x1a0 [ 1813.618962] ? ksys_write+0x1a9/0x260 [ 1813.619788] ? __ia32_sys_read+0xb0/0xb0 [ 1813.620684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1813.621823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1813.622938] do_syscall_64+0x33/0x40 [ 1813.623735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1813.624860] RIP: 0033:0x7f7726e3cb19 [ 1813.625661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1813.629664] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1813.631304] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1813.632846] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1813.634395] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1813.635876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1813.637380] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:52:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000003c000000000000aaff"], 0x0) 02:52:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000050000000000000000aaff02"], 0x0) 02:52:49 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:49 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f0000000040)=@nl, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x3, &(0x7f0000001340)=""/250, 0xfa}, 0x6}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000001440)=""/217, 0xd9}], 0x2, &(0x7f0000001580)=""/73, 0x49}, 0x6}, {{&(0x7f0000001600)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000001740)=""/79, 0x4f}, {&(0x7f00000017c0)=""/176, 0xb0}, {&(0x7f0000001880)}], 0x4, &(0x7f0000001900)=""/159, 0x9f}, 0x4}, {{&(0x7f00000019c0)=@isdn, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001a40)=""/248, 0xf8}, {&(0x7f0000001b40)=""/204, 0xcc}, {&(0x7f0000001c40)=""/144, 0x90}, {&(0x7f0000001d00)=""/133, 0x85}, {&(0x7f0000001dc0)=""/51, 0x33}, {&(0x7f0000001e00)=""/89, 0x59}, {&(0x7f0000001e80)=""/142, 0x8e}], 0x7, &(0x7f0000001fc0)=""/52, 0x34}, 0x55f}, {{&(0x7f0000002000)=@hci, 0x80, &(0x7f0000002400)=[{&(0x7f0000002080)=""/104, 0x68}, {&(0x7f0000002100)=""/22, 0x16}, {&(0x7f0000002140)=""/29, 0x1d}, {&(0x7f0000002180)=""/151, 0x97}, {&(0x7f0000002240)=""/28, 0x1c}, {&(0x7f0000002280)=""/198, 0xc6}, {&(0x7f0000002380)=""/128, 0x80}], 0x7, &(0x7f0000002480)=""/164, 0xa4}, 0x8}], 0x5, 0x40000002, &(0x7f00000026c0)={r0, r1+60000000}) [ 1813.768682] loop3: detected capacity change from 0 to 135266304 02:52:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000030000000000aaff"], 0x0) 02:52:49 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 02:52:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000003c0000000000000000aaff02"], 0x0) 02:52:49 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:49 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 02:52:49 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1813.948886] ISOFS: Logical zone size(0) < hardware blocksize(1024) 02:52:49 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1813.980732] FAULT_INJECTION: forcing a failure. [ 1813.980732] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.983505] CPU: 0 PID: 9893 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1813.984998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1813.986792] Call Trace: [ 1813.987373] dump_stack+0x107/0x167 [ 1813.988169] should_fail.cold+0x5/0xa [ 1813.989012] ? create_object.isra.0+0x3a/0xa20 [ 1813.990011] should_failslab+0x5/0x20 [ 1813.990838] kmem_cache_alloc+0x5b/0x310 [ 1813.991722] ? mark_held_locks+0x9e/0xe0 [ 1813.992615] create_object.isra.0+0x3a/0xa20 [ 1813.993570] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1813.994680] kmem_cache_alloc_bulk+0x168/0x320 [ 1813.995645] io_submit_sqes+0x6fe6/0x8610 [ 1813.996560] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1813.997703] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1813.998784] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1813.999916] ? find_held_lock+0x2c/0x110 [ 1814.000815] ? io_submit_sqes+0x8610/0x8610 [ 1814.001757] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1814.002808] ? wait_for_completion_io+0x270/0x270 [ 1814.003857] ? rcu_read_lock_any_held+0x75/0xa0 [ 1814.004872] ? vfs_write+0x354/0xb10 [ 1814.005681] ? fput_many+0x2f/0x1a0 [ 1814.006471] ? ksys_write+0x1a9/0x260 [ 1814.007296] ? __ia32_sys_read+0xb0/0xb0 [ 1814.008177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1814.009318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1814.010436] do_syscall_64+0x33/0x40 [ 1814.011240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1814.012350] RIP: 0033:0x7f8398de7b19 [ 1814.012658] FAULT_INJECTION: forcing a failure. [ 1814.012658] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.013164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.013176] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1814.020087] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1814.021633] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1814.023171] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1814.024720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1814.026260] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1814.027839] CPU: 1 PID: 9906 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1814.028642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1814.029591] Call Trace: [ 1814.029905] dump_stack+0x107/0x167 [ 1814.030324] should_fail.cold+0x5/0xa [ 1814.030765] ? create_object.isra.0+0x3a/0xa20 [ 1814.031291] should_failslab+0x5/0x20 [ 1814.031732] kmem_cache_alloc+0x5b/0x310 [ 1814.032201] create_object.isra.0+0x3a/0xa20 [ 1814.032712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1814.033298] kmem_cache_alloc_trace+0x151/0x320 [ 1814.033841] __io_queue_sqe+0x666/0x9d0 [ 1814.034299] ? io_issue_sqe+0x77b0/0x77b0 [ 1814.034774] ? __fget_files+0x2f8/0x520 [ 1814.035228] ? __io_file_supports_nowait+0x22a/0x510 [ 1814.035810] ? io_prep_rw+0x7f5/0x1050 [ 1814.036259] io_submit_sqes+0x44aa/0x8610 [ 1814.036763] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1814.037335] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1814.037888] ? find_held_lock+0x2c/0x110 [ 1814.038358] ? io_submit_sqes+0x8610/0x8610 [ 1814.038852] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1814.039404] ? wait_for_completion_io+0x270/0x270 [ 1814.039958] ? rcu_read_lock_any_held+0x75/0xa0 [ 1814.040492] ? vfs_write+0x354/0xb10 [ 1814.040928] ? fput_many+0x2f/0x1a0 [ 1814.041343] ? ksys_write+0x1a9/0x260 [ 1814.041780] ? __ia32_sys_read+0xb0/0xb0 [ 1814.042249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1814.042848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1814.043438] do_syscall_64+0x33/0x40 [ 1814.043864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1814.044445] RIP: 0033:0x7f7726e3cb19 [ 1814.044876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.046963] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1814.047829] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1814.048645] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1814.049452] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1814.050263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1814.051073] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:52:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000050000000000aaff"], 0x0) 02:52:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000600000000000000000aaff02"], 0x0) [ 1814.133500] loop3: detected capacity change from 0 to 135266304 02:52:49 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:49 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1814.177240] ISOFS: Logical zone size(0) < hardware blocksize(1024) 02:52:49 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:49 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:49 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:52:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000003c0000000000aaff"], 0x0) 02:53:03 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:03 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0xd3, 0x8, 0xb4, &(0x7f0000000040)="4cb9943fbcac89c132934b25bbba0adb9ec94ebe1a86b66b8da0afca17d3f1daa84c809ee33c6171272b6320cc18da8b018e5324123f670440a7fe1e54981458f59649167cf439d5d54732e37d484e855d7f473a98bbc5842762fdbff8d63dd81d8d6a9ef7d64a1aaf9543e83ee11aec13f5b6b1fb9d296ecf70d64c60b3933374cbfd54d43ca92fa6aed87b4bbdafb3e5164c6c1bc76ff83d1861e7c1d39adeb5202998befa772080f077b6f9aac5f6a1ae2446"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) close(r2) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)='./file0\x00') 02:53:03 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:03 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000001000000aaff"], 0x0) 02:53:03 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000300000000000000aaff02"], 0x0) 02:53:03 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 02:53:03 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:03 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 1827.916736] FAULT_INJECTION: forcing a failure. [ 1827.916736] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.918251] CPU: 1 PID: 9940 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1827.919127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1827.920157] Call Trace: [ 1827.920503] dump_stack+0x107/0x167 [ 1827.920988] should_fail.cold+0x5/0xa [ 1827.921482] ? create_object.isra.0+0x3a/0xa20 [ 1827.922066] should_failslab+0x5/0x20 [ 1827.922553] kmem_cache_alloc+0x5b/0x310 [ 1827.923079] ? mark_held_locks+0x9e/0xe0 [ 1827.923602] create_object.isra.0+0x3a/0xa20 [ 1827.924168] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1827.924834] kmem_cache_alloc_bulk+0x168/0x320 [ 1827.925429] io_submit_sqes+0x6fe6/0x8610 [ 1827.925968] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1827.926612] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1827.927254] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1827.927857] ? find_held_lock+0x2c/0x110 [ 1827.928387] ? io_submit_sqes+0x8610/0x8610 [ 1827.928958] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1827.929581] ? wait_for_completion_io+0x270/0x270 [ 1827.930210] ? rcu_read_lock_any_held+0x75/0xa0 [ 1827.930811] ? vfs_write+0x354/0xb10 [ 1827.931292] ? fput_many+0x2f/0x1a0 [ 1827.931764] ? ksys_write+0x1a9/0x260 [ 1827.932254] ? __ia32_sys_read+0xb0/0xb0 [ 1827.932791] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1827.933467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1827.934142] do_syscall_64+0x33/0x40 [ 1827.934626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1827.935277] RIP: 0033:0x7f8398de7b19 [ 1827.935752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1827.938126] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1827.939109] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1827.939989] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1827.940907] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1827.941824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.942712] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1827.986259] FAULT_INJECTION: forcing a failure. [ 1827.986259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1827.989159] CPU: 0 PID: 9948 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1827.990704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1827.992574] Call Trace: [ 1827.993191] dump_stack+0x107/0x167 [ 1827.994028] should_fail.cold+0x5/0xa [ 1827.994904] _copy_from_user+0x2e/0x1b0 [ 1827.995796] iovec_from_user+0x141/0x400 [ 1827.996714] __import_iovec+0x67/0x590 [ 1827.997599] ? SOFTIRQ_verbose+0x10/0x10 [ 1827.998512] ? lock_downgrade+0x6d0/0x6d0 [ 1827.999450] io_import_iovec+0x581/0x1120 [ 1828.000390] ? io_complete_rw+0x230/0x230 [ 1828.001348] ? lock_downgrade+0x6d0/0x6d0 [ 1828.002284] ? mark_lock+0xf5/0x2df0 [ 1828.003118] io_read+0xe14/0x11e0 [ 1828.003896] ? lock_chain_count+0x20/0x20 [ 1828.004834] ? __is_insn_slot_addr+0x14c/0x290 [ 1828.005857] ? __lock_acquire+0x1657/0x5b00 [ 1828.006824] ? kiocb_done+0xc90/0xc90 [ 1828.007670] ? mark_lock+0xf5/0x2df0 [ 1828.008516] ? lock_chain_count+0x20/0x20 [ 1828.009465] ? __lock_acquire+0x1657/0x5b00 [ 1828.010458] ? __lock_acquire+0xbb1/0x5b00 [ 1828.011415] io_issue_sqe+0x2e8a/0x77b0 [ 1828.012313] ? find_held_lock+0x2c/0x110 [ 1828.013236] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1828.014413] ? SOFTIRQ_verbose+0x10/0x10 [ 1828.015320] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1828.016374] ? lock_downgrade+0x6d0/0x6d0 [ 1828.017323] ? io_connect+0x610/0x610 [ 1828.018177] ? lock_acquire+0x197/0x470 [ 1828.019059] ? find_held_lock+0x2c/0x110 [ 1828.019973] ? __fget_files+0x2cf/0x520 [ 1828.020875] ? lock_downgrade+0x6d0/0x6d0 [ 1828.021806] __io_queue_sqe+0x90/0x9d0 [ 1828.022681] ? io_issue_sqe+0x77b0/0x77b0 [ 1828.023599] ? __fget_files+0x2f8/0x520 [ 1828.024544] ? __io_file_supports_nowait+0x22a/0x510 [ 1828.025877] ? io_prep_rw+0x7f5/0x1050 [ 1828.026898] io_submit_sqes+0x44aa/0x8610 [ 1828.028017] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1828.029324] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1828.030579] ? find_held_lock+0x2c/0x110 [ 1828.031649] ? io_submit_sqes+0x8610/0x8610 [ 1828.032811] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1828.034071] ? wait_for_completion_io+0x270/0x270 [ 1828.035330] ? rcu_read_lock_any_held+0x75/0xa0 [ 1828.036537] ? vfs_write+0x354/0xb10 [ 1828.037518] ? fput_many+0x2f/0x1a0 [ 1828.038466] ? ksys_write+0x1a9/0x260 [ 1828.039458] ? __ia32_sys_read+0xb0/0xb0 [ 1828.040518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1828.041900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1828.043245] do_syscall_64+0x33/0x40 [ 1828.044219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1828.045563] RIP: 0033:0x7f7726e3cb19 [ 1828.046528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1828.051346] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1828.053336] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1828.055189] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1828.057061] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1828.058917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1828.060784] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:53:20 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 02:53:20 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:20 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:20 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x33e, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000140)="eb7c906d6b66732e663e7400820801008bdc440200f801", 0x17, 0xfffffffffffffffe}, {0x0, 0x0, 0x10010009ff}, {&(0x7f0000000400)="98f7c7a6fb98c419bd0d41068a1e438278833edb892aa1c37b20b78012215a8bcfa872bae959f2283206ae23fbe534e59e26c3f7c40dcd9d3e580f19160494ee65b96bfd11d26230c2400ac0f9ab4571a64b3b5804d7ad1c395649ef1fea2ae5c14f6063ca926ddc5dd617328595e231d1f56895f72407f19a0d70a9c9", 0x7d, 0xc}, {&(0x7f0000000480)="46972d255b11dc68609351835531dd1768cf08db7dfae8c9096ac0604e95855975138b9affaa", 0x26, 0x1}], 0x40, &(0x7f0000000100)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x188) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r3 = syz_io_uring_setup(0x3a24, &(0x7f0000009d80)={0x0, 0xe42f, 0x10, 0x2, 0x2f6, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000009e00), &(0x7f0000009e40)) poll(&(0x7f0000009e80)=[{r2, 0x2}, {r3, 0x100}], 0x2, 0x8) mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x110033, 0x0) 02:53:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000500000000000000aaff02"], 0x0) 02:53:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000003000000aaff"], 0x0) 02:53:20 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 02:53:20 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1845.390557] loop3: detected capacity change from 0 to 41947648 [ 1845.406658] FAULT_INJECTION: forcing a failure. [ 1845.406658] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.409179] CPU: 1 PID: 9970 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1845.410639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1845.412435] Call Trace: [ 1845.413020] dump_stack+0x107/0x167 [ 1845.413807] should_fail.cold+0x5/0xa [ 1845.414627] ? io_setup_async_rw+0x180/0x580 [ 1845.415579] should_failslab+0x5/0x20 [ 1845.416401] __kmalloc+0x72/0x390 [ 1845.417164] io_setup_async_rw+0x180/0x580 [ 1845.418074] ? iov_iter_restore+0x195/0x3a0 [ 1845.419017] io_read+0x775/0x11e0 [ 1845.419789] FAULT_INJECTION: forcing a failure. [ 1845.419789] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.419810] ? __is_insn_slot_addr+0x14c/0x290 [ 1845.422449] ? kiocb_done+0xc90/0xc90 [ 1845.422473] ? mark_lock+0xf5/0x2df0 [ 1845.422503] ? lock_chain_count+0x20/0x20 [ 1845.422564] ? __lock_acquire+0xbb1/0x5b00 [ 1845.422597] io_issue_sqe+0x2e8a/0x77b0 [ 1845.428160] ? find_held_lock+0x2c/0x110 [ 1845.429046] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1845.430162] ? SOFTIRQ_verbose+0x10/0x10 [ 1845.431034] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1845.432042] ? lock_downgrade+0x6d0/0x6d0 [ 1845.432930] ? io_connect+0x610/0x610 [ 1845.433763] ? lock_acquire+0x197/0x470 [ 1845.434618] ? find_held_lock+0x2c/0x110 [ 1845.435492] ? __fget_files+0x2cf/0x520 [ 1845.436337] ? lock_downgrade+0x6d0/0x6d0 [ 1845.437239] __io_queue_sqe+0x90/0x9d0 [ 1845.438077] ? io_issue_sqe+0x77b0/0x77b0 [ 1845.438952] ? __fget_files+0x2f8/0x520 [ 1845.439806] ? __io_file_supports_nowait+0x22a/0x510 [ 1845.440888] ? io_prep_rw+0x7f5/0x1050 [ 1845.441735] io_submit_sqes+0x44aa/0x8610 [ 1845.442658] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1845.443715] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1845.444741] ? find_held_lock+0x2c/0x110 [ 1845.445631] ? io_submit_sqes+0x8610/0x8610 [ 1845.446553] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1845.447587] ? wait_for_completion_io+0x270/0x270 [ 1845.448626] ? rcu_read_lock_any_held+0x75/0xa0 [ 1845.449630] ? vfs_write+0x354/0xb10 [ 1845.450439] ? fput_many+0x2f/0x1a0 [ 1845.451219] ? ksys_write+0x1a9/0x260 [ 1845.452035] ? __ia32_sys_read+0xb0/0xb0 [ 1845.452906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1845.454062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1845.455178] do_syscall_64+0x33/0x40 [ 1845.455977] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1845.457086] RIP: 0033:0x7f7726e3cb19 [ 1845.457889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1845.461808] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1845.463431] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1845.464967] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1845.466490] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1845.468011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1845.469544] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1845.471107] CPU: 0 PID: 9963 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1845.472585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1845.474376] Call Trace: [ 1845.474941] dump_stack+0x107/0x167 [ 1845.475711] should_fail.cold+0x5/0xa [ 1845.476511] ? create_object.isra.0+0x3a/0xa20 [ 1845.477487] should_failslab+0x5/0x20 [ 1845.478314] kmem_cache_alloc+0x5b/0x310 [ 1845.479202] ? mark_held_locks+0x9e/0xe0 [ 1845.480061] create_object.isra.0+0x3a/0xa20 [ 1845.480992] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1845.482101] kmem_cache_alloc_bulk+0x168/0x320 [ 1845.483050] io_submit_sqes+0x6fe6/0x8610 [ 1845.483945] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1845.485041] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1845.486100] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1845.487157] ? find_held_lock+0x2c/0x110 [ 1845.488030] ? io_submit_sqes+0x8610/0x8610 [ 1845.488948] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1845.489964] ? wait_for_completion_io+0x270/0x270 [ 1845.490998] ? rcu_read_lock_any_held+0x75/0xa0 [ 1845.491983] ? vfs_write+0x354/0xb10 [ 1845.492774] ? fput_many+0x2f/0x1a0 [ 1845.493553] ? ksys_write+0x1a9/0x260 [ 1845.494355] ? __ia32_sys_read+0xb0/0xb0 [ 1845.495217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1845.496337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1845.497447] do_syscall_64+0x33/0x40 [ 1845.498340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1845.499704] RIP: 0033:0x7f8398de7b19 [ 1845.500695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1845.505610] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1845.507523] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1845.509152] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1845.510950] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1845.512514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1845.514049] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1845.520617] FAT-fs (loop3): invalid media value (0x7d) [ 1845.521871] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1845.569616] loop3: detected capacity change from 0 to 41947648 02:53:21 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 02:53:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000003c00000000000000aaff02"], 0x0) 02:53:21 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:21 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000005000000aaff"], 0x0) [ 1845.641041] FAT-fs (loop3): Unrecognized mount option "blkio.throttle.read_bps_device" or missing value [ 1845.665390] FAULT_INJECTION: forcing a failure. [ 1845.665390] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.668029] CPU: 0 PID: 9979 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1845.669507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1845.671315] Call Trace: [ 1845.671908] dump_stack+0x107/0x167 [ 1845.672722] should_fail.cold+0x5/0xa [ 1845.673601] ? create_object.isra.0+0x3a/0xa20 [ 1845.674550] should_failslab+0x5/0x20 [ 1845.675342] kmem_cache_alloc+0x5b/0x310 [ 1845.676219] create_object.isra.0+0x3a/0xa20 [ 1845.677165] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1845.678242] __kmalloc+0x16e/0x390 [ 1845.679004] io_setup_async_rw+0x180/0x580 [ 1845.679899] ? iov_iter_restore+0x195/0x3a0 [ 1845.680810] io_read+0x775/0x11e0 [ 1845.681572] ? __is_insn_slot_addr+0x14c/0x290 [ 1845.682572] ? kiocb_done+0xc90/0xc90 [ 1845.683392] ? mark_lock+0xf5/0x2df0 [ 1845.684188] ? lock_chain_count+0x20/0x20 [ 1845.685152] ? __lock_acquire+0xbb1/0x5b00 [ 1845.686064] io_issue_sqe+0x2e8a/0x77b0 [ 1845.686912] ? find_held_lock+0x2c/0x110 [ 1845.687773] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1845.688904] ? SOFTIRQ_verbose+0x10/0x10 [ 1845.689774] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1845.690793] ? lock_downgrade+0x6d0/0x6d0 [ 1845.691729] ? io_connect+0x610/0x610 [ 1845.692541] ? lock_acquire+0x197/0x470 [ 1845.693401] ? find_held_lock+0x2c/0x110 [ 1845.694287] ? __fget_files+0x2cf/0x520 [ 1845.695133] ? lock_downgrade+0x6d0/0x6d0 [ 1845.696016] __io_queue_sqe+0x90/0x9d0 [ 1845.696839] ? io_issue_sqe+0x77b0/0x77b0 [ 1845.697742] ? __fget_files+0x2f8/0x520 [ 1845.698625] ? __io_file_supports_nowait+0x22a/0x510 [ 1845.699724] ? io_prep_rw+0x7f5/0x1050 [ 1845.700542] io_submit_sqes+0x44aa/0x8610 [ 1845.701476] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1845.702546] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1845.703861] ? find_held_lock+0x2c/0x110 [ 1845.705014] ? io_submit_sqes+0x8610/0x8610 [ 1845.706207] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1845.707542] ? wait_for_completion_io+0x270/0x270 [ 1845.708894] ? rcu_read_lock_any_held+0x75/0xa0 [ 1845.710206] ? vfs_write+0x354/0xb10 [ 1845.711251] ? fput_many+0x2f/0x1a0 [ 1845.712272] ? ksys_write+0x1a9/0x260 [ 1845.713172] ? __ia32_sys_read+0xb0/0xb0 [ 1845.714087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1845.715401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1845.716610] do_syscall_64+0x33/0x40 [ 1845.717507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1845.718632] RIP: 0033:0x7f7726e3cb19 [ 1845.719435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1845.723393] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1845.725039] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1845.726568] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1845.728103] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1845.729651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1845.731179] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:53:21 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) recvmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000300)=""/81, 0x51}], 0x2, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x2000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./file2\x00', &(0x7f0000000540)='nsfs\x00', 0x4000, &(0x7f0000000580)) fallocate(r0, 0x10, 0x0, 0x5) write$P9_RMKNOD(r0, &(0x7f0000000240)={0x14, 0x13, 0x2, {0x8, 0x3, 0x4}}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(r2, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001090000"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000900)={0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x3}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000940)) unshare(0x48020200) socket$packet(0x11, 0x2, 0x300) 02:53:21 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000004000000000000000aaff02"], 0x0) 02:53:21 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000003c000000aaff"], 0x0) 02:53:36 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 02:53:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 02:53:36 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:36 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:53:36 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000006000000000000000aaff02"], 0x0) 02:53:36 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:36 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 02:53:36 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000030000000000aaff"], 0x0) 02:53:36 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000010000000000aaff02"], 0x0) 02:53:36 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000050000000000aaff"], 0x0) 02:53:36 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1860.695200] FAULT_INJECTION: forcing a failure. [ 1860.695200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1860.697106] CPU: 1 PID: 10016 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1860.698179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1860.699460] Call Trace: [ 1860.699872] dump_stack+0x107/0x167 [ 1860.700434] should_fail.cold+0x5/0xa [ 1860.701025] _copy_from_user+0x2e/0x1b0 [ 1860.701643] iovec_from_user+0x141/0x400 [ 1860.702278] __import_iovec+0x67/0x590 [ 1860.702882] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1860.703679] io_import_iovec+0x581/0x1120 [ 1860.704333] ? io_complete_rw+0x230/0x230 [ 1860.704978] ? lock_downgrade+0x6d0/0x6d0 [ 1860.705615] ? unwind_next_frame+0x13ef/0x1a90 [ 1860.706307] io_read+0xe14/0x11e0 [ 1860.706861] ? kiocb_done+0xc90/0xc90 [ 1860.707455] ? mark_lock+0xf5/0x2df0 [ 1860.708024] ? lock_chain_count+0x20/0x20 [ 1860.708675] ? lock_chain_count+0x20/0x20 [ 1860.709313] ? stack_trace_save+0x8c/0xc0 [ 1860.709935] ? stack_trace_consume_entry+0x160/0x160 [ 1860.710712] ? lock_acquire+0x197/0x470 [ 1860.711314] ? __lock_acquire+0xbb1/0x5b00 [ 1860.711951] io_issue_sqe+0x2e8a/0x77b0 [ 1860.712558] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1860.713384] ? SOFTIRQ_verbose+0x10/0x10 [ 1860.713991] ? lock_chain_count+0x20/0x20 [ 1860.714619] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1860.715407] ? io_connect+0x610/0x610 [ 1860.716004] ? lock_acquire+0x197/0x470 [ 1860.716603] ? find_held_lock+0x2c/0x110 [ 1860.717233] ? __fget_files+0x2cf/0x520 [ 1860.717828] ? lock_downgrade+0x6d0/0x6d0 [ 1860.718448] __io_queue_sqe+0x90/0x9d0 [ 1860.719034] ? io_issue_sqe+0x77b0/0x77b0 [ 1860.719648] ? __fget_files+0x2f8/0x520 [ 1860.720248] ? __io_file_supports_nowait+0x22a/0x510 [ 1860.721021] ? io_prep_rw+0x7f5/0x1050 [ 1860.721620] io_submit_sqes+0x44aa/0x8610 [ 1860.722267] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1860.723025] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1860.723753] ? find_held_lock+0x2c/0x110 [ 1860.724367] ? io_submit_sqes+0x8610/0x8610 [ 1860.725032] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1860.725761] ? wait_for_completion_io+0x270/0x270 [ 1860.726496] ? rcu_read_lock_any_held+0x75/0xa0 [ 1860.727193] ? vfs_write+0x354/0xb10 [ 1860.727753] ? fput_many+0x2f/0x1a0 [ 1860.728306] ? ksys_write+0x1a9/0x260 [ 1860.728897] ? __ia32_sys_read+0xb0/0xb0 [ 1860.729543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1860.730330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1860.731128] do_syscall_64+0x33/0x40 [ 1860.731689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1860.732477] RIP: 0033:0x7f8398de7b19 [ 1860.733049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1860.735809] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1860.736970] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1860.738055] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1860.739125] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1860.740208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1860.741330] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1860.748482] FAULT_INJECTION: forcing a failure. [ 1860.748482] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.750214] CPU: 1 PID: 10017 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1860.751243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1860.752473] Call Trace: [ 1860.752876] dump_stack+0x107/0x167 [ 1860.753449] should_fail.cold+0x5/0xa [ 1860.754016] ? __io_queue_sqe+0x666/0x9d0 [ 1860.754632] should_failslab+0x5/0x20 [ 1860.755201] kmem_cache_alloc_trace+0x55/0x320 [ 1860.755884] ? lock_downgrade+0x6d0/0x6d0 [ 1860.756503] __io_queue_sqe+0x666/0x9d0 [ 1860.757136] ? io_issue_sqe+0x77b0/0x77b0 [ 1860.757751] ? __fget_files+0x2f8/0x520 [ 1860.758344] ? __io_file_supports_nowait+0x22a/0x510 [ 1860.759097] ? io_prep_rw+0x7f5/0x1050 [ 1860.759693] io_submit_sqes+0x44aa/0x8610 [ 1860.760351] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1860.761100] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1860.761828] ? find_held_lock+0x2c/0x110 [ 1860.762432] ? io_submit_sqes+0x8610/0x8610 [ 1860.763092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1860.763840] ? wait_for_completion_io+0x270/0x270 [ 1860.764560] ? rcu_read_lock_any_held+0x75/0xa0 [ 1860.765264] ? vfs_write+0x354/0xb10 [ 1860.765817] ? fput_many+0x2f/0x1a0 [ 1860.766358] ? ksys_write+0x1a9/0x260 [ 1860.766932] ? __ia32_sys_read+0xb0/0xb0 [ 1860.767538] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1860.768325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1860.769097] do_syscall_64+0x33/0x40 [ 1860.769663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1860.770416] RIP: 0033:0x7f7726e3cb19 [ 1860.770973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1860.773727] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1860.774847] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1860.775899] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1860.776963] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1860.778031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1860.779105] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:53:36 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:36 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:53:36 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000003c0000000000aaff"], 0x0) 02:53:36 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000030000000000aaff02"], 0x0) 02:53:49 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:53:49 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 02:53:49 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000300000000aaff"], 0x0) 02:53:49 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:49 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) setresuid(0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "3ef8a4c249275493e4e5f8f0b6b073f3a14d9e238c0905546a9d6215550e2503959133ba3496dc19ed7064fc4d9a05e3a2b761484442989c62184400", 0x37}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r1) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r2, r3, 0x1000) keyctl$chown(0x4, r1, 0xee01, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 02:53:49 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) [ 1874.198588] FAULT_INJECTION: forcing a failure. [ 1874.198588] name failslab, interval 1, probability 0, space 0, times 0 [ 1874.201267] CPU: 1 PID: 10050 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1874.202744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1874.204500] Call Trace: [ 1874.205053] dump_stack+0x107/0x167 [ 1874.205844] should_fail.cold+0x5/0xa [ 1874.206653] ? create_object.isra.0+0x3a/0xa20 [ 1874.207613] should_failslab+0x5/0x20 [ 1874.208415] kmem_cache_alloc+0x5b/0x310 [ 1874.209273] create_object.isra.0+0x3a/0xa20 [ 1874.210202] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1874.211277] kmem_cache_alloc_trace+0x151/0x320 [ 1874.212261] ? lock_downgrade+0x6d0/0x6d0 [ 1874.213148] __io_queue_sqe+0x666/0x9d0 [ 1874.214011] ? io_issue_sqe+0x77b0/0x77b0 [ 1874.214876] ? __fget_files+0x2f8/0x520 [ 1874.215702] ? __io_file_supports_nowait+0x22a/0x510 [ 1874.216768] ? io_prep_rw+0x7f5/0x1050 [ 1874.217613] io_submit_sqes+0x44aa/0x8610 [ 1874.218525] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1874.219565] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1874.220582] ? find_held_lock+0x2c/0x110 [ 1874.221446] ? io_submit_sqes+0x8610/0x8610 [ 1874.222357] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1874.223386] ? wait_for_completion_io+0x270/0x270 [ 1874.224400] ? rcu_read_lock_any_held+0x75/0xa0 [ 1874.225380] ? vfs_write+0x354/0xb10 [ 1874.226168] ? fput_many+0x2f/0x1a0 [ 1874.226927] ? ksys_write+0x1a9/0x260 [ 1874.227728] ? __ia32_sys_read+0xb0/0xb0 [ 1874.228582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1874.229689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1874.230777] do_syscall_64+0x33/0x40 [ 1874.231567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1874.232647] RIP: 0033:0x7f7726e3cb19 [ 1874.233438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1874.237302] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1874.238885] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1874.240395] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1874.241883] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1874.243393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1874.244895] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1874.254802] FAULT_INJECTION: forcing a failure. [ 1874.254802] name failslab, interval 1, probability 0, space 0, times 0 [ 1874.257747] CPU: 0 PID: 10047 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1874.259234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1874.261027] Call Trace: [ 1874.261613] dump_stack+0x107/0x167 [ 1874.262405] should_fail.cold+0x5/0xa [ 1874.263232] ? io_setup_async_rw+0x180/0x580 [ 1874.264182] should_failslab+0x5/0x20 [ 1874.265007] __kmalloc+0x72/0x390 [ 1874.265764] io_setup_async_rw+0x180/0x580 [ 1874.266683] ? iov_iter_restore+0x195/0x3a0 [ 1874.267626] io_read+0x775/0x11e0 [ 1874.268392] ? kiocb_done+0xc90/0xc90 [ 1874.269207] ? mark_lock+0xf5/0x2df0 [ 1874.270035] ? lock_chain_count+0x20/0x20 [ 1874.270945] ? stack_trace_consume_entry+0x160/0x160 [ 1874.272062] ? lock_acquire+0x197/0x470 [ 1874.272931] ? __lock_acquire+0xbb1/0x5b00 [ 1874.273864] io_issue_sqe+0x2e8a/0x77b0 [ 1874.274733] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1874.275873] ? SOFTIRQ_verbose+0x10/0x10 [ 1874.276751] ? lock_chain_count+0x20/0x20 [ 1874.277670] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1874.278817] ? io_connect+0x610/0x610 [ 1874.279651] ? lock_acquire+0x197/0x470 [ 1874.280529] ? find_held_lock+0x2c/0x110 [ 1874.281433] ? __fget_files+0x2cf/0x520 [ 1874.282295] ? lock_downgrade+0x6d0/0x6d0 [ 1874.283202] __io_queue_sqe+0x90/0x9d0 [ 1874.284054] ? io_issue_sqe+0x77b0/0x77b0 [ 1874.284955] ? __fget_files+0x2f8/0x520 [ 1874.285820] ? __io_file_supports_nowait+0x22a/0x510 [ 1874.286921] ? io_prep_rw+0x7f5/0x1050 [ 1874.287837] io_submit_sqes+0x44aa/0x8610 [ 1874.288825] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1874.289925] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1874.290980] ? find_held_lock+0x2c/0x110 [ 1874.291864] ? io_submit_sqes+0x8610/0x8610 [ 1874.292797] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1874.293860] ? wait_for_completion_io+0x270/0x270 [ 1874.294906] ? rcu_read_lock_any_held+0x75/0xa0 [ 1874.295911] ? vfs_write+0x354/0xb10 [ 1874.296726] ? fput_many+0x2f/0x1a0 [ 1874.297537] ? ksys_write+0x1a9/0x260 [ 1874.298367] ? __ia32_sys_read+0xb0/0xb0 [ 1874.299243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1874.300375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1874.301503] do_syscall_64+0x33/0x40 [ 1874.302305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1874.303404] RIP: 0033:0x7f8398de7b19 [ 1874.304205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1874.308177] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1874.309843] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1874.311365] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1874.312898] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1874.314436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1874.315985] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:53:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x3fd, 0x9, 0x7}) r3 = syz_io_uring_complete(r1) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000080)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x5}}}, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="af838397469eae01800000000000002e2f66696c653000"]) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x5) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14, 0x800) syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') close(r6) 02:53:49 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 02:53:49 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000050000000000aaff02"], 0x0) 02:53:50 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000500000000aaff"], 0x0) [ 1874.476366] FAULT_INJECTION: forcing a failure. [ 1874.476366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.479267] CPU: 0 PID: 10070 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1874.480769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1874.482567] Call Trace: [ 1874.483143] dump_stack+0x107/0x167 [ 1874.483931] should_fail.cold+0x5/0xa [ 1874.484754] _copy_from_user+0x2e/0x1b0 [ 1874.485632] iovec_from_user+0x141/0x400 [ 1874.486532] __import_iovec+0x67/0x590 [ 1874.487377] ? SOFTIRQ_verbose+0x10/0x10 [ 1874.488257] ? lock_downgrade+0x6d0/0x6d0 [ 1874.489158] io_import_iovec+0x581/0x1120 02:53:50 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:53:50 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1874.490094] ? io_complete_rw+0x230/0x230 [ 1874.491140] ? lock_downgrade+0x6d0/0x6d0 [ 1874.492051] ? mark_lock+0xf5/0x2df0 [ 1874.492855] io_read+0xe14/0x11e0 [ 1874.493628] ? lock_chain_count+0x20/0x20 [ 1874.494542] ? __is_insn_slot_addr+0x14c/0x290 [ 1874.495535] ? __lock_acquire+0x1657/0x5b00 [ 1874.496462] ? kiocb_done+0xc90/0xc90 [ 1874.497290] ? mark_lock+0xf5/0x2df0 [ 1874.498110] ? lock_chain_count+0x20/0x20 [ 1874.499016] ? __lock_acquire+0x1657/0x5b00 [ 1874.499985] ? __lock_acquire+0xbb1/0x5b00 [ 1874.500905] io_issue_sqe+0x2e8a/0x77b0 [ 1874.501787] ? find_held_lock+0x2c/0x110 [ 1874.502663] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1874.503810] ? SOFTIRQ_verbose+0x10/0x10 [ 1874.504678] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1874.505724] ? lock_downgrade+0x6d0/0x6d0 [ 1874.506638] ? io_connect+0x610/0x610 [ 1874.507466] ? lock_acquire+0x197/0x470 [ 1874.508323] ? find_held_lock+0x2c/0x110 [ 1874.509203] ? __fget_files+0x2cf/0x520 [ 1874.510082] ? lock_downgrade+0x6d0/0x6d0 [ 1874.510999] __io_queue_sqe+0x90/0x9d0 [ 1874.511857] ? io_issue_sqe+0x77b0/0x77b0 [ 1874.512750] ? __fget_files+0x2f8/0x520 [ 1874.513630] ? __io_file_supports_nowait+0x22a/0x510 [ 1874.514740] ? io_prep_rw+0x7f5/0x1050 [ 1874.515593] io_submit_sqes+0x44aa/0x8610 [ 1874.516523] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1874.517608] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1874.518648] ? find_held_lock+0x2c/0x110 [ 1874.519543] ? io_submit_sqes+0x8610/0x8610 [ 1874.520492] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1874.521546] ? wait_for_completion_io+0x270/0x270 [ 1874.522601] ? rcu_read_lock_any_held+0x75/0xa0 [ 1874.523598] ? vfs_write+0x354/0xb10 [ 1874.524405] ? fput_many+0x2f/0x1a0 [ 1874.525197] ? ksys_write+0x1a9/0x260 [ 1874.526035] ? __ia32_sys_read+0xb0/0xb0 [ 1874.526928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1874.528067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1874.529185] do_syscall_64+0x33/0x40 [ 1874.529995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1874.531108] RIP: 0033:0x7f7726e3cb19 [ 1874.531920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1874.535918] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1874.537582] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1874.539115] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1874.540658] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1874.542212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1874.543765] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1874.579968] FAULT_INJECTION: forcing a failure. [ 1874.579968] name failslab, interval 1, probability 0, space 0, times 0 [ 1874.582496] CPU: 1 PID: 10076 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1874.583955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1874.585727] Call Trace: [ 1874.586304] dump_stack+0x107/0x167 [ 1874.587091] should_fail.cold+0x5/0xa [ 1874.587921] should_failslab+0x5/0x20 [ 1874.588745] kmem_cache_alloc_bulk+0x4b/0x320 [ 1874.589707] io_submit_sqes+0x6fe6/0x8610 [ 1874.590594] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1874.591641] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1874.592695] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1874.593727] ? find_held_lock+0x2c/0x110 [ 1874.594598] ? io_submit_sqes+0x8610/0x8610 [ 1874.595519] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1874.596536] ? wait_for_completion_io+0x270/0x270 [ 1874.597565] ? rcu_read_lock_any_held+0x75/0xa0 [ 1874.598552] ? vfs_write+0x354/0xb10 [ 1874.599348] ? fput_many+0x2f/0x1a0 [ 1874.600117] ? ksys_write+0x1a9/0x260 [ 1874.600920] ? __ia32_sys_read+0xb0/0xb0 [ 1874.601793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1874.602900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1874.603993] do_syscall_64+0x33/0x40 [ 1874.604782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1874.605886] RIP: 0033:0x7f175bb3ab19 [ 1874.606662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1874.610552] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1874.612153] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1874.613654] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1874.615158] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1874.616666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.618169] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:53:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000003c0000000000aaff02"], 0x0) 02:53:50 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:04 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 02:54:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x36) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x4}, @device_a, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@pspoll={{}, @default, @random='\bXj\'Wf', @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000580)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @random="92931fde97c1", @device_b, {0x5, 0x6}}, {0x7, 0x1}}, {@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x18c1}, @broadcast, @device_b, @initial, {0x4, 0x1}}, {0xb, 0x1, 0x0, 0x1, 0x3}}}, @random="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"}, 0x77d) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=@ctrl_frame=@cts={{}, {0x1}, @device_b}, 0xa) 02:54:04 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 02:54:04 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000400000000000aaff02"], 0x0) 02:54:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000003c00000000aaff"], 0x0) 02:54:04 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:04 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) [ 1889.075067] FAULT_INJECTION: forcing a failure. [ 1889.075067] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.077572] CPU: 1 PID: 10101 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1889.079060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.080830] Call Trace: [ 1889.081405] dump_stack+0x107/0x167 [ 1889.082150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1889.084064] should_fail.cold+0x5/0xa [ 1889.084087] ? create_object.isra.0+0x3a/0xa20 [ 1889.084105] should_failslab+0x5/0x20 [ 1889.084123] kmem_cache_alloc+0x5b/0x310 [ 1889.084148] create_object.isra.0+0x3a/0xa20 [ 1889.084164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1889.084188] __kmalloc+0x16e/0x390 [ 1889.084214] io_setup_async_rw+0x180/0x580 [ 1889.084243] ? iov_iter_restore+0x195/0x3a0 [ 1889.084265] io_read+0x775/0x11e0 [ 1889.093207] ? kiocb_done+0xc90/0xc90 [ 1889.094096] ? mark_lock+0xf5/0x2df0 [ 1889.094889] ? lock_chain_count+0x20/0x20 [ 1889.095784] ? stack_trace_consume_entry+0x160/0x160 [ 1889.096870] ? lock_acquire+0x197/0x470 [ 1889.097707] ? __lock_acquire+0xbb1/0x5b00 [ 1889.098600] io_issue_sqe+0x2e8a/0x77b0 [ 1889.099436] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1889.100547] ? SOFTIRQ_verbose+0x10/0x10 [ 1889.101386] ? lock_chain_count+0x20/0x20 [ 1889.102271] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1889.103410] ? io_connect+0x610/0x610 [ 1889.104219] ? lock_acquire+0x197/0x470 [ 1889.105060] ? find_held_lock+0x2c/0x110 [ 1889.105929] ? __fget_files+0x2cf/0x520 [ 1889.106776] ? lock_downgrade+0x6d0/0x6d0 [ 1889.107666] __io_queue_sqe+0x90/0x9d0 [ 1889.108489] ? io_issue_sqe+0x77b0/0x77b0 [ 1889.109371] ? __fget_files+0x2f8/0x520 [ 1889.110224] ? __io_file_supports_nowait+0x22a/0x510 [ 1889.111307] ? io_prep_rw+0x7f5/0x1050 [ 1889.112142] io_submit_sqes+0x44aa/0x8610 [ 1889.113054] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1889.114116] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1889.115130] ? find_held_lock+0x2c/0x110 [ 1889.115992] ? io_submit_sqes+0x8610/0x8610 [ 1889.116916] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1889.117949] ? wait_for_completion_io+0x270/0x270 [ 1889.118976] ? rcu_read_lock_any_held+0x75/0xa0 [ 1889.119971] ? vfs_write+0x354/0xb10 [ 1889.120766] ? fput_many+0x2f/0x1a0 [ 1889.121534] ? ksys_write+0x1a9/0x260 [ 1889.122350] ? __ia32_sys_read+0xb0/0xb0 [ 1889.123202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1889.124289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1889.125365] do_syscall_64+0x33/0x40 [ 1889.126148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1889.127238] RIP: 0033:0x7f8398de7b19 [ 1889.128033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.131930] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1889.133561] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1889.135086] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1889.136604] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1889.138096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1889.139576] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1889.150372] FAULT_INJECTION: forcing a failure. [ 1889.150372] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.152921] CPU: 0 PID: 10100 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1889.154449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.156290] Call Trace: [ 1889.156879] dump_stack+0x107/0x167 [ 1889.157684] should_fail.cold+0x5/0xa [ 1889.158533] ? io_setup_async_rw+0x180/0x580 [ 1889.159504] should_failslab+0x5/0x20 [ 1889.160349] __kmalloc+0x72/0x390 [ 1889.161115] io_setup_async_rw+0x180/0x580 [ 1889.162042] ? iov_iter_restore+0x195/0x3a0 [ 1889.162994] io_read+0x775/0x11e0 [ 1889.163764] ? __is_insn_slot_addr+0x14c/0x290 [ 1889.164773] ? kiocb_done+0xc90/0xc90 [ 1889.165606] ? mark_lock+0xf5/0x2df0 [ 1889.166411] ? lock_chain_count+0x20/0x20 [ 1889.167337] ? __lock_acquire+0xbb1/0x5b00 [ 1889.168259] io_issue_sqe+0x2e8a/0x77b0 [ 1889.169109] ? find_held_lock+0x2c/0x110 [ 1889.169996] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1889.171144] ? SOFTIRQ_verbose+0x10/0x10 [ 1889.172039] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1889.173077] ? lock_downgrade+0x6d0/0x6d0 [ 1889.173978] ? io_connect+0x610/0x610 [ 1889.174827] ? lock_acquire+0x197/0x470 [ 1889.175706] ? find_held_lock+0x2c/0x110 [ 1889.176607] ? __fget_files+0x2cf/0x520 [ 1889.177496] ? lock_downgrade+0x6d0/0x6d0 [ 1889.178415] __io_queue_sqe+0x90/0x9d0 [ 1889.179279] ? io_issue_sqe+0x77b0/0x77b0 [ 1889.180189] ? __fget_files+0x2f8/0x520 [ 1889.181060] ? __io_file_supports_nowait+0x22a/0x510 [ 1889.182159] ? io_prep_rw+0x7f5/0x1050 [ 1889.183027] io_submit_sqes+0x44aa/0x8610 [ 1889.183975] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1889.185071] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1889.186147] ? find_held_lock+0x2c/0x110 [ 1889.187027] ? io_submit_sqes+0x8610/0x8610 [ 1889.187965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1889.189002] ? wait_for_completion_io+0x270/0x270 [ 1889.190052] ? rcu_read_lock_any_held+0x75/0xa0 [ 1889.191048] ? vfs_write+0x354/0xb10 [ 1889.191860] ? fput_many+0x2f/0x1a0 [ 1889.192648] ? ksys_write+0x1a9/0x260 [ 1889.193467] ? __ia32_sys_read+0xb0/0xb0 [ 1889.194352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1889.195480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1889.196601] do_syscall_64+0x33/0x40 [ 1889.197397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1889.198508] RIP: 0033:0x7f7726e3cb19 [ 1889.199302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.203376] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1889.205075] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1889.206628] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1889.208216] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1889.209815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1889.211378] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1889.218520] FAULT_INJECTION: forcing a failure. [ 1889.218520] name failslab, interval 1, probability 0, space 0, times 0 02:54:04 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1889.221290] CPU: 0 PID: 10093 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1889.222999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.224764] Call Trace: [ 1889.225344] dump_stack+0x107/0x167 [ 1889.226146] should_fail.cold+0x5/0xa [ 1889.226976] ? create_object.isra.0+0x3a/0xa20 [ 1889.227959] should_failslab+0x5/0x20 [ 1889.228778] kmem_cache_alloc+0x5b/0x310 [ 1889.229673] create_object.isra.0+0x3a/0xa20 [ 1889.230628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1889.231734] kmem_cache_alloc_bulk+0x168/0x320 [ 1889.232772] io_submit_sqes+0x6fe6/0x8610 [ 1889.233689] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1889.234762] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1889.235879] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1889.236980] ? find_held_lock+0x2c/0x110 [ 1889.237885] ? io_submit_sqes+0x8610/0x8610 [ 1889.238814] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1889.239915] ? wait_for_completion_io+0x270/0x270 [ 1889.240976] ? rcu_read_lock_any_held+0x75/0xa0 [ 1889.242030] ? vfs_write+0x354/0xb10 [ 1889.242839] ? fput_many+0x2f/0x1a0 [ 1889.243398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1889.243686] ? ksys_write+0x1a9/0x260 [ 1889.246550] ? __ia32_sys_read+0xb0/0xb0 [ 1889.247426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1889.248614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1889.249755] do_syscall_64+0x33/0x40 [ 1889.250607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1889.251707] RIP: 0033:0x7f175bb3ab19 [ 1889.252503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.256596] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1889.258329] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1889.259870] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1889.261428] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1889.263029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1889.264618] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 1889.299360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 02:54:04 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) [ 1889.324457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 02:54:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000010000aaff"], 0x0) [ 1889.374617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1889.433425] FAULT_INJECTION: forcing a failure. [ 1889.433425] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.436178] CPU: 1 PID: 10116 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1889.437792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.439728] Call Trace: [ 1889.440296] dump_stack+0x107/0x167 [ 1889.441168] should_fail.cold+0x5/0xa [ 1889.442039] ? create_object.isra.0+0x3a/0xa20 [ 1889.443058] should_failslab+0x5/0x20 [ 1889.443968] kmem_cache_alloc+0x5b/0x310 [ 1889.444847] create_object.isra.0+0x3a/0xa20 [ 1889.445796] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1889.446979] __kmalloc+0x16e/0x390 [ 1889.447737] io_setup_async_rw+0x180/0x580 [ 1889.448723] ? iov_iter_restore+0x195/0x3a0 [ 1889.449683] io_read+0x775/0x11e0 [ 1889.450464] ? __is_insn_slot_addr+0x14c/0x290 [ 1889.451540] ? kiocb_done+0xc90/0xc90 [ 1889.452373] ? mark_lock+0xf5/0x2df0 [ 1889.453212] ? lock_chain_count+0x20/0x20 [ 1889.454266] ? __lock_acquire+0xbb1/0x5b00 [ 1889.455186] io_issue_sqe+0x2e8a/0x77b0 [ 1889.456037] ? find_held_lock+0x2c/0x110 [ 1889.456897] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1889.458003] ? SOFTIRQ_verbose+0x10/0x10 [ 1889.458865] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1889.459874] ? lock_downgrade+0x6d0/0x6d0 [ 1889.460763] ? io_connect+0x610/0x610 [ 1889.461593] ? lock_acquire+0x197/0x470 [ 1889.462437] ? find_held_lock+0x2c/0x110 [ 1889.463307] ? __fget_files+0x2cf/0x520 [ 1889.464160] ? lock_downgrade+0x6d0/0x6d0 [ 1889.465113] __io_queue_sqe+0x90/0x9d0 [ 1889.466058] ? io_issue_sqe+0x77b0/0x77b0 [ 1889.466964] ? __fget_files+0x2f8/0x520 [ 1889.467817] ? __io_file_supports_nowait+0x22a/0x510 [ 1889.468897] ? io_prep_rw+0x7f5/0x1050 [ 1889.469748] io_submit_sqes+0x44aa/0x8610 [ 1889.470676] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1889.471737] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1889.472767] ? find_held_lock+0x2c/0x110 [ 1889.473644] ? io_submit_sqes+0x8610/0x8610 [ 1889.474585] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1889.475697] ? wait_for_completion_io+0x270/0x270 [ 1889.476717] ? rcu_read_lock_any_held+0x75/0xa0 [ 1889.477695] ? vfs_write+0x354/0xb10 [ 1889.478470] ? fput_many+0x2f/0x1a0 [ 1889.479234] ? ksys_write+0x1a9/0x260 [ 1889.480019] ? __ia32_sys_read+0xb0/0xb0 [ 1889.480868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1889.481975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1889.483045] do_syscall_64+0x33/0x40 [ 1889.483819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1889.485011] RIP: 0033:0x7f7726e3cb19 [ 1889.485837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.489843] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1889.491567] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1889.493229] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1889.494817] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1889.496389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1889.497863] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1889.708443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1889.717091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1889.723043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1889.723563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 02:54:18 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 02:54:18 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x800000}]) io_uring_enter(r2, 0x6003, 0x22a8, 0x3, &(0x7f0000000080), 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec00000000008f84158e66f57946271acf69220bc43185f54423f543d654959c611bb55b7c162628836b9faec3f8b07d16e9bf78837fadddde1c5e840fc8bc"]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c000006000000a9cd685676972493fb5de5288c2a367df5f13900ea53d200030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8"]}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x20000004}}, 0x81) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) close(0xffffffffffffffff) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd=r0, 0x2, 0x508, 0x4, 0x3, 0x0, {0x3}}, 0x1) unshare(0x48020200) 02:54:18 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 02:54:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000600000000000aaff02"], 0x0) 02:54:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000030000aaff"], 0x0) 02:54:18 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:18 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 02:54:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000fffffff50000000000aaff02"], 0x0) [ 1902.499736] FAULT_INJECTION: forcing a failure. [ 1902.499736] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.502863] CPU: 1 PID: 10134 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1902.504707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1902.506883] Call Trace: [ 1902.507564] dump_stack+0x107/0x167 [ 1902.508547] should_fail.cold+0x5/0xa [ 1902.509535] ? create_object.isra.0+0x3a/0xa20 [ 1902.510732] should_failslab+0x5/0x20 [ 1902.511696] kmem_cache_alloc+0x5b/0x310 [ 1902.512785] ? mark_held_locks+0x9e/0xe0 [ 1902.513847] create_object.isra.0+0x3a/0xa20 [ 1902.514928] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1902.516109] kmem_cache_alloc_bulk+0x168/0x320 [ 1902.517137] io_submit_sqes+0x6fe6/0x8610 [ 1902.518084] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1902.519182] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1902.520316] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1902.521386] ? find_held_lock+0x2c/0x110 [ 1902.522303] ? io_submit_sqes+0x8610/0x8610 [ 1902.523259] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1902.524372] ? wait_for_completion_io+0x270/0x270 [ 1902.525447] ? rcu_read_lock_any_held+0x75/0xa0 [ 1902.526453] ? vfs_write+0x354/0xb10 [ 1902.527261] ? fput_many+0x2f/0x1a0 [ 1902.528051] ? ksys_write+0x1a9/0x260 [ 1902.528875] ? __ia32_sys_read+0xb0/0xb0 [ 1902.529772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1902.530895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1902.531997] do_syscall_64+0x33/0x40 [ 1902.532794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1902.533913] RIP: 0033:0x7f175bb3ab19 [ 1902.534740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1902.538776] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1902.540454] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1902.542022] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1902.543593] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1902.545165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.546742] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 1902.556248] FAULT_INJECTION: forcing a failure. [ 1902.556248] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.559030] CPU: 1 PID: 10136 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1902.560540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1902.562353] Call Trace: [ 1902.562929] dump_stack+0x107/0x167 [ 1902.563729] should_fail.cold+0x5/0xa [ 1902.564562] ? __io_queue_sqe+0x666/0x9d0 [ 1902.565465] should_failslab+0x5/0x20 [ 1902.566310] kmem_cache_alloc_trace+0x55/0x320 [ 1902.567304] ? lock_downgrade+0x6d0/0x6d0 [ 1902.568215] __io_queue_sqe+0x666/0x9d0 [ 1902.569090] ? io_issue_sqe+0x77b0/0x77b0 [ 1902.570008] ? __fget_files+0x2f8/0x520 [ 1902.570880] ? __io_file_supports_nowait+0x22a/0x510 [ 1902.571981] ? io_prep_rw+0x7f5/0x1050 [ 1902.572838] io_submit_sqes+0x44aa/0x8610 [ 1902.573781] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1902.574872] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1902.575926] ? find_held_lock+0x2c/0x110 [ 1902.576806] ? io_submit_sqes+0x8610/0x8610 [ 1902.577777] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1902.578858] ? wait_for_completion_io+0x270/0x270 [ 1902.579899] ? rcu_read_lock_any_held+0x75/0xa0 [ 1902.580932] ? vfs_write+0x354/0xb10 [ 1902.581753] ? fput_many+0x2f/0x1a0 [ 1902.582538] ? ksys_write+0x1a9/0x260 [ 1902.583365] ? __ia32_sys_read+0xb0/0xb0 [ 1902.584247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1902.585386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1902.586554] do_syscall_64+0x33/0x40 [ 1902.587367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1902.588477] RIP: 0033:0x7f7726e3cb19 [ 1902.589282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1902.593292] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1902.594940] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1902.596499] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1902.598041] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1902.599563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1902.601080] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1902.607730] FAULT_INJECTION: forcing a failure. [ 1902.607730] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.610228] CPU: 1 PID: 10139 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1902.611710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1902.613468] Call Trace: [ 1902.614072] dump_stack+0x107/0x167 [ 1902.614874] should_fail.cold+0x5/0xa [ 1902.615682] ? __io_queue_sqe+0x666/0x9d0 [ 1902.616560] should_failslab+0x5/0x20 [ 1902.617362] kmem_cache_alloc_trace+0x55/0x320 [ 1902.618343] ? lock_downgrade+0x6d0/0x6d0 [ 1902.619225] __io_queue_sqe+0x666/0x9d0 [ 1902.620074] ? io_issue_sqe+0x77b0/0x77b0 [ 1902.620953] ? __fget_files+0x2f8/0x520 [ 1902.621803] ? __io_file_supports_nowait+0x22a/0x510 [ 1902.622874] ? io_prep_rw+0x7f5/0x1050 [ 1902.623705] io_submit_sqes+0x44aa/0x8610 [ 1902.624614] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1902.625673] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1902.626698] ? find_held_lock+0x2c/0x110 [ 1902.627560] ? io_submit_sqes+0x8610/0x8610 [ 1902.628478] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1902.629493] ? wait_for_completion_io+0x270/0x270 [ 1902.630522] ? rcu_read_lock_any_held+0x75/0xa0 [ 1902.631494] ? vfs_write+0x354/0xb10 [ 1902.632274] ? fput_many+0x2f/0x1a0 [ 1902.633038] ? ksys_write+0x1a9/0x260 [ 1902.633848] ? __ia32_sys_read+0xb0/0xb0 [ 1902.634703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1902.635801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1902.636882] do_syscall_64+0x33/0x40 [ 1902.637678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1902.638759] RIP: 0033:0x7f8398de7b19 [ 1902.639540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1902.643414] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1902.645019] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1902.646524] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 02:54:18 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1902.648010] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1902.649709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1902.651192] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:54:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000050000aaff"], 0x0) 02:54:18 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000f5ffffff0000000000aaff02"], 0x0) 02:54:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000003c0000aaff"], 0x0) 02:54:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x169}}, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={&(0x7f00000001c0)=""/91, 0x5b}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000010000003800000058710500000000000000f1daea2d97174effaa140050aa9df69cf380b74041e1756411d5a1c1a9314b4fa1227ee345b532ec7d16e263a41c6cc5a4ed1a4dda4fcdd9c24928a883e3a064cd20e3e9abe75363502b8af4680d86223ad4c722546ccbe375baede80b7e8cad4111cf683ce23f7bee02aaf84e7090fb46a85a3ee7bab4bdbdecc2005a01a838d18c0f1ea9a24aea2207bf7b0aac111b51ab8cb1eb98c6cfb33194b6354a44af46f179c220df761337fe3a6d90ff5d9e3c971265adc6cdc09caf955b3bd8b97edd4fda757a2f0cc085887d0e6bfc794e1a2b7f8899dad01e6a4cd79a2b024317cfdd291000654beed94f417ca3c9405492158e36885a4a9a161487ec2773bfdb616935e3458dfe94a29cb93fccf24d24f0d59238305c8beabea8e2045c99b881974b9c05257cc78a84bfb8d722cbb72bdb427f4cfe9ffd27f8ee01f3010e4e71466e48d5d8c1d4a49ff62dd87470d3738cd030d24db3f5a115b572bc53cc994a753af15672177f4252f0c855c8da5c77fec9071f506c0d7055e2dc50d9ba3758ba813e95a7587d8d95427e28698c22721a5ed936f5e9e082f248ad7eadc9a6f92a9bd961d9ec0a546204ec32ea1d8468cc6edee8b9b03848b4e937174f9adf310a3428965216ee3a7eadb1c1", @ANYRESDEC, @ANYRES64]) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000ac0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "46dacd8396fe92"}) readv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/125, 0x7d}], 0x7) sendmsg$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x3f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf7}, 0x1c) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x3f00, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 02:54:18 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) [ 1902.914291] FAULT_INJECTION: forcing a failure. [ 1902.914291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1902.917304] CPU: 1 PID: 10161 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1902.918871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1902.920724] Call Trace: [ 1902.921315] dump_stack+0x107/0x167 [ 1902.922152] should_fail.cold+0x5/0xa [ 1902.923005] _copy_from_user+0x2e/0x1b0 [ 1902.923909] iovec_from_user+0x141/0x400 [ 1902.924818] __import_iovec+0x67/0x590 [ 1902.925692] ? SOFTIRQ_verbose+0x10/0x10 [ 1902.926596] ? lock_downgrade+0x6d0/0x6d0 [ 1902.927531] io_import_iovec+0x581/0x1120 [ 1902.928474] ? io_complete_rw+0x230/0x230 [ 1902.929403] ? lock_downgrade+0x6d0/0x6d0 [ 1902.930359] ? mark_lock+0xf5/0x2df0 [ 1902.931196] io_read+0xe14/0x11e0 [ 1902.931969] ? lock_chain_count+0x20/0x20 [ 1902.932892] ? __is_insn_slot_addr+0x14c/0x290 [ 1902.933933] ? __lock_acquire+0x1657/0x5b00 [ 1902.934897] ? kiocb_done+0xc90/0xc90 [ 1902.935749] ? mark_lock+0xf5/0x2df0 [ 1902.936585] ? lock_chain_count+0x20/0x20 [ 1902.937526] ? __lock_acquire+0x1657/0x5b00 [ 1902.938537] ? __lock_acquire+0xbb1/0x5b00 [ 1902.939499] io_issue_sqe+0x2e8a/0x77b0 [ 1902.940401] ? find_held_lock+0x2c/0x110 [ 1902.941325] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1902.942518] ? SOFTIRQ_verbose+0x10/0x10 [ 1902.943438] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1902.944506] ? lock_downgrade+0x6d0/0x6d0 [ 1902.945446] ? io_connect+0x610/0x610 [ 1902.946319] ? lock_acquire+0x197/0x470 [ 1902.947211] ? find_held_lock+0x2c/0x110 [ 1902.948133] ? __fget_files+0x2cf/0x520 [ 1902.949035] ? lock_downgrade+0x6d0/0x6d0 [ 1902.949987] __io_queue_sqe+0x90/0x9d0 [ 1902.950875] ? io_issue_sqe+0x77b0/0x77b0 [ 1902.951811] ? __fget_files+0x2f8/0x520 [ 1902.952712] ? __io_file_supports_nowait+0x22a/0x510 [ 1902.953862] ? io_prep_rw+0x7f5/0x1050 [ 1902.954753] io_submit_sqes+0x44aa/0x8610 [ 1902.955736] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1902.956867] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1902.957972] ? find_held_lock+0x2c/0x110 [ 1902.958897] ? io_submit_sqes+0x8610/0x8610 [ 1902.959878] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1902.960969] ? wait_for_completion_io+0x270/0x270 [ 1902.962088] ? rcu_read_lock_any_held+0x75/0xa0 [ 1902.963146] ? vfs_write+0x354/0xb10 [ 1902.963988] ? fput_many+0x2f/0x1a0 [ 1902.964810] ? ksys_write+0x1a9/0x260 [ 1902.965679] ? __ia32_sys_read+0xb0/0xb0 [ 1902.966605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1902.967794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1902.968971] do_syscall_64+0x33/0x40 [ 1902.969823] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1902.970980] RIP: 0033:0x7f7726e3cb19 [ 1902.971821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1902.976010] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1902.977748] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1902.979365] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1902.980988] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1902.982614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1902.984224] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:54:34 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 02:54:34 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 02:54:34 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000100aaff02"], 0x0) 02:54:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x169}}, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={&(0x7f00000001c0)=""/91, 0x5b}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64]) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000ac0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "46dacd8396fe92"}) readv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/125, 0x7d}], 0x7) sendmsg$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x3f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf7}, 0x1c) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x3f00, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 02:54:34 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:34 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 02:54:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000300000000aaff"], 0x0) [ 1918.687081] FAULT_INJECTION: forcing a failure. [ 1918.687081] name failslab, interval 1, probability 0, space 0, times 0 [ 1918.689274] CPU: 0 PID: 10180 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1918.689297] FAULT_INJECTION: forcing a failure. [ 1918.689297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.692185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1918.693493] Call Trace: [ 1918.693927] dump_stack+0x107/0x167 [ 1918.694513] should_fail.cold+0x5/0xa [ 1918.695122] ? create_object.isra.0+0x3a/0xa20 [ 1918.695829] should_failslab+0x5/0x20 [ 1918.696421] kmem_cache_alloc+0x5b/0x310 [ 1918.697070] create_object.isra.0+0x3a/0xa20 [ 1918.697762] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1918.698591] kmem_cache_alloc_trace+0x151/0x320 [ 1918.699317] ? lock_downgrade+0x6d0/0x6d0 [ 1918.699980] __io_queue_sqe+0x666/0x9d0 [ 1918.700615] ? io_issue_sqe+0x77b0/0x77b0 [ 1918.701274] ? __fget_files+0x2f8/0x520 [ 1918.701900] ? __io_file_supports_nowait+0x22a/0x510 [ 1918.702720] ? io_prep_rw+0x7f5/0x1050 [ 1918.703334] io_submit_sqes+0x44aa/0x8610 [ 1918.704026] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1918.704814] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1918.705565] ? find_held_lock+0x2c/0x110 [ 1918.706243] ? io_submit_sqes+0x8610/0x8610 [ 1918.706929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1918.707686] ? wait_for_completion_io+0x270/0x270 [ 1918.708439] ? rcu_read_lock_any_held+0x75/0xa0 [ 1918.709175] ? vfs_write+0x354/0xb10 [ 1918.709781] ? fput_many+0x2f/0x1a0 [ 1918.710358] ? ksys_write+0x1a9/0x260 [ 1918.710958] ? __ia32_sys_read+0xb0/0xb0 [ 1918.711608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1918.712445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1918.713273] do_syscall_64+0x33/0x40 [ 1918.713860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1918.714662] RIP: 0033:0x7f8398de7b19 [ 1918.715270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1918.718209] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1918.719429] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1918.720575] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1918.721695] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1918.722854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1918.724011] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1918.725202] CPU: 1 PID: 10168 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1918.726739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1918.728483] Call Trace: [ 1918.729054] dump_stack+0x107/0x167 [ 1918.729837] should_fail.cold+0x5/0xa [ 1918.730651] _copy_from_user+0x2e/0x1b0 [ 1918.731501] iovec_from_user+0x141/0x400 [ 1918.732366] __import_iovec+0x67/0x590 [ 1918.733193] ? SOFTIRQ_verbose+0x10/0x10 [ 1918.734056] ? lock_downgrade+0x6d0/0x6d0 [ 1918.734941] io_import_iovec+0x581/0x1120 [ 1918.735824] ? io_complete_rw+0x230/0x230 [ 1918.736700] ? lock_downgrade+0x6d0/0x6d0 [ 1918.737576] ? mark_lock+0xf5/0x2df0 [ 1918.738378] io_read+0xe14/0x11e0 [ 1918.739104] ? lock_chain_count+0x20/0x20 [ 1918.739982] ? __is_insn_slot_addr+0x14c/0x290 [ 1918.740948] ? __lock_acquire+0x1657/0x5b00 [ 1918.741869] ? kiocb_done+0xc90/0xc90 [ 1918.742675] ? mark_lock+0xf5/0x2df0 [ 1918.743465] ? lock_chain_count+0x20/0x20 [ 1918.744361] ? __lock_acquire+0x1657/0x5b00 [ 1918.745293] ? __lock_acquire+0xbb1/0x5b00 [ 1918.746205] io_issue_sqe+0x2e8a/0x77b0 [ 1918.747050] ? find_held_lock+0x2c/0x110 [ 1918.747915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1918.749016] ? SOFTIRQ_verbose+0x10/0x10 [ 1918.749884] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1918.750877] ? lock_downgrade+0x6d0/0x6d0 [ 1918.751754] ? io_connect+0x610/0x610 [ 1918.752566] ? lock_acquire+0x197/0x470 [ 1918.753408] ? find_held_lock+0x2c/0x110 [ 1918.754276] ? __fget_files+0x2cf/0x520 [ 1918.755117] ? lock_downgrade+0x6d0/0x6d0 [ 1918.756008] __io_queue_sqe+0x90/0x9d0 [ 1918.756844] ? io_issue_sqe+0x77b0/0x77b0 [ 1918.757717] ? __fget_files+0x2f8/0x520 [ 1918.758564] ? __io_file_supports_nowait+0x22a/0x510 [ 1918.759634] ? io_prep_rw+0x7f5/0x1050 [ 1918.760465] io_submit_sqes+0x44aa/0x8610 [ 1918.761368] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1918.762419] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1918.763443] ? find_held_lock+0x2c/0x110 [ 1918.764304] ? io_submit_sqes+0x8610/0x8610 [ 1918.765218] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1918.766248] ? wait_for_completion_io+0x270/0x270 [ 1918.767265] ? rcu_read_lock_any_held+0x75/0xa0 [ 1918.768248] ? vfs_write+0x354/0xb10 [ 1918.769034] ? fput_many+0x2f/0x1a0 [ 1918.769813] ? ksys_write+0x1a9/0x260 [ 1918.770611] ? do_sync_core+0x21/0x30 [ 1918.771424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1918.772539] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1918.773622] do_syscall_64+0x33/0x40 [ 1918.774410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1918.775479] RIP: 0033:0x7f7726e3cb19 [ 1918.776262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1918.780173] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1918.781785] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1918.783295] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1918.784802] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1918.786322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1918.787830] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:54:34 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1918.816309] FAULT_INJECTION: forcing a failure. [ 1918.816309] name failslab, interval 1, probability 0, space 0, times 0 [ 1918.818894] CPU: 1 PID: 10174 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1918.820378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1918.822130] Call Trace: [ 1918.822689] dump_stack+0x107/0x167 [ 1918.823476] should_fail.cold+0x5/0xa [ 1918.824298] ? create_object.isra.0+0x3a/0xa20 [ 1918.825268] should_failslab+0x5/0x20 [ 1918.826086] kmem_cache_alloc+0x5b/0x310 [ 1918.826956] ? mark_held_locks+0x9e/0xe0 [ 1918.827817] create_object.isra.0+0x3a/0xa20 [ 1918.828747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1918.829830] kmem_cache_alloc_bulk+0x168/0x320 [ 1918.830800] io_submit_sqes+0x6fe6/0x8610 [ 1918.831692] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1918.832734] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1918.833791] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1918.834813] ? find_held_lock+0x2c/0x110 [ 1918.835685] ? io_submit_sqes+0x8610/0x8610 [ 1918.836608] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1918.837631] ? wait_for_completion_io+0x270/0x270 [ 1918.838657] ? rcu_read_lock_any_held+0x75/0xa0 [ 1918.839638] ? vfs_write+0x354/0xb10 [ 1918.840426] ? fput_many+0x2f/0x1a0 [ 1918.841194] ? ksys_write+0x1a9/0x260 [ 1918.842006] ? __ia32_sys_read+0xb0/0xb0 [ 1918.842878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1918.843986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1918.845080] do_syscall_64+0x33/0x40 [ 1918.845921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1918.846998] RIP: 0033:0x7f175bb3ab19 [ 1918.847779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1918.851661] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1918.853294] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1918.854815] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1918.856320] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1918.857842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1918.859351] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:54:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000300aaff02"], 0x0) 02:54:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000500000000aaff"], 0x0) 02:54:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000500aaff02"], 0x0) 02:54:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000003c00000000aaff"], 0x0) 02:54:34 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:54:34 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000004c0)=0xde, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = signalfd4(r2, &(0x7f0000000040)={[0x10000]}, 0x8, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r3, &(0x7f0000000080)=0x80, &(0x7f00000003c0)=@sco, 0x0, 0x100800, 0x1, {0x0, r4}}, 0x7fff) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000000101de39730d282a92b3700200000000000000000000000006001240000200002000164000000006000000070000000900000002000000d9000000040000000106001240000300000800034000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)=""/172, &(0x7f0000000480)=0xac) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x24, 0x1, 0x4, 0xa, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x54000}, 0x40408c0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="681220c7c200000000010104000000000000000002000000240001801400018008000100ffffffff08000200e00000010c0002800500010000000007000000000000008005000100000000001400018008000100ac14140008000200e0000001080007400000001f04000f80"], 0x68}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r6, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r5, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6, 0x1, 0x10000}) sendmsg$nl_generic(r5, &(0x7f0000000a80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000540)={0x4f8, 0x20, 0x200, 0x70bd2c, 0x25dfdbfd, {0x1}, [@nested={0x45d, 0x24, 0x0, 0x1, [@generic="68ab2e5b82177d9781904680fffa027347949cbf45a348beb50502417e94eebb3493bf5b1cb571d5fe54426eea14429ed330b2290a1e0b4e3a391219b34106381563732818cca046e4e7682ba25fb8ad5450044389f05a80b12a8d2d1467dbe4c32bf2a8615d7096fc309879e56828be29f390f07ba185e7614d3d136e8e44aea99c8fde42fb16a06c94d9ba993aea4222de2d44e1441d", @typed={0x4, 0x40}, @generic="34281e19ff1b668e80b8c549ac16c178de3ec60086b7600d188a469d29d0c9cb0d9ad759dbc55d89fd1cdada043925b73a23f8aa44a0afb462b3fa38c02e17bb6810ec24853764ebf9e2148c43b62debfd1f1c06cc4d27d9817b626cec77777accbb1fdac9c62d5f2e97119f635bd6764ad94e97a005ac757fd6596d24b255516e95253bfcef08de77b95602b20568690d2dfc93102cdce8a0daa28c16ca435b09301d1f8be97d8fd68fffcdcb", @generic="bdcdc12e1ffa7bcc978ba52083f37a1699ee310824a3ff95d83bf5d2a8921dc24c86bfd9d75646fe98be522ec44771d46d94828d5584949e942cec5735a1e255ebbaa2e429219d04dec6d8ebd14b9d623be9f1c7b9384a88c1b3852f31df0775c46a1271028c9966438f7b6fbb27bb9097dff1c4adb4bdc0881151dfa68036a3d199a44c48daf9c2ffea47c75c9f10636f9e33d6ee90dbf65709149bdbf3e2074e087087393b6d2a8a0c7ac898ee", @generic="c0877589c36e16d75cf332c9b0544959d072092bf044151627b4d751613a0d1193e8b988a5179d5c4f2d5367654ad468533ea1ab7a7c735b8c62ea66d220a25b5ea98b5df234074dbd5ebbbf911e84544732b5883618d812ee0c964e5b796baeb7cf3475b3963b113bd364d589f5bc952ddced3db8625ab28eadcad1fcd58bad61c85dac08096f09b7caa069fe598b88af9bbaa3b9f7bcb760", @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x4, 0x24}, @generic="f2e91f231b2c6277815b2d92d19bf51c89e2e51463d00964cffe26249f6e49449b038328f14c3a5af03c", @generic="6f27073ea4430719e0efff3d9acc737f0959be66d63ecc074ee7a0172f6d2270a2a0c9eee34f5527df5967beb65fc00e2cead087a01df91c02937c61e431294ece89794132f001b811761875300a3d2d59385979515787ed817e21b2e45478c3d8106575566f19a5a194be1dc2786475d885ccb583af2a4b33360ceb3f7422fb7bb5964770238e70f125d2c345fd4f6f39222816116ba8f7162bda6451ba68d8dc4596da14089160cf3965e3b9aaf4d98a89f0a949ab43e06bac5963bca5cf26a42049cd4bb62d996526cbc6dab879934ab446bd6c33efa34c171372b8a8ace9798a7a022edf", @generic="4925c4071a066928e1f4b5483413d9aa42ded26380b3792302e8d8c8efdb5d922e9045abdef0ae080c2be6047c2fd9647e513b278c932db753e180195b6efee6555d658242de24fc3c060d7e5ebf114e9aeaff9ea7246ec2e9ab5999f2fda09d39364dfb887e7229c84b792b79b75e5821da881363e02cbd352fb08365f263e064866fbb55dcb1fe463bef82d138b194810d57dd49edee38479ba31176e1f4fc878066bbb27e4decc0caac6e25fb"]}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x5}, @nested={0x7b, 0x32, 0x0, 0x1, [@generic="f3f832f0dcc141623552cbbe913e67a86703728931aeabee5b575dbdf85bbc584d7cf4de92797eaaedef46e1ef58f83f97c52c42d3a99f9595e9a1dce52c91dbaac3c884d5d225d078b3713151fd6c12d57dd704cd6681fe3b56331abfa0399622167a9c3c87901f2e28282eedb9b524d5ccd63d48c8de"]}]}, 0x4f8}}, 0x0) [ 1919.072592] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1919.106077] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 02:54:46 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 02:54:46 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 02:54:46 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:54:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000003c00aaff02"], 0x0) 02:54:46 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000003000000aaff"], 0x0) 02:54:46 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 02:54:46 executing program 3: ftruncate(0xffffffffffffffff, 0x10000) r0 = fsmount(0xffffffffffffffff, 0x0, 0x9) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}]]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0xc71dc5a01f194db2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe783, 0x68}}}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x4, 0x4}}, @ntf_ch_w}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048081}, 0x40) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000440)='PPPPPP', &(0x7f0000000480)='PPPPPP', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000004c0)={0x8}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6c1a08d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff0000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44044}, 0x4040040) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r5) r6 = dup3(r0, r0, 0x80000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x20040041) 02:54:46 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1931.078038] FAULT_INJECTION: forcing a failure. [ 1931.078038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1931.079618] CPU: 1 PID: 10213 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1931.080476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1931.081500] Call Trace: [ 1931.081833] dump_stack+0x107/0x167 [ 1931.082317] should_fail.cold+0x5/0xa [ 1931.082795] _copy_from_user+0x2e/0x1b0 [ 1931.083294] iovec_from_user+0x141/0x400 [ 1931.083801] __import_iovec+0x67/0x590 [ 1931.084283] ? SOFTIRQ_verbose+0x10/0x10 [ 1931.084789] ? lock_downgrade+0x6d0/0x6d0 [ 1931.085307] io_import_iovec+0x581/0x1120 [ 1931.085832] ? io_complete_rw+0x230/0x230 [ 1931.086352] ? register_lock_class+0xbb/0x17b0 [ 1931.086920] ? lock_downgrade+0x6d0/0x6d0 [ 1931.087446] ? mark_lock+0xf5/0x2df0 [ 1931.087911] io_read+0xe14/0x11e0 [ 1931.088341] ? lock_chain_count+0x20/0x20 [ 1931.088859] ? __is_insn_slot_addr+0x14c/0x290 [ 1931.089420] ? register_lock_class+0xbb/0x17b0 [ 1931.089998] ? __lock_acquire+0x1657/0x5b00 [ 1931.090528] ? kiocb_done+0xc90/0xc90 [ 1931.090996] ? mark_lock+0xf5/0x2df0 [ 1931.091527] ? lock_chain_count+0x20/0x20 [ 1931.092041] ? __lock_acquire+0x1657/0x5b00 [ 1931.092588] ? __lock_acquire+0xbb1/0x5b00 [ 1931.093109] io_issue_sqe+0x2e8a/0x77b0 [ 1931.093600] ? find_held_lock+0x2c/0x110 [ 1931.094112] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1931.094754] ? SOFTIRQ_verbose+0x10/0x10 [ 1931.095254] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1931.095836] ? lock_downgrade+0x6d0/0x6d0 [ 1931.096348] ? io_connect+0x610/0x610 [ 1931.096820] ? lock_acquire+0x197/0x470 [ 1931.097310] ? find_held_lock+0x2c/0x110 [ 1931.097816] ? __fget_files+0x2cf/0x520 [ 1931.098315] ? lock_downgrade+0x6d0/0x6d0 [ 1931.098827] __io_queue_sqe+0x90/0x9d0 [ 1931.099309] ? io_issue_sqe+0x77b0/0x77b0 [ 1931.099817] ? __fget_files+0x2f8/0x520 [ 1931.100309] ? __io_file_supports_nowait+0x22a/0x510 [ 1931.100936] ? io_prep_rw+0x7f5/0x1050 [ 1931.101420] io_submit_sqes+0x44aa/0x8610 [ 1931.101966] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.102581] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.103175] ? find_held_lock+0x2c/0x110 [ 1931.103690] ? io_submit_sqes+0x8610/0x8610 [ 1931.104230] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1931.104829] ? wait_for_completion_io+0x270/0x270 [ 1931.105426] ? rcu_read_lock_any_held+0x75/0xa0 [ 1931.106007] ? vfs_write+0x354/0xb10 [ 1931.106470] ? fput_many+0x2f/0x1a0 [ 1931.106920] ? ksys_write+0x1a9/0x260 [ 1931.107388] ? __ia32_sys_read+0xb0/0xb0 [ 1931.107893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1931.108538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1931.109177] do_syscall_64+0x33/0x40 [ 1931.109636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1931.110287] RIP: 0033:0x7f8398de7b19 [ 1931.110744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1931.113021] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1931.113966] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1931.114850] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1931.115722] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.116596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1931.117471] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1931.141182] FAULT_INJECTION: forcing a failure. [ 1931.141182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1931.144304] CPU: 0 PID: 10208 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1931.145935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1931.147867] Call Trace: [ 1931.148484] dump_stack+0x107/0x167 [ 1931.149340] should_fail.cold+0x5/0xa [ 1931.150244] _copy_from_user+0x2e/0x1b0 [ 1931.151168] iovec_from_user+0x141/0x400 [ 1931.152122] __import_iovec+0x67/0x590 [ 1931.153026] ? SOFTIRQ_verbose+0x10/0x10 [ 1931.153976] ? lock_downgrade+0x6d0/0x6d0 [ 1931.154951] io_import_iovec+0x581/0x1120 [ 1931.155910] ? io_complete_rw+0x230/0x230 02:54:46 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1931.156864] ? lock_downgrade+0x6d0/0x6d0 [ 1931.158079] ? mark_lock+0xf5/0x2df0 [ 1931.158934] io_read+0xe14/0x11e0 [ 1931.159731] ? lock_chain_count+0x20/0x20 [ 1931.160682] ? __is_insn_slot_addr+0x14c/0x290 [ 1931.161735] ? __lock_acquire+0x1657/0x5b00 [ 1931.162745] ? kiocb_done+0xc90/0xc90 [ 1931.163616] ? mark_lock+0xf5/0x2df0 [ 1931.164482] ? lock_chain_count+0x20/0x20 [ 1931.165444] ? __lock_acquire+0x1657/0x5b00 [ 1931.166483] ? __lock_acquire+0xbb1/0x5b00 [ 1931.167462] io_issue_sqe+0x2e8a/0x77b0 [ 1931.168387] ? find_held_lock+0x2c/0x110 [ 1931.169323] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1931.170536] ? SOFTIRQ_verbose+0x10/0x10 [ 1931.171486] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1931.172563] ? lock_downgrade+0x6d0/0x6d0 [ 1931.173509] ? io_connect+0x610/0x610 [ 1931.174395] ? lock_acquire+0x197/0x470 [ 1931.175308] ? find_held_lock+0x2c/0x110 [ 1931.176234] ? __fget_files+0x2cf/0x520 [ 1931.177139] ? lock_downgrade+0x6d0/0x6d0 [ 1931.178092] __io_queue_sqe+0x90/0x9d0 [ 1931.178982] ? io_issue_sqe+0x77b0/0x77b0 [ 1931.179920] ? __fget_files+0x2f8/0x520 [ 1931.180822] ? __io_file_supports_nowait+0x22a/0x510 [ 1931.181980] ? io_prep_rw+0x7f5/0x1050 [ 1931.182881] io_submit_sqes+0x44aa/0x8610 [ 1931.183850] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.185006] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.186113] ? find_held_lock+0x2c/0x110 [ 1931.187032] ? io_submit_sqes+0x8610/0x8610 [ 1931.188017] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1931.189107] ? wait_for_completion_io+0x270/0x270 [ 1931.190235] ? rcu_read_lock_any_held+0x75/0xa0 [ 1931.191277] ? vfs_write+0x354/0xb10 [ 1931.192114] ? fput_many+0x2f/0x1a0 [ 1931.192939] ? ksys_write+0x1a9/0x260 [ 1931.193796] ? __ia32_sys_read+0xb0/0xb0 [ 1931.194736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1931.195926] ? syscall_enter_from_user_mode+0x1d/0x50 02:54:46 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1931.197105] do_syscall_64+0x33/0x40 [ 1931.198037] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1931.199200] RIP: 0033:0x7f7726e3cb19 [ 1931.200039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1931.204215] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1931.205984] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1931.207628] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1931.209283] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.210934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1931.212573] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1931.222730] FAULT_INJECTION: forcing a failure. [ 1931.222730] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.224105] CPU: 1 PID: 10219 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1931.224928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1931.225964] Call Trace: [ 1931.226298] dump_stack+0x107/0x167 [ 1931.226754] should_fail.cold+0x5/0xa [ 1931.227234] ? create_object.isra.0+0x3a/0xa20 [ 1931.227801] should_failslab+0x5/0x20 [ 1931.228274] kmem_cache_alloc+0x5b/0x310 [ 1931.228779] ? mark_held_locks+0x9e/0xe0 [ 1931.229282] create_object.isra.0+0x3a/0xa20 [ 1931.229820] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1931.230462] kmem_cache_alloc_bulk+0x168/0x320 [ 1931.231031] io_submit_sqes+0x6fe6/0x8610 [ 1931.231545] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1931.232153] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.232762] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.233352] ? find_held_lock+0x2c/0x110 [ 1931.233853] ? io_submit_sqes+0x8610/0x8610 [ 1931.234398] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1931.234987] ? wait_for_completion_io+0x270/0x270 [ 1931.235580] ? rcu_read_lock_any_held+0x75/0xa0 [ 1931.236145] ? vfs_write+0x354/0xb10 [ 1931.236599] ? fput_many+0x2f/0x1a0 [ 1931.237044] ? ksys_write+0x1a9/0x260 [ 1931.237509] ? __ia32_sys_read+0xb0/0xb0 [ 1931.238021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1931.238673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1931.239316] do_syscall_64+0x33/0x40 [ 1931.239777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1931.240418] RIP: 0033:0x7f175bb3ab19 [ 1931.240873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1931.243166] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1931.244108] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1931.244996] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1931.245884] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.246768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.247645] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:54:46 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 02:54:46 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1931.322982] FAULT_INJECTION: forcing a failure. [ 1931.322982] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.324340] CPU: 1 PID: 10233 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1931.325155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1931.326150] Call Trace: [ 1931.326465] dump_stack+0x107/0x167 [ 1931.326898] should_fail.cold+0x5/0xa [ 1931.327348] should_failslab+0x5/0x20 [ 1931.327799] kmem_cache_alloc_bulk+0x4b/0x320 [ 1931.328336] io_submit_sqes+0x6fe6/0x8610 [ 1931.328829] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1931.329415] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.330020] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.330594] ? find_held_lock+0x2c/0x110 [ 1931.331082] ? io_submit_sqes+0x8610/0x8610 [ 1931.331600] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1931.332167] ? wait_for_completion_io+0x270/0x270 [ 1931.332738] ? rcu_read_lock_any_held+0x75/0xa0 [ 1931.333287] ? vfs_write+0x354/0xb10 [ 1931.333727] ? fput_many+0x2f/0x1a0 [ 1931.334170] ? ksys_write+0x1a9/0x260 [ 1931.334618] ? __ia32_sys_read+0xb0/0xb0 [ 1931.335099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1931.335718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1931.336337] do_syscall_64+0x33/0x40 [ 1931.336778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1931.337398] RIP: 0033:0x7fa33f43fb19 [ 1931.337837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1931.339999] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1931.340894] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 1931.341723] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1931.342566] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.343399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.344231] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:54:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000004000aaff02"], 0x0) 02:54:46 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 02:54:46 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000005000000aaff"], 0x0) [ 1931.396422] FAULT_INJECTION: forcing a failure. [ 1931.396422] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.397817] CPU: 1 PID: 10239 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1931.398630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1931.399601] Call Trace: [ 1931.399915] dump_stack+0x107/0x167 [ 1931.400344] should_fail.cold+0x5/0xa [ 1931.400791] ? create_object.isra.0+0x3a/0xa20 [ 1931.401332] should_failslab+0x5/0x20 [ 1931.401779] kmem_cache_alloc+0x5b/0x310 [ 1931.402276] create_object.isra.0+0x3a/0xa20 [ 1931.402789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1931.403387] __kmalloc+0x16e/0x390 [ 1931.403806] io_setup_async_rw+0x180/0x580 [ 1931.404299] ? iov_iter_restore+0x195/0x3a0 [ 1931.404803] io_read+0x775/0x11e0 [ 1931.405212] ? __is_insn_slot_addr+0x14c/0x290 [ 1931.405756] ? kiocb_done+0xc90/0xc90 [ 1931.406213] ? mark_lock+0xf5/0x2df0 [ 1931.406652] ? lock_chain_count+0x20/0x20 [ 1931.407160] ? __lock_acquire+0xbb1/0x5b00 [ 1931.407657] io_issue_sqe+0x2e8a/0x77b0 [ 1931.408128] ? find_held_lock+0x2c/0x110 [ 1931.408602] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1931.409215] ? SOFTIRQ_verbose+0x10/0x10 [ 1931.409686] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1931.410247] ? lock_downgrade+0x6d0/0x6d0 [ 1931.410735] ? io_connect+0x610/0x610 [ 1931.411181] ? lock_acquire+0x197/0x470 [ 1931.411644] ? find_held_lock+0x2c/0x110 [ 1931.412127] ? __fget_files+0x2cf/0x520 [ 1931.412590] ? lock_downgrade+0x6d0/0x6d0 [ 1931.413080] __io_queue_sqe+0x90/0x9d0 [ 1931.413541] ? io_issue_sqe+0x77b0/0x77b0 [ 1931.414031] ? __fget_files+0x2f8/0x520 [ 1931.414494] ? __io_file_supports_nowait+0x22a/0x510 [ 1931.415094] ? io_prep_rw+0x7f5/0x1050 [ 1931.415550] io_submit_sqes+0x44aa/0x8610 [ 1931.416053] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.416630] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1931.417200] ? find_held_lock+0x2c/0x110 [ 1931.417680] ? io_submit_sqes+0x8610/0x8610 [ 1931.418204] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1931.418769] ? wait_for_completion_io+0x270/0x270 [ 1931.419335] ? rcu_read_lock_any_held+0x75/0xa0 [ 1931.419877] ? vfs_write+0x354/0xb10 [ 1931.420312] ? fput_many+0x2f/0x1a0 [ 1931.420738] ? ksys_write+0x1a9/0x260 [ 1931.421189] ? __ia32_sys_read+0xb0/0xb0 [ 1931.421663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1931.422298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1931.422896] do_syscall_64+0x33/0x40 [ 1931.423330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1931.423926] RIP: 0033:0x7f7726e3cb19 [ 1931.424361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1931.426519] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1931.427410] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1931.428254] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1931.429084] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.429931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1931.430767] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:54:47 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:54:47 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000003c000000aaff"], 0x0) 02:55:05 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 02:55:05 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 02:55:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4, 0x0, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x106) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r4, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x1, 0x10000}) connect$inet(r4, &(0x7f0000000080)={0x2, 0x9, @rand_addr=0x64010101}, 0x10) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) dup2(r1, r2) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r1, r0, 0x0, 0x500000001) 02:55:05 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 02:55:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000006000aaff02"], 0x0) 02:55:05 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:55:05 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000100aaff"], 0x0) 02:55:05 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 1950.403609] FAULT_INJECTION: forcing a failure. [ 1950.403609] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.404997] CPU: 1 PID: 10264 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1950.405806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1950.406790] Call Trace: [ 1950.407105] dump_stack+0x107/0x167 [ 1950.407533] should_fail.cold+0x5/0xa [ 1950.407981] ? create_object.isra.0+0x3a/0xa20 [ 1950.408518] should_failslab+0x5/0x20 [ 1950.408975] kmem_cache_alloc+0x5b/0x310 [ 1950.409451] ? mark_held_locks+0x9e/0xe0 [ 1950.409931] create_object.isra.0+0x3a/0xa20 [ 1950.410448] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1950.411040] kmem_cache_alloc_bulk+0x168/0x320 [ 1950.411583] io_submit_sqes+0x6fe6/0x8610 [ 1950.412078] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1950.412665] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.413252] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.413817] ? find_held_lock+0x2c/0x110 [ 1950.414309] ? io_submit_sqes+0x8610/0x8610 [ 1950.414810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1950.415372] ? wait_for_completion_io+0x270/0x270 [ 1950.415931] ? rcu_read_lock_any_held+0x75/0xa0 [ 1950.416469] ? vfs_write+0x354/0xb10 [ 1950.416916] ? fput_many+0x2f/0x1a0 [ 1950.417341] ? ksys_write+0x1a9/0x260 [ 1950.417786] ? __ia32_sys_read+0xb0/0xb0 [ 1950.418268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1950.418874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1950.419473] do_syscall_64+0x33/0x40 [ 1950.419908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1950.420507] RIP: 0033:0x7f175bb3ab19 [ 1950.420719] FAULT_INJECTION: forcing a failure. [ 1950.420719] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.420938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.420945] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1950.420958] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1950.420964] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1950.420970] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.420992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.429695] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 1950.430561] CPU: 0 PID: 10274 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1950.432064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1950.433855] Call Trace: [ 1950.434441] dump_stack+0x107/0x167 [ 1950.435227] should_fail.cold+0x5/0xa [ 1950.436051] ? create_object.isra.0+0x3a/0xa20 [ 1950.437030] should_failslab+0x5/0x20 [ 1950.437866] kmem_cache_alloc+0x5b/0x310 [ 1950.438753] create_object.isra.0+0x3a/0xa20 [ 1950.439698] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1950.440797] kmem_cache_alloc_bulk+0x168/0x320 [ 1950.441791] io_submit_sqes+0x6fe6/0x8610 [ 1950.442702] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1950.443775] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.444844] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.445894] ? find_held_lock+0x2c/0x110 [ 1950.446779] ? io_submit_sqes+0x8610/0x8610 [ 1950.447708] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1950.448744] ? wait_for_completion_io+0x270/0x270 [ 1950.449777] ? rcu_read_lock_any_held+0x75/0xa0 [ 1950.450836] ? vfs_write+0x354/0xb10 [ 1950.451631] ? fput_many+0x2f/0x1a0 [ 1950.452418] ? ksys_write+0x1a9/0x260 [ 1950.453235] ? __ia32_sys_read+0xb0/0xb0 [ 1950.454108] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1950.455250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1950.456355] do_syscall_64+0x33/0x40 [ 1950.457151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1950.458261] RIP: 0033:0x7fa33f43fb19 [ 1950.459064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.463000] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1950.464632] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 1950.466168] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1950.467693] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.469227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.470774] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 1950.480475] FAULT_INJECTION: forcing a failure. [ 1950.480475] name failslab, interval 1, probability 0, space 0, times 0 02:55:06 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1950.483223] CPU: 0 PID: 10263 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1950.484889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1950.486715] Call Trace: [ 1950.487286] dump_stack+0x107/0x167 [ 1950.488085] should_fail.cold+0x5/0xa [ 1950.488917] ? __io_queue_sqe+0x666/0x9d0 [ 1950.489822] should_failslab+0x5/0x20 [ 1950.490660] kmem_cache_alloc_trace+0x55/0x320 [ 1950.491658] ? lock_downgrade+0x6d0/0x6d0 [ 1950.492566] __io_queue_sqe+0x666/0x9d0 [ 1950.493440] ? io_issue_sqe+0x77b0/0x77b0 [ 1950.494349] ? __fget_files+0x2f8/0x520 [ 1950.495218] ? __io_file_supports_nowait+0x22a/0x510 [ 1950.496327] ? io_prep_rw+0x7f5/0x1050 [ 1950.497187] io_submit_sqes+0x44aa/0x8610 [ 1950.498139] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.499233] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.500296] ? find_held_lock+0x2c/0x110 [ 1950.501190] ? io_submit_sqes+0x8610/0x8610 [ 1950.502152] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1950.503207] ? wait_for_completion_io+0x270/0x270 [ 1950.504261] ? rcu_read_lock_any_held+0x75/0xa0 [ 1950.505284] ? vfs_write+0x354/0xb10 [ 1950.506099] ? fput_many+0x2f/0x1a0 [ 1950.506907] ? ksys_write+0x1a9/0x260 [ 1950.507740] ? __ia32_sys_read+0xb0/0xb0 [ 1950.508636] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1950.509778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1950.510930] do_syscall_64+0x33/0x40 [ 1950.511750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1950.512870] RIP: 0033:0x7f7726e3cb19 [ 1950.513685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.517733] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1950.519412] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1950.520987] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1950.522564] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.524132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1950.525699] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1950.530785] FAULT_INJECTION: forcing a failure. [ 1950.530785] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.532733] CPU: 1 PID: 10268 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1950.533554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1950.534537] Call Trace: [ 1950.534852] dump_stack+0x107/0x167 [ 1950.535281] should_fail.cold+0x5/0xa [ 1950.535742] ? io_setup_async_rw+0x180/0x580 [ 1950.536275] should_failslab+0x5/0x20 [ 1950.536731] __kmalloc+0x72/0x390 [ 1950.537141] io_setup_async_rw+0x180/0x580 [ 1950.537633] ? iov_iter_restore+0x195/0x3a0 [ 1950.538147] io_read+0x775/0x11e0 [ 1950.538556] ? __is_insn_slot_addr+0x14c/0x290 [ 1950.539301] ? register_lock_class+0xbb/0x17b0 [ 1950.539902] ? kiocb_done+0xc90/0xc90 [ 1950.540345] ? mark_lock+0xf5/0x2df0 [ 1950.540785] ? lock_chain_count+0x20/0x20 [ 1950.541298] ? __lock_acquire+0xbb1/0x5b00 [ 1950.541803] io_issue_sqe+0x2e8a/0x77b0 [ 1950.542279] ? find_held_lock+0x2c/0x110 [ 1950.542752] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1950.543365] ? SOFTIRQ_verbose+0x10/0x10 [ 1950.543836] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1950.544386] ? lock_downgrade+0x6d0/0x6d0 [ 1950.544869] ? io_connect+0x610/0x610 [ 1950.545315] ? lock_acquire+0x197/0x470 [ 1950.545770] ? find_held_lock+0x2c/0x110 [ 1950.546255] ? __fget_files+0x2cf/0x520 [ 1950.546721] ? lock_downgrade+0x6d0/0x6d0 [ 1950.547203] __io_queue_sqe+0x90/0x9d0 [ 1950.547661] ? io_issue_sqe+0x77b0/0x77b0 [ 1950.548146] ? __fget_files+0x2f8/0x520 [ 1950.548600] ? __io_file_supports_nowait+0x22a/0x510 [ 1950.549205] ? io_prep_rw+0x7f5/0x1050 [ 1950.549663] io_submit_sqes+0x44aa/0x8610 [ 1950.550169] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.550744] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.551299] ? find_held_lock+0x2c/0x110 [ 1950.551778] ? io_submit_sqes+0x8610/0x8610 [ 1950.552286] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1950.552844] ? wait_for_completion_io+0x270/0x270 [ 1950.553404] ? rcu_read_lock_any_held+0x75/0xa0 [ 1950.553949] ? vfs_write+0x354/0xb10 [ 1950.554392] ? fput_many+0x2f/0x1a0 [ 1950.554811] ? ksys_write+0x1a9/0x260 [ 1950.555262] ? __ia32_sys_read+0xb0/0xb0 [ 1950.555736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1950.556343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1950.556949] do_syscall_64+0x33/0x40 [ 1950.557380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1950.557968] RIP: 0033:0x7f8398de7b19 [ 1950.558405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.560527] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1950.561423] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1950.562257] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1950.563090] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.563912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1950.564731] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:55:06 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000300aaff"], 0x0) 02:55:06 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:55:06 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 02:55:06 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000fffffff500aaff02"], 0x0) 02:55:06 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000500aaff"], 0x0) 02:55:06 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1950.716508] FAULT_INJECTION: forcing a failure. [ 1950.716508] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.717817] CPU: 1 PID: 10290 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1950.718622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1950.719527] Call Trace: [ 1950.719842] dump_stack+0x107/0x167 [ 1950.720258] should_fail.cold+0x5/0xa [ 1950.720696] ? io_setup_async_rw+0x180/0x580 [ 1950.721210] should_failslab+0x5/0x20 [ 1950.721657] __kmalloc+0x72/0x390 [ 1950.722060] io_setup_async_rw+0x180/0x580 [ 1950.722561] ? iov_iter_restore+0x195/0x3a0 [ 1950.723057] io_read+0x775/0x11e0 [ 1950.723436] ? __is_insn_slot_addr+0x14c/0x290 [ 1950.723975] ? kiocb_done+0xc90/0xc90 [ 1950.724408] ? mark_lock+0xf5/0x2df0 [ 1950.724815] ? lock_chain_count+0x20/0x20 [ 1950.725318] ? __lock_acquire+0xbb1/0x5b00 [ 1950.725803] io_issue_sqe+0x2e8a/0x77b0 [ 1950.726250] ? find_held_lock+0x2c/0x110 [ 1950.726719] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1950.727284] ? SOFTIRQ_verbose+0x10/0x10 [ 1950.727746] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1950.728258] ? lock_downgrade+0x6d0/0x6d0 [ 1950.728727] ? io_connect+0x610/0x610 [ 1950.729144] ? lock_acquire+0x197/0x470 [ 1950.729600] ? find_held_lock+0x2c/0x110 [ 1950.730055] ? __fget_files+0x2cf/0x520 [ 1950.730516] ? lock_downgrade+0x6d0/0x6d0 [ 1950.731000] __io_queue_sqe+0x90/0x9d0 [ 1950.731452] ? io_issue_sqe+0x77b0/0x77b0 [ 1950.731916] ? __fget_files+0x2f8/0x520 [ 1950.732377] ? __io_file_supports_nowait+0x22a/0x510 [ 1950.732964] ? io_prep_rw+0x7f5/0x1050 [ 1950.733410] io_submit_sqes+0x44aa/0x8610 [ 1950.733900] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.734474] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.735023] ? find_held_lock+0x2c/0x110 [ 1950.735490] ? io_submit_sqes+0x8610/0x8610 [ 1950.735959] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1950.736514] ? wait_for_completion_io+0x270/0x270 [ 1950.737081] ? rcu_read_lock_any_held+0x75/0xa0 [ 1950.737626] ? vfs_write+0x354/0xb10 [ 1950.738049] ? fput_many+0x2f/0x1a0 [ 1950.738467] ? ksys_write+0x1a9/0x260 [ 1950.738906] ? __ia32_sys_read+0xb0/0xb0 [ 1950.739372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1950.739965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1950.740555] do_syscall_64+0x33/0x40 [ 1950.740988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1950.741539] RIP: 0033:0x7f7726e3cb19 [ 1950.741968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.743944] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1950.744817] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1950.745638] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1950.746461] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.747266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1950.748079] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:55:06 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000003c00aaff"], 0x0) [ 1950.783652] FAULT_INJECTION: forcing a failure. [ 1950.783652] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.785013] CPU: 1 PID: 10294 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1950.785805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1950.786761] Call Trace: [ 1950.787071] dump_stack+0x107/0x167 [ 1950.787484] should_fail.cold+0x5/0xa [ 1950.787922] ? create_object.isra.0+0x3a/0xa20 [ 1950.788437] should_failslab+0x5/0x20 [ 1950.788873] kmem_cache_alloc+0x5b/0x310 [ 1950.789335] ? mark_held_locks+0x9e/0xe0 [ 1950.789810] create_object.isra.0+0x3a/0xa20 [ 1950.790315] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1950.790898] kmem_cache_alloc_bulk+0x168/0x320 [ 1950.791428] io_submit_sqes+0x6fe6/0x8610 [ 1950.791906] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1950.792476] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.793044] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1950.793592] ? find_held_lock+0x2c/0x110 [ 1950.794060] ? io_submit_sqes+0x8610/0x8610 [ 1950.794564] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1950.795114] ? wait_for_completion_io+0x270/0x270 [ 1950.795638] ? rcu_read_lock_any_held+0x75/0xa0 [ 1950.796166] ? vfs_write+0x354/0xb10 [ 1950.796606] ? fput_many+0x2f/0x1a0 [ 1950.797022] ? ksys_write+0x1a9/0x260 [ 1950.797460] ? __ia32_sys_read+0xb0/0xb0 [ 1950.797925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1950.798533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1950.799120] do_syscall_64+0x33/0x40 [ 1950.799554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1950.800134] RIP: 0033:0x7f175bb3ab19 [ 1950.800560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.802664] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1950.803483] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1950.804292] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1950.805102] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1950.805907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.806726] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:55:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000ffffffff00aaff02"], 0x0) 02:55:18 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 02:55:18 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 02:55:19 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 02:55:19 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:55:19 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 02:55:19 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000003000000aaff"], 0x0) 02:55:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4, 0x0, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x106) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r4, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x1, 0x10000}) connect$inet(r4, &(0x7f0000000080)={0x2, 0x9, @rand_addr=0x64010101}, 0x10) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) dup2(r1, r2) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r1, r0, 0x0, 0x500000001) [ 1963.425615] FAULT_INJECTION: forcing a failure. [ 1963.425615] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.427403] CPU: 1 PID: 10308 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1963.428276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.429323] Call Trace: [ 1963.429664] dump_stack+0x107/0x167 [ 1963.430133] should_fail.cold+0x5/0xa [ 1963.430626] ? create_object.isra.0+0x3a/0xa20 [ 1963.431212] should_failslab+0x5/0x20 [ 1963.431690] kmem_cache_alloc+0x5b/0x310 [ 1963.432208] ? mark_held_locks+0x9e/0xe0 [ 1963.432729] create_object.isra.0+0x3a/0xa20 [ 1963.433289] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.433938] kmem_cache_alloc_bulk+0x168/0x320 [ 1963.434531] io_submit_sqes+0x6fe6/0x8610 [ 1963.435074] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1963.435701] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.436336] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.436947] ? find_held_lock+0x2c/0x110 [ 1963.437463] ? io_submit_sqes+0x8610/0x8610 [ 1963.438015] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1963.438632] ? wait_for_completion_io+0x270/0x270 [ 1963.439252] ? rcu_read_lock_any_held+0x75/0xa0 [ 1963.439839] ? vfs_write+0x354/0xb10 [ 1963.440338] ? fput_many+0x2f/0x1a0 [ 1963.440805] ? ksys_write+0x1a9/0x260 [ 1963.441289] ? __ia32_sys_read+0xb0/0xb0 [ 1963.441806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.442477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.443126] do_syscall_64+0x33/0x40 [ 1963.443600] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.444252] RIP: 0033:0x7fa33f43fb19 [ 1963.444716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.447059] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1963.448025] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 1963.448930] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1963.449837] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.450156] FAULT_INJECTION: forcing a failure. [ 1963.450156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1963.450739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.450747] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 1963.456757] CPU: 0 PID: 10307 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1963.458250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.460050] Call Trace: [ 1963.460624] dump_stack+0x107/0x167 [ 1963.461412] should_fail.cold+0x5/0xa [ 1963.462245] _copy_from_user+0x2e/0x1b0 [ 1963.463120] iovec_from_user+0x141/0x400 [ 1963.464004] __import_iovec+0x67/0x590 [ 1963.464845] ? SOFTIRQ_verbose+0x10/0x10 [ 1963.465720] ? lock_downgrade+0x6d0/0x6d0 [ 1963.466631] io_import_iovec+0x581/0x1120 [ 1963.467536] ? io_complete_rw+0x230/0x230 [ 1963.468432] ? lock_downgrade+0x6d0/0x6d0 [ 1963.469331] ? mark_lock+0xf5/0x2df0 [ 1963.470136] io_read+0xe14/0x11e0 [ 1963.470964] ? lock_chain_count+0x20/0x20 [ 1963.471950] ? __is_insn_slot_addr+0x14c/0x290 [ 1963.472943] ? __lock_acquire+0x1657/0x5b00 [ 1963.473881] ? kiocb_done+0xc90/0xc90 [ 1963.474734] ? mark_lock+0xf5/0x2df0 [ 1963.475545] ? lock_chain_count+0x20/0x20 [ 1963.476445] ? __lock_acquire+0x1657/0x5b00 [ 1963.477408] ? __lock_acquire+0xbb1/0x5b00 [ 1963.478339] io_issue_sqe+0x2e8a/0x77b0 [ 1963.479196] ? find_held_lock+0x2c/0x110 [ 1963.480075] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1963.481201] ? SOFTIRQ_verbose+0x10/0x10 [ 1963.482069] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1963.483093] ? lock_downgrade+0x6d0/0x6d0 [ 1963.483990] ? io_connect+0x610/0x610 [ 1963.484816] ? lock_acquire+0x197/0x470 [ 1963.485668] ? find_held_lock+0x2c/0x110 [ 1963.486563] ? __fget_files+0x2cf/0x520 [ 1963.487412] ? lock_downgrade+0x6d0/0x6d0 [ 1963.488309] __io_queue_sqe+0x90/0x9d0 [ 1963.489161] ? io_issue_sqe+0x77b0/0x77b0 [ 1963.490050] ? __fget_files+0x2f8/0x520 [ 1963.490913] ? __io_file_supports_nowait+0x22a/0x510 [ 1963.492001] ? io_prep_rw+0x7f5/0x1050 [ 1963.492849] io_submit_sqes+0x44aa/0x8610 [ 1963.493775] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.494848] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.495893] ? find_held_lock+0x2c/0x110 [ 1963.496769] ? io_submit_sqes+0x8610/0x8610 [ 1963.497706] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1963.498753] ? wait_for_completion_io+0x270/0x270 [ 1963.499789] ? rcu_read_lock_any_held+0x75/0xa0 [ 1963.500795] ? vfs_write+0x354/0xb10 [ 1963.501593] ? fput_many+0x2f/0x1a0 [ 1963.502396] ? ksys_write+0x1a9/0x260 [ 1963.503215] ? __ia32_sys_read+0xb0/0xb0 [ 1963.503306] FAULT_INJECTION: forcing a failure. [ 1963.503306] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.504096] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.504120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.507682] do_syscall_64+0x33/0x40 [ 1963.508486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.509590] RIP: 0033:0x7f7726e3cb19 [ 1963.510396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.514367] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1963.515998] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1963.517523] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1963.519061] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.520594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1963.522122] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1963.523692] CPU: 1 PID: 10319 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1963.524599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.525573] Call Trace: [ 1963.525905] dump_stack+0x107/0x167 [ 1963.526358] should_fail.cold+0x5/0xa [ 1963.526826] ? create_object.isra.0+0x3a/0xa20 [ 1963.527379] should_failslab+0x5/0x20 [ 1963.527829] kmem_cache_alloc+0x5b/0x310 [ 1963.528324] ? io_wq_create+0x114/0xc00 [ 1963.528813] create_object.isra.0+0x3a/0xa20 [ 1963.529333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.529955] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1963.530562] io_wq_create+0x6ef/0xc00 [ 1963.530662] FAULT_INJECTION: forcing a failure. [ 1963.530662] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.531028] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1963.531040] ? io_import_iovec+0x1120/0x1120 [ 1963.531065] ? io_apoll_task_func+0x2d0/0x2d0 [ 1963.535083] ? __io_req_find_next+0x300/0x300 [ 1963.535605] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1963.536192] __io_uring_add_tctx_node+0x2c6/0x520 [ 1963.536774] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1963.537395] __do_sys_io_uring_enter+0x146f/0x1890 [ 1963.537993] ? find_held_lock+0x2c/0x110 [ 1963.538493] ? io_submit_sqes+0x8610/0x8610 [ 1963.539008] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1963.539592] ? wait_for_completion_io+0x270/0x270 [ 1963.540159] ? rcu_read_lock_any_held+0x75/0xa0 [ 1963.540720] ? vfs_write+0x354/0xb10 [ 1963.541157] ? fput_many+0x2f/0x1a0 [ 1963.541595] ? ksys_write+0x1a9/0x260 [ 1963.542059] ? __ia32_sys_read+0xb0/0xb0 [ 1963.542558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.543180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.543800] do_syscall_64+0x33/0x40 [ 1963.544241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.544858] RIP: 0033:0x7f175bb3ab19 [ 1963.545299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.547520] RSP: 002b:00007f175908f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1963.548395] RAX: ffffffffffffffda RBX: 00007f175bc4e020 RCX: 00007f175bb3ab19 [ 1963.549251] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1963.550103] RBP: 00007f175908f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.550936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.551750] R13: 00007ffe6763adcf R14: 00007f175908f300 R15: 0000000000022000 [ 1963.552592] CPU: 0 PID: 10316 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1963.554098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.555894] Call Trace: [ 1963.556467] dump_stack+0x107/0x167 [ 1963.557254] should_fail.cold+0x5/0xa [ 1963.558090] ? create_object.isra.0+0x3a/0xa20 [ 1963.559088] should_failslab+0x5/0x20 [ 1963.559905] kmem_cache_alloc+0x5b/0x310 [ 1963.560796] create_object.isra.0+0x3a/0xa20 [ 1963.561734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.562842] __kmalloc+0x16e/0x390 [ 1963.563624] io_setup_async_rw+0x180/0x580 [ 1963.564540] ? iov_iter_restore+0x195/0x3a0 [ 1963.565471] io_read+0x775/0x11e0 [ 1963.566222] ? __is_insn_slot_addr+0x14c/0x290 [ 1963.567223] ? register_lock_class+0xbb/0x17b0 [ 1963.568217] ? kiocb_done+0xc90/0xc90 [ 1963.569053] ? mark_lock+0xf5/0x2df0 [ 1963.569865] ? lock_chain_count+0x20/0x20 [ 1963.570804] ? __lock_acquire+0xbb1/0x5b00 [ 1963.571724] io_issue_sqe+0x2e8a/0x77b0 [ 1963.572585] ? find_held_lock+0x2c/0x110 [ 1963.573466] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1963.574608] ? SOFTIRQ_verbose+0x10/0x10 [ 1963.575485] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1963.576502] ? lock_downgrade+0x6d0/0x6d0 [ 1963.577395] ? io_connect+0x610/0x610 [ 1963.578231] ? lock_acquire+0x197/0x470 [ 1963.579095] ? find_held_lock+0x2c/0x110 [ 1963.579982] ? __fget_files+0x2cf/0x520 [ 1963.580844] ? lock_downgrade+0x6d0/0x6d0 [ 1963.581741] __io_queue_sqe+0x90/0x9d0 [ 1963.582588] ? io_issue_sqe+0x77b0/0x77b0 [ 1963.583478] ? __fget_files+0x2f8/0x520 [ 1963.584335] ? __io_file_supports_nowait+0x22a/0x510 [ 1963.585433] ? io_prep_rw+0x7f5/0x1050 [ 1963.586285] io_submit_sqes+0x44aa/0x8610 [ 1963.587212] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.588290] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.589331] ? find_held_lock+0x2c/0x110 [ 1963.590218] ? io_submit_sqes+0x8610/0x8610 [ 1963.591161] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1963.592204] ? wait_for_completion_io+0x270/0x270 [ 1963.593244] ? rcu_read_lock_any_held+0x75/0xa0 [ 1963.594240] ? vfs_write+0x354/0xb10 [ 1963.595076] ? fput_many+0x2f/0x1a0 [ 1963.595858] ? ksys_write+0x1a9/0x260 [ 1963.596672] ? __ia32_sys_read+0xb0/0xb0 [ 1963.597542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.598680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.599790] do_syscall_64+0x33/0x40 [ 1963.600584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.601692] RIP: 0033:0x7f8398de7b19 [ 1963.602504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.606454] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1963.608092] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1963.609614] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1963.611148] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.612672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1963.614207] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:55:19 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 02:55:19 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000ffffffffffffffff00aaff02"], 0x0) 02:55:19 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 02:55:19 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1963.705691] FAULT_INJECTION: forcing a failure. [ 1963.705691] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.707036] CPU: 1 PID: 10327 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1963.707776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.708724] Call Trace: [ 1963.709033] dump_stack+0x107/0x167 [ 1963.709447] should_fail.cold+0x5/0xa [ 1963.709882] ? create_object.isra.0+0x3a/0xa20 [ 1963.710406] should_failslab+0x5/0x20 [ 1963.710838] kmem_cache_alloc+0x5b/0x310 [ 1963.711303] ? mark_held_locks+0x9e/0xe0 [ 1963.711765] create_object.isra.0+0x3a/0xa20 [ 1963.712259] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.712838] kmem_cache_alloc_bulk+0x168/0x320 [ 1963.713338] io_submit_sqes+0x6fe6/0x8610 [ 1963.713817] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1963.714384] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.714945] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.715467] ? find_held_lock+0x2c/0x110 [ 1963.715908] ? io_submit_sqes+0x8610/0x8610 [ 1963.716377] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1963.716898] ? wait_for_completion_io+0x270/0x270 [ 1963.717418] ? rcu_read_lock_any_held+0x75/0xa0 [ 1963.717917] ? vfs_write+0x354/0xb10 [ 1963.718346] ? fput_many+0x2f/0x1a0 [ 1963.718758] ? ksys_write+0x1a9/0x260 [ 1963.719187] ? __ia32_sys_read+0xb0/0xb0 [ 1963.719648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.720244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.720806] do_syscall_64+0x33/0x40 [ 1963.721234] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.721814] RIP: 0033:0x7fa33f43fb19 [ 1963.722241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.724337] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1963.725196] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 1963.726004] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1963.726817] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.727623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.728428] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:55:19 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000005000000aaff"], 0x0) [ 1963.738692] FAULT_INJECTION: forcing a failure. [ 1963.738692] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.740040] CPU: 1 PID: 10328 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1963.740820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.741760] Call Trace: [ 1963.742064] dump_stack+0x107/0x167 [ 1963.742485] should_fail.cold+0x5/0xa [ 1963.742918] ? io_setup_async_rw+0x180/0x580 [ 1963.743416] should_failslab+0x5/0x20 [ 1963.743845] __kmalloc+0x72/0x390 [ 1963.744245] io_setup_async_rw+0x180/0x580 [ 1963.744722] ? iov_iter_restore+0x195/0x3a0 [ 1963.745216] io_read+0x775/0x11e0 [ 1963.745610] ? __is_insn_slot_addr+0x14c/0x290 [ 1963.746134] ? kiocb_done+0xc90/0xc90 [ 1963.746576] ? mark_lock+0xf5/0x2df0 [ 1963.747003] ? lock_chain_count+0x20/0x20 [ 1963.747491] ? __lock_acquire+0xbb1/0x5b00 [ 1963.747971] io_issue_sqe+0x2e8a/0x77b0 [ 1963.748426] ? find_held_lock+0x2c/0x110 [ 1963.748888] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1963.749479] ? SOFTIRQ_verbose+0x10/0x10 [ 1963.749938] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1963.750481] ? lock_downgrade+0x6d0/0x6d0 [ 1963.750952] ? io_connect+0x610/0x610 [ 1963.751388] ? lock_acquire+0x197/0x470 [ 1963.751835] ? find_held_lock+0x2c/0x110 [ 1963.752297] ? __fget_files+0x2cf/0x520 [ 1963.752745] ? lock_downgrade+0x6d0/0x6d0 [ 1963.753218] __io_queue_sqe+0x90/0x9d0 [ 1963.753665] ? io_issue_sqe+0x77b0/0x77b0 [ 1963.754133] ? __fget_files+0x2f8/0x520 [ 1963.754587] ? __io_file_supports_nowait+0x22a/0x510 [ 1963.755160] ? io_prep_rw+0x7f5/0x1050 [ 1963.755606] io_submit_sqes+0x44aa/0x8610 [ 1963.756097] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.756659] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.757204] ? find_held_lock+0x2c/0x110 [ 1963.757669] ? io_submit_sqes+0x8610/0x8610 [ 1963.758158] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1963.758705] ? vfs_write+0x6c8/0xb10 [ 1963.759127] ? wait_for_completion_io+0x270/0x270 [ 1963.759672] ? rcu_read_lock_any_held+0x75/0xa0 [ 1963.760200] ? vfs_write+0x354/0xb10 [ 1963.760621] ? fput_many+0x2f/0x1a0 [ 1963.761032] ? ksys_write+0x1a9/0x260 [ 1963.761466] ? __ia32_sys_read+0xb0/0xb0 [ 1963.761925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.762525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.763112] do_syscall_64+0x33/0x40 [ 1963.763535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.764114] RIP: 0033:0x7f7726e3cb19 [ 1963.764532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.766614] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1963.767470] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1963.768273] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1963.769080] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.769883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1963.770694] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:55:19 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 02:55:19 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) [ 1963.873535] FAULT_INJECTION: forcing a failure. [ 1963.873535] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.874876] CPU: 1 PID: 10337 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1963.875670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.876566] Call Trace: [ 1963.876870] dump_stack+0x107/0x167 [ 1963.877288] should_fail.cold+0x5/0xa [ 1963.877721] ? create_object.isra.0+0x3a/0xa20 [ 1963.878238] should_failslab+0x5/0x20 [ 1963.878679] kmem_cache_alloc+0x5b/0x310 [ 1963.879142] ? mark_held_locks+0x9e/0xe0 [ 1963.879608] create_object.isra.0+0x3a/0xa20 [ 1963.880083] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.880666] kmem_cache_alloc_bulk+0x168/0x320 [ 1963.881177] io_submit_sqes+0x6fe6/0x8610 [ 1963.881654] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1963.882232] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.882808] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.883365] ? find_held_lock+0x2c/0x110 [ 1963.883812] ? io_submit_sqes+0x8610/0x8610 [ 1963.884313] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1963.884862] ? wait_for_completion_io+0x270/0x270 [ 1963.885413] ? rcu_read_lock_any_held+0x75/0xa0 [ 1963.885948] ? vfs_write+0x354/0xb10 [ 1963.886366] ? fput_many+0x2f/0x1a0 [ 1963.886783] ? ksys_write+0x1a9/0x260 [ 1963.887209] ? __ia32_sys_read+0xb0/0xb0 [ 1963.887680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.888275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.888861] do_syscall_64+0x33/0x40 [ 1963.889287] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.889868] RIP: 0033:0x7f175bb3ab19 [ 1963.890297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.892407] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1963.893274] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1963.894092] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1963.894910] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.895716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.896530] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:55:19 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1963.918164] FAULT_INJECTION: forcing a failure. [ 1963.918164] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.919466] CPU: 1 PID: 10340 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1963.920250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1963.921188] Call Trace: [ 1963.921492] dump_stack+0x107/0x167 [ 1963.921906] should_fail.cold+0x5/0xa [ 1963.922354] ? create_object.isra.0+0x3a/0xa20 [ 1963.922877] should_failslab+0x5/0x20 [ 1963.923310] kmem_cache_alloc+0x5b/0x310 [ 1963.923777] create_object.isra.0+0x3a/0xa20 [ 1963.924282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1963.924867] __kmalloc+0x16e/0x390 [ 1963.925276] io_setup_async_rw+0x180/0x580 [ 1963.925755] ? iov_iter_restore+0x195/0x3a0 [ 1963.926248] io_read+0x775/0x11e0 [ 1963.926650] ? __is_insn_slot_addr+0x14c/0x290 [ 1963.927172] ? kiocb_done+0xc90/0xc90 [ 1963.927601] ? mark_lock+0xf5/0x2df0 [ 1963.928026] ? lock_chain_count+0x20/0x20 [ 1963.928512] ? __lock_acquire+0xbb1/0x5b00 [ 1963.928999] io_issue_sqe+0x2e8a/0x77b0 [ 1963.929451] ? find_held_lock+0x2c/0x110 [ 1963.929915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1963.930527] ? SOFTIRQ_verbose+0x10/0x10 [ 1963.930992] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1963.931534] ? lock_downgrade+0x6d0/0x6d0 [ 1963.932008] ? io_connect+0x610/0x610 [ 1963.932443] ? lock_acquire+0x197/0x470 [ 1963.932892] ? find_held_lock+0x2c/0x110 [ 1963.933356] ? __fget_files+0x2cf/0x520 [ 1963.933806] ? lock_downgrade+0x6d0/0x6d0 [ 1963.934294] __io_queue_sqe+0x90/0x9d0 [ 1963.934749] ? io_issue_sqe+0x77b0/0x77b0 [ 1963.935223] ? __fget_files+0x2f8/0x520 [ 1963.935678] ? __io_file_supports_nowait+0x22a/0x510 [ 1963.936264] ? io_prep_rw+0x7f5/0x1050 [ 1963.936707] io_submit_sqes+0x44aa/0x8610 [ 1963.937192] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.937765] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1963.938320] ? find_held_lock+0x2c/0x110 [ 1963.938782] ? io_submit_sqes+0x8610/0x8610 [ 1963.939274] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1963.939819] ? wait_for_completion_io+0x270/0x270 [ 1963.940365] ? rcu_read_lock_any_held+0x75/0xa0 [ 1963.940888] ? vfs_write+0x354/0xb10 [ 1963.941311] ? fput_many+0x2f/0x1a0 [ 1963.941725] ? ksys_write+0x1a9/0x260 [ 1963.942156] ? __ia32_sys_read+0xb0/0xb0 [ 1963.942632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1963.943228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1963.943817] do_syscall_64+0x33/0x40 [ 1963.944244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1963.944830] RIP: 0033:0x7f7726e3cb19 [ 1963.945253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1963.947350] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1963.948219] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1963.949028] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1963.949841] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1963.950663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1963.951468] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:55:32 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 02:55:32 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000003c000000aaff"], 0x0) 02:55:32 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x2001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={0x0, 0x5, 0x80000001}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000002300)=""/4096, 0x1000, 0x9) fallocate(r1, 0x1c, 0x688, 0xbb5c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x8, 0x19d, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r4, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)="fb5ff218965b5a63f0f874a3d4e397481fe351b8422af80bb496d14b06ea729abbb9754be704fd69b824252a697b20ffedbe926ff2932c464927c9f6185ee1bb43aea79fda5a331e3e2425867e21d6f032edaa955e372444d96213ca35cd11017292142639007f8c6a4a49a8197fcf0ac86050e5b0ee93a9f13ce24dae6c97b6d06785f1ae9af77715d924b388ec2e699ca18ccae77c8d2484f7e9358be0bc05554869811286614b9f71079d4c66d68ae69a62288c9de64ae950ddaeb9197edbc844cc29bc212200c6f655bee416", 0x6, 0x0, 0x1, {0x3}}, 0x7f) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)={0x0, 0x3938700}}, 0x2) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 02:55:32 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 02:55:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000300000000000000aaff02"], 0x0) 02:55:32 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 02:55:32 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:55:32 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 1977.231277] FAULT_INJECTION: forcing a failure. [ 1977.231277] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.233330] FAULT_INJECTION: forcing a failure. [ 1977.233330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1977.234104] CPU: 0 PID: 10352 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1977.238061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1977.239943] Call Trace: [ 1977.240534] dump_stack+0x107/0x167 [ 1977.241351] should_fail.cold+0x5/0xa [ 1977.242208] ? __io_queue_sqe+0x666/0x9d0 [ 1977.243156] should_failslab+0x5/0x20 [ 1977.244002] kmem_cache_alloc_trace+0x55/0x320 [ 1977.245004] ? lock_downgrade+0x6d0/0x6d0 [ 1977.245923] __io_queue_sqe+0x666/0x9d0 [ 1977.246835] ? io_issue_sqe+0x77b0/0x77b0 [ 1977.247755] ? __fget_files+0x2f8/0x520 [ 1977.248630] ? __io_file_supports_nowait+0x22a/0x510 [ 1977.249763] ? io_prep_rw+0x7f5/0x1050 [ 1977.250668] io_submit_sqes+0x44aa/0x8610 [ 1977.251659] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.252812] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.253896] ? find_held_lock+0x2c/0x110 [ 1977.254877] ? io_submit_sqes+0x8610/0x8610 [ 1977.255849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1977.256938] ? wait_for_completion_io+0x270/0x270 [ 1977.258020] ? rcu_read_lock_any_held+0x75/0xa0 [ 1977.259086] ? vfs_write+0x354/0xb10 [ 1977.259924] ? fput_many+0x2f/0x1a0 [ 1977.260739] ? ksys_write+0x1a9/0x260 [ 1977.261585] ? __ia32_sys_read+0xb0/0xb0 [ 1977.262513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1977.263714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1977.264852] do_syscall_64+0x33/0x40 [ 1977.265674] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1977.266838] RIP: 0033:0x7f8398de7b19 [ 1977.267666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1977.271771] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1977.273417] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1977.275012] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1977.276587] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1977.278173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1977.279772] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 1977.281366] CPU: 1 PID: 10363 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1977.282867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1977.284649] Call Trace: [ 1977.285213] dump_stack+0x107/0x167 [ 1977.285991] should_fail.cold+0x5/0xa [ 1977.286815] _copy_from_user+0x2e/0x1b0 [ 1977.287668] iovec_from_user+0x141/0x400 [ 1977.288547] __import_iovec+0x67/0x590 [ 1977.289372] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1977.290499] io_import_iovec+0x581/0x1120 [ 1977.291414] ? io_complete_rw+0x230/0x230 [ 1977.292326] ? lock_downgrade+0x6d0/0x6d0 [ 1977.293229] ? unwind_next_frame+0x13ef/0x1a90 [ 1977.294213] io_read+0xe14/0x11e0 [ 1977.294951] ? kiocb_done+0xc90/0xc90 [ 1977.295755] ? mark_lock+0xf5/0x2df0 [ 1977.296522] ? lock_chain_count+0x20/0x20 [ 1977.297379] ? lock_chain_count+0x20/0x20 [ 1977.298271] ? stack_trace_save+0x8c/0xc0 [ 1977.299136] ? stack_trace_consume_entry+0x160/0x160 [ 1977.300243] ? lock_acquire+0x197/0x470 [ 1977.301112] ? __lock_acquire+0xbb1/0x5b00 [ 1977.302035] io_issue_sqe+0x2e8a/0x77b0 [ 1977.302917] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1977.304048] ? SOFTIRQ_verbose+0x10/0x10 [ 1977.304924] ? lock_chain_count+0x20/0x20 [ 1977.305825] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1977.306961] ? io_connect+0x610/0x610 [ 1977.307790] ? lock_acquire+0x197/0x470 [ 1977.308647] ? find_held_lock+0x2c/0x110 [ 1977.309532] ? __fget_files+0x2cf/0x520 [ 1977.310388] ? lock_downgrade+0x6d0/0x6d0 [ 1977.311298] __io_queue_sqe+0x90/0x9d0 [ 1977.312135] ? io_issue_sqe+0x77b0/0x77b0 [ 1977.313010] ? __fget_files+0x2f8/0x520 [ 1977.313863] ? __io_file_supports_nowait+0x22a/0x510 [ 1977.314973] ? io_prep_rw+0x7f5/0x1050 [ 1977.315832] io_submit_sqes+0x44aa/0x8610 [ 1977.316767] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.317847] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.318903] ? find_held_lock+0x2c/0x110 [ 1977.319747] ? io_submit_sqes+0x8610/0x8610 [ 1977.320680] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1977.321669] ? wait_for_completion_io+0x270/0x270 [ 1977.322719] ? rcu_read_lock_any_held+0x75/0xa0 [ 1977.323677] ? vfs_write+0x354/0xb10 [ 1977.324483] ? fput_many+0x2f/0x1a0 [ 1977.325272] ? ksys_write+0x1a9/0x260 [ 1977.326096] ? __ia32_sys_read+0xb0/0xb0 [ 1977.326989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1977.328118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1977.329238] do_syscall_64+0x33/0x40 [ 1977.330045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1977.331124] RIP: 0033:0x7f175bb3ab19 [ 1977.331890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1977.335832] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1977.337451] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1977.338916] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1977.340356] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1977.341799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1977.343256] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 1977.348454] FAULT_INJECTION: forcing a failure. [ 1977.348454] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.351904] CPU: 0 PID: 10361 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1977.353822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1977.355797] Call Trace: [ 1977.356383] dump_stack+0x107/0x167 [ 1977.357187] should_fail.cold+0x5/0xa [ 1977.358058] ? __io_queue_sqe+0x666/0x9d0 [ 1977.358994] should_failslab+0x5/0x20 [ 1977.359839] kmem_cache_alloc_trace+0x55/0x320 [ 1977.360845] ? lock_downgrade+0x6d0/0x6d0 [ 1977.361767] __io_queue_sqe+0x666/0x9d0 [ 1977.362659] ? io_issue_sqe+0x77b0/0x77b0 [ 1977.363564] ? __fget_files+0x2f8/0x520 [ 1977.364439] ? __io_file_supports_nowait+0x22a/0x510 [ 1977.365552] ? io_prep_rw+0x7f5/0x1050 [ 1977.366428] io_submit_sqes+0x44aa/0x8610 [ 1977.367391] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.368493] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.369570] ? find_held_lock+0x2c/0x110 [ 1977.370684] ? io_submit_sqes+0x8610/0x8610 [ 1977.371646] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1977.372716] ? wait_for_completion_io+0x270/0x270 [ 1977.373788] ? rcu_read_lock_any_held+0x75/0xa0 [ 1977.374821] ? vfs_write+0x354/0xb10 [ 1977.375635] ? fput_many+0x2f/0x1a0 [ 1977.376432] ? ksys_write+0x1a9/0x260 [ 1977.376685] FAULT_INJECTION: forcing a failure. [ 1977.376685] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.377314] ? __ia32_sys_read+0xb0/0xb0 [ 1977.377340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1977.377368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1977.382868] do_syscall_64+0x33/0x40 [ 1977.383683] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1977.384786] RIP: 0033:0x7f7726e3cb19 [ 1977.385590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1977.389649] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1977.391382] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1977.392920] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1977.394470] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1977.396097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1977.397641] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1977.399226] CPU: 1 PID: 10362 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1977.400639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1977.402386] Call Trace: [ 1977.402960] dump_stack+0x107/0x167 [ 1977.403742] should_fail.cold+0x5/0xa [ 1977.404571] ? create_object.isra.0+0x3a/0xa20 [ 1977.405540] should_failslab+0x5/0x20 [ 1977.406336] kmem_cache_alloc+0x5b/0x310 [ 1977.407200] ? mark_held_locks+0x9e/0xe0 [ 1977.408077] create_object.isra.0+0x3a/0xa20 [ 1977.409009] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1977.410094] kmem_cache_alloc_bulk+0x168/0x320 [ 1977.411087] io_submit_sqes+0x6fe6/0x8610 [ 1977.411988] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1977.413048] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.414097] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.415122] ? find_held_lock+0x2c/0x110 [ 1977.415992] ? io_submit_sqes+0x8610/0x8610 [ 1977.416913] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1977.417935] ? wait_for_completion_io+0x270/0x270 [ 1977.418978] ? rcu_read_lock_any_held+0x75/0xa0 [ 1977.419969] ? vfs_write+0x354/0xb10 [ 1977.420756] ? fput_many+0x2f/0x1a0 [ 1977.421528] ? ksys_write+0x1a9/0x260 [ 1977.422335] ? __ia32_sys_read+0xb0/0xb0 [ 1977.423216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1977.424321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1977.425400] do_syscall_64+0x33/0x40 [ 1977.426193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1977.427284] RIP: 0033:0x7fa33f43fb19 [ 1977.428063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1977.431950] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1977.433566] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 1977.435084] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1977.436588] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1977.438206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1977.439736] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 1977.451433] loop3: detected capacity change from 0 to 16776704 02:55:33 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000030000aaff"], 0x0) 02:55:33 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1977.494262] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 1977.494262] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1977.494262] 02:55:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000500000000000000aaff02"], 0x0) [ 1977.553697] EXT4-fs (loop3): mounted filesystem without journal. Opts: noacl,,errors=continue 02:55:33 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000050000aaff"], 0x0) 02:55:33 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 02:55:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000003c00000000000000aaff02"], 0x0) 02:55:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000006000000000000000aaff02"], 0x0) 02:55:33 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1977.717360] FAULT_INJECTION: forcing a failure. [ 1977.717360] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.720224] CPU: 0 PID: 10387 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1977.721734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1977.723534] Call Trace: [ 1977.724120] dump_stack+0x107/0x167 [ 1977.724959] should_fail.cold+0x5/0xa [ 1977.725802] ? create_object.isra.0+0x3a/0xa20 [ 1977.726811] should_failslab+0x5/0x20 [ 1977.727648] kmem_cache_alloc+0x5b/0x310 [ 1977.728541] create_object.isra.0+0x3a/0xa20 [ 1977.729514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1977.730655] kmem_cache_alloc_trace+0x151/0x320 [ 1977.731674] ? lock_downgrade+0x6d0/0x6d0 [ 1977.732556] __io_queue_sqe+0x666/0x9d0 [ 1977.733444] ? io_issue_sqe+0x77b0/0x77b0 [ 1977.734353] ? __fget_files+0x2f8/0x520 [ 1977.735237] ? __io_file_supports_nowait+0x22a/0x510 [ 1977.736352] ? io_prep_rw+0x7f5/0x1050 [ 1977.737209] io_submit_sqes+0x44aa/0x8610 [ 1977.738168] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.739268] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1977.740344] ? find_held_lock+0x2c/0x110 [ 1977.741266] ? io_submit_sqes+0x8610/0x8610 [ 1977.742258] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1977.743333] ? wait_for_completion_io+0x270/0x270 [ 1977.744389] ? rcu_read_lock_any_held+0x75/0xa0 [ 1977.745390] ? vfs_write+0x354/0xb10 [ 1977.746213] ? fput_many+0x2f/0x1a0 [ 1977.747032] ? ksys_write+0x1a9/0x260 [ 1977.747871] ? __ia32_sys_read+0xb0/0xb0 [ 1977.748764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1977.749916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1977.751061] do_syscall_64+0x33/0x40 [ 1977.751882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1977.753016] RIP: 0033:0x7f7726e3cb19 [ 1977.753831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1977.757885] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1977.759526] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1977.761096] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1977.762677] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1977.764220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1977.765804] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:55:47 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 02:55:47 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 02:55:47 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 02:55:47 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000003c0000aaff"], 0x0) 02:55:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f00000008c0), 0x8}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed980, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="ff22eedaaf94808fc57c93d6d594d1f500913507e89e8fb79941da000000004f602ad2f2cc2691456a00fbffffffffffe4e50600000000e5ffff19090563b2a19a4702272ef8913d29920d3100e6b97b4f80ab076020ff4559666a9eed1a16c71c9a00"/112]) sendfile(r0, 0xffffffffffffffff, 0x0, 0xd099) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x404c008) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r3, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) mknodat$loop(r3, &(0x7f0000000240)='./file0/../file0\x00', 0x200, 0x1) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) unshare(0x48020200) 02:55:47 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:55:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000003000000000000aaff02"], 0x0) [ 1991.436387] FAULT_INJECTION: forcing a failure. [ 1991.436387] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.437976] CPU: 1 PID: 10408 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1991.438893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1991.439954] Call Trace: [ 1991.440304] dump_stack+0x107/0x167 [ 1991.440788] should_fail.cold+0x5/0xa [ 1991.441275] ? io_setup_async_rw+0x180/0x580 02:55:47 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) [ 1991.441851] should_failslab+0x5/0x20 [ 1991.442503] __kmalloc+0x72/0x390 [ 1991.442963] io_setup_async_rw+0x180/0x580 [ 1991.443529] ? iov_iter_restore+0x195/0x3a0 [ 1991.444100] io_read+0x775/0x11e0 [ 1991.444577] ? kiocb_done+0xc90/0xc90 [ 1991.445070] ? mark_lock+0xf5/0x2df0 [ 1991.445584] ? lock_chain_count+0x20/0x20 [ 1991.446138] ? stack_trace_consume_entry+0x160/0x160 [ 1991.446848] FAULT_INJECTION: forcing a failure. [ 1991.446848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1991.446861] ? lock_acquire+0x197/0x470 [ 1991.448359] ? __lock_acquire+0xbb1/0x5b00 [ 1991.448376] io_issue_sqe+0x2e8a/0x77b0 [ 1991.448396] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1991.448407] ? SOFTIRQ_verbose+0x10/0x10 [ 1991.448418] ? lock_chain_count+0x20/0x20 [ 1991.448432] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1991.448443] ? io_connect+0x610/0x610 [ 1991.448459] ? lock_acquire+0x197/0x470 [ 1991.448479] ? find_held_lock+0x2c/0x110 [ 1991.454421] ? __fget_files+0x2cf/0x520 [ 1991.454960] ? lock_downgrade+0x6d0/0x6d0 [ 1991.455516] __io_queue_sqe+0x90/0x9d0 [ 1991.456048] ? io_issue_sqe+0x77b0/0x77b0 [ 1991.456609] ? __fget_files+0x2f8/0x520 [ 1991.457147] ? __io_file_supports_nowait+0x22a/0x510 [ 1991.457825] ? io_prep_rw+0x7f5/0x1050 [ 1991.458354] io_submit_sqes+0x44aa/0x8610 [ 1991.458941] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.459607] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.460249] ? find_held_lock+0x2c/0x110 [ 1991.460793] ? io_submit_sqes+0x8610/0x8610 [ 1991.461374] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1991.462018] ? wait_for_completion_io+0x270/0x270 [ 1991.462667] ? rcu_read_lock_any_held+0x75/0xa0 [ 1991.463291] ? vfs_write+0x354/0xb10 [ 1991.463784] ? fput_many+0x2f/0x1a0 [ 1991.464273] ? ksys_write+0x1a9/0x260 [ 1991.464777] ? __ia32_sys_read+0xb0/0xb0 [ 1991.465318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1991.466016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1991.466704] do_syscall_64+0x33/0x40 [ 1991.467200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1991.467876] RIP: 0033:0x7f175bb3ab19 [ 1991.468356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1991.470801] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1991.471810] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1991.472726] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1991.473672] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1991.474599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1991.475516] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 1991.476488] CPU: 0 PID: 10407 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1991.478022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1991.479817] Call Trace: [ 1991.480390] dump_stack+0x107/0x167 [ 1991.480557] FAULT_INJECTION: forcing a failure. [ 1991.480557] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.481177] should_fail.cold+0x5/0xa [ 1991.481207] _copy_from_user+0x2e/0x1b0 [ 1991.481232] iovec_from_user+0x141/0x400 [ 1991.485130] __import_iovec+0x67/0x590 [ 1991.485964] ? SOFTIRQ_verbose+0x10/0x10 [ 1991.486843] ? lock_downgrade+0x6d0/0x6d0 [ 1991.487740] io_import_iovec+0x581/0x1120 [ 1991.488674] ? io_complete_rw+0x230/0x230 [ 1991.489567] ? lock_downgrade+0x6d0/0x6d0 [ 1991.490463] ? mark_lock+0xf5/0x2df0 [ 1991.491282] io_read+0xe14/0x11e0 [ 1991.492032] ? lock_chain_count+0x20/0x20 [ 1991.492921] ? __is_insn_slot_addr+0x14c/0x290 [ 1991.493908] ? __lock_acquire+0x1657/0x5b00 [ 1991.494845] ? kiocb_done+0xc90/0xc90 [ 1991.495659] ? mark_lock+0xf5/0x2df0 [ 1991.496466] ? lock_chain_count+0x20/0x20 [ 1991.497363] ? __lock_acquire+0x1657/0x5b00 [ 1991.498312] ? __lock_acquire+0xbb1/0x5b00 [ 1991.499236] io_issue_sqe+0x2e8a/0x77b0 [ 1991.500093] ? find_held_lock+0x2c/0x110 [ 1991.500964] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1991.502093] ? SOFTIRQ_verbose+0x10/0x10 [ 1991.502994] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1991.504034] ? lock_downgrade+0x6d0/0x6d0 [ 1991.504927] ? io_connect+0x610/0x610 [ 1991.505749] ? lock_acquire+0x197/0x470 [ 1991.506616] ? find_held_lock+0x2c/0x110 [ 1991.507492] ? __fget_files+0x2cf/0x520 [ 1991.508362] ? lock_downgrade+0x6d0/0x6d0 [ 1991.509255] __io_queue_sqe+0x90/0x9d0 [ 1991.510100] ? io_issue_sqe+0x77b0/0x77b0 [ 1991.510991] ? __fget_files+0x2f8/0x520 [ 1991.511839] ? __io_file_supports_nowait+0x22a/0x510 [ 1991.512926] ? io_prep_rw+0x7f5/0x1050 [ 1991.513776] io_submit_sqes+0x44aa/0x8610 [ 1991.514713] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.515777] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.516813] ? find_held_lock+0x2c/0x110 [ 1991.517685] ? io_submit_sqes+0x8610/0x8610 [ 1991.518623] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1991.519659] ? wait_for_completion_io+0x270/0x270 [ 1991.520695] ? rcu_read_lock_any_held+0x75/0xa0 [ 1991.521688] ? vfs_write+0x354/0xb10 [ 1991.522486] ? fput_many+0x2f/0x1a0 [ 1991.523276] ? ksys_write+0x1a9/0x260 [ 1991.524094] ? __ia32_sys_read+0xb0/0xb0 [ 1991.524970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1991.526092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1991.527224] do_syscall_64+0x33/0x40 [ 1991.528019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1991.529125] RIP: 0033:0x7f7726e3cb19 [ 1991.529921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1991.533869] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1991.535505] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1991.537035] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1991.538565] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1991.540091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1991.541622] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1991.543179] CPU: 1 PID: 10406 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1991.544054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1991.545063] Call Trace: [ 1991.545389] dump_stack+0x107/0x167 [ 1991.545834] should_fail.cold+0x5/0xa [ 1991.546298] ? create_object.isra.0+0x3a/0xa20 [ 1991.546872] should_failslab+0x5/0x20 [ 1991.547336] kmem_cache_alloc+0x5b/0x310 [ 1991.547840] ? mark_held_locks+0x9e/0xe0 [ 1991.548335] create_object.isra.0+0x3a/0xa20 [ 1991.548874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1991.549501] kmem_cache_alloc_bulk+0x168/0x320 [ 1991.550066] io_submit_sqes+0x6fe6/0x8610 [ 1991.550577] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1991.551199] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.551806] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.552400] ? find_held_lock+0x2c/0x110 [ 1991.552901] ? io_submit_sqes+0x8610/0x8610 [ 1991.553436] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1991.554027] ? wait_for_completion_io+0x270/0x270 [ 1991.554621] ? rcu_read_lock_any_held+0x75/0xa0 [ 1991.555185] ? vfs_write+0x354/0xb10 [ 1991.555639] ? fput_many+0x2f/0x1a0 [ 1991.556085] ? ksys_write+0x1a9/0x260 [ 1991.556550] ? __ia32_sys_read+0xb0/0xb0 [ 1991.557050] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1991.557686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1991.558329] do_syscall_64+0x33/0x40 [ 1991.558789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1991.559425] RIP: 0033:0x7fa33f43fb19 [ 1991.559884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1991.562108] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1991.563034] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 1991.563901] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1991.564763] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1991.565625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1991.566500] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 1991.566797] FAULT_INJECTION: forcing a failure. [ 1991.566797] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.570200] CPU: 0 PID: 10412 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1991.571714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1991.573490] Call Trace: [ 1991.574059] dump_stack+0x107/0x167 [ 1991.574861] should_fail.cold+0x5/0xa [ 1991.575684] ? create_object.isra.0+0x3a/0xa20 [ 1991.576667] should_failslab+0x5/0x20 [ 1991.577486] kmem_cache_alloc+0x5b/0x310 [ 1991.578364] create_object.isra.0+0x3a/0xa20 [ 1991.579309] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1991.580408] kmem_cache_alloc_trace+0x151/0x320 [ 1991.581412] ? lock_downgrade+0x6d0/0x6d0 [ 1991.582309] __io_queue_sqe+0x666/0x9d0 [ 1991.583183] ? io_issue_sqe+0x77b0/0x77b0 [ 1991.584070] ? __fget_files+0x2f8/0x520 [ 1991.584928] ? __io_file_supports_nowait+0x22a/0x510 [ 1991.586017] ? io_prep_rw+0x7f5/0x1050 [ 1991.586874] io_submit_sqes+0x44aa/0x8610 [ 1991.587798] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.588875] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.589921] ? find_held_lock+0x2c/0x110 [ 1991.590811] ? io_submit_sqes+0x8610/0x8610 [ 1991.591754] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1991.592795] ? wait_for_completion_io+0x270/0x270 [ 1991.593840] ? rcu_read_lock_any_held+0x75/0xa0 [ 1991.594846] ? vfs_write+0x354/0xb10 [ 1991.595666] ? fput_many+0x2f/0x1a0 [ 1991.596452] ? ksys_write+0x1a9/0x260 [ 1991.597291] ? __ia32_sys_read+0xb0/0xb0 [ 1991.598169] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1991.599309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1991.600420] do_syscall_64+0x33/0x40 [ 1991.601231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1991.602328] RIP: 0033:0x7f8398de7b19 [ 1991.603139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1991.607109] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1991.608745] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1991.610271] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1991.611810] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1991.613338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1991.614872] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:55:47 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000001aaff"], 0x0) [ 1991.656739] loop4: detected capacity change from 0 to 1073741312 02:55:47 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:55:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000005000000000000aaff02"], 0x0) 02:55:47 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 02:55:47 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 02:55:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000003c000000000000aaff02"], 0x0) [ 1991.791551] FAULT_INJECTION: forcing a failure. [ 1991.791551] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.792922] CPU: 1 PID: 10422 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1991.793695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1991.794638] Call Trace: [ 1991.794952] dump_stack+0x107/0x167 [ 1991.795366] should_fail.cold+0x5/0xa [ 1991.795799] ? __io_queue_sqe+0x666/0x9d0 [ 1991.796265] should_failslab+0x5/0x20 [ 1991.796706] kmem_cache_alloc_trace+0x55/0x320 [ 1991.797232] ? lock_downgrade+0x6d0/0x6d0 [ 1991.797705] __io_queue_sqe+0x666/0x9d0 [ 1991.798157] ? io_issue_sqe+0x77b0/0x77b0 [ 1991.798630] ? __fget_files+0x2f8/0x520 [ 1991.799078] ? __io_file_supports_nowait+0x22a/0x510 [ 1991.799649] ? io_prep_rw+0x7f5/0x1050 [ 1991.800090] io_submit_sqes+0x44aa/0x8610 [ 1991.800574] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.801140] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.801684] ? find_held_lock+0x2c/0x110 [ 1991.802147] ? io_submit_sqes+0x8610/0x8610 [ 1991.802641] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1991.803198] ? wait_for_completion_io+0x270/0x270 [ 1991.803746] ? rcu_read_lock_any_held+0x75/0xa0 [ 1991.804270] ? vfs_write+0x354/0xb10 [ 1991.804691] ? fput_many+0x2f/0x1a0 [ 1991.805105] ? ksys_write+0x1a9/0x260 [ 1991.805537] ? __ia32_sys_read+0xb0/0xb0 [ 1991.806004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1991.806603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1991.807196] do_syscall_64+0x33/0x40 [ 1991.807612] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1991.808192] RIP: 0033:0x7f7726e3cb19 [ 1991.808611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1991.810685] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1991.811547] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1991.812353] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1991.813160] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1991.813964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1991.814769] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 [ 1991.824060] FAULT_INJECTION: forcing a failure. [ 1991.824060] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.825335] CPU: 1 PID: 10426 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 1991.826117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1991.827050] Call Trace: [ 1991.827346] dump_stack+0x107/0x167 [ 1991.827869] should_fail.cold+0x5/0xa [ 1991.828300] ? create_object.isra.0+0x3a/0xa20 [ 1991.828814] should_failslab+0x5/0x20 [ 1991.829241] kmem_cache_alloc+0x5b/0x310 [ 1991.829699] ? mark_held_locks+0x9e/0xe0 [ 1991.830161] create_object.isra.0+0x3a/0xa20 [ 1991.830661] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1991.831235] kmem_cache_alloc_bulk+0x168/0x320 [ 1991.831748] io_submit_sqes+0x6fe6/0x8610 [ 1991.832217] ? __io_uring_add_tctx_node+0xe6/0x520 [ 1991.832780] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.833338] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1991.833881] ? find_held_lock+0x2c/0x110 [ 1991.834338] ? io_submit_sqes+0x8610/0x8610 [ 1991.834834] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1991.835406] ? wait_for_completion_io+0x270/0x270 [ 1991.835950] ? rcu_read_lock_any_held+0x75/0xa0 [ 1991.836471] ? vfs_write+0x354/0xb10 [ 1991.836893] ? fput_many+0x2f/0x1a0 [ 1991.837303] ? ksys_write+0x1a9/0x260 [ 1991.837728] ? __ia32_sys_read+0xb0/0xb0 [ 1991.838193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1991.838785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1991.839378] do_syscall_64+0x33/0x40 [ 1991.839797] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1991.840382] RIP: 0033:0x7fa33f43fb19 [ 1991.840798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1991.842873] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1991.843725] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 1991.844526] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1991.845328] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1991.846126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1991.846933] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 1991.848030] scsi_io_completion_action: 97 callbacks suppressed [ 1991.848080] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1991.851728] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1991.853180] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1991.854616] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 1991.856253] print_req_error: 374 callbacks suppressed [ 1991.856271] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.859790] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1991.873454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1991.874751] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.877522] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.879875] Buffer I/O error on dev loop4, logical block 2096896, async page read 02:55:47 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000003aaff"], 0x0) 02:55:47 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1991.883937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1991.885222] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.887589] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.889887] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1991.898254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1991.899486] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.901958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1991.903178] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.905622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1991.906852] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.910057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1991.911278] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1991.913689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1991.915198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1991.918885] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1991.920590] Buffer I/O error on dev loop4, logical block 2096899, async page read 02:55:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000040000000000000aaff02"], 0x0) 02:55:47 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 1991.922257] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1991.924243] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1991.925934] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1991.927632] Buffer I/O error on dev loop4, logical block 2096903, async page read 02:55:47 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 02:55:47 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000005aaff"], 0x0) [ 1992.028795] FAULT_INJECTION: forcing a failure. [ 1992.028795] name failslab, interval 1, probability 0, space 0, times 0 [ 1992.030152] CPU: 1 PID: 10439 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1992.030935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1992.031872] Call Trace: [ 1992.032179] dump_stack+0x107/0x167 [ 1992.032589] should_fail.cold+0x5/0xa [ 1992.033021] ? create_object.isra.0+0x3a/0xa20 [ 1992.033541] should_failslab+0x5/0x20 [ 1992.033972] kmem_cache_alloc+0x5b/0x310 [ 1992.034434] create_object.isra.0+0x3a/0xa20 [ 1992.034935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1992.035512] __kmalloc+0x16e/0x390 [ 1992.035916] io_setup_async_rw+0x180/0x580 [ 1992.036391] ? iov_iter_restore+0x195/0x3a0 [ 1992.036880] io_read+0x775/0x11e0 [ 1992.037278] ? kiocb_done+0xc90/0xc90 [ 1992.037705] ? mark_lock+0xf5/0x2df0 [ 1992.038130] ? lock_chain_count+0x20/0x20 [ 1992.038609] ? stack_trace_consume_entry+0x160/0x160 [ 1992.039189] ? lock_acquire+0x197/0x470 [ 1992.039646] ? __lock_acquire+0xbb1/0x5b00 [ 1992.040124] io_issue_sqe+0x2e8a/0x77b0 [ 1992.040579] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1992.041167] ? SOFTIRQ_verbose+0x10/0x10 [ 1992.041623] ? lock_chain_count+0x20/0x20 [ 1992.042095] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1992.042691] ? io_connect+0x610/0x610 [ 1992.043126] ? lock_acquire+0x197/0x470 [ 1992.043574] ? find_held_lock+0x2c/0x110 [ 1992.044040] ? __fget_files+0x2cf/0x520 [ 1992.044492] ? lock_downgrade+0x6d0/0x6d0 [ 1992.044964] __io_queue_sqe+0x90/0x9d0 [ 1992.045410] ? io_issue_sqe+0x77b0/0x77b0 [ 1992.045877] ? __fget_files+0x2f8/0x520 [ 1992.046327] ? __io_file_supports_nowait+0x22a/0x510 [ 1992.046904] ? io_prep_rw+0x7f5/0x1050 [ 1992.047347] io_submit_sqes+0x44aa/0x8610 [ 1992.047832] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1992.048392] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1992.048936] ? find_held_lock+0x2c/0x110 [ 1992.049396] ? io_submit_sqes+0x8610/0x8610 [ 1992.049894] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1992.050450] ? wait_for_completion_io+0x270/0x270 [ 1992.051003] ? rcu_read_lock_any_held+0x75/0xa0 [ 1992.051527] ? vfs_write+0x354/0xb10 [ 1992.051948] ? fput_many+0x2f/0x1a0 [ 1992.052360] ? ksys_write+0x1a9/0x260 [ 1992.052790] ? __ia32_sys_read+0xb0/0xb0 [ 1992.053251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1992.053843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1992.054428] do_syscall_64+0x33/0x40 [ 1992.054859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1992.055437] RIP: 0033:0x7f175bb3ab19 [ 1992.055856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1992.057929] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1992.058799] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 1992.059598] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1992.060453] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1992.061249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1992.062048] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 1992.098687] FAULT_INJECTION: forcing a failure. [ 1992.098687] name failslab, interval 1, probability 0, space 0, times 0 [ 1992.101397] CPU: 0 PID: 10442 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1992.102908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1992.104700] Call Trace: [ 1992.105282] dump_stack+0x107/0x167 [ 1992.106073] should_fail.cold+0x5/0xa [ 1992.106907] ? create_object.isra.0+0x3a/0xa20 [ 1992.107892] should_failslab+0x5/0x20 [ 1992.108714] kmem_cache_alloc+0x5b/0x310 [ 1992.109595] create_object.isra.0+0x3a/0xa20 [ 1992.110538] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1992.111636] __kmalloc+0x16e/0x390 [ 1992.112412] io_setup_async_rw+0x180/0x580 [ 1992.113323] ? iov_iter_restore+0x195/0x3a0 [ 1992.114256] io_read+0x775/0x11e0 [ 1992.115022] ? __is_insn_slot_addr+0x14c/0x290 [ 1992.116020] ? kiocb_done+0xc90/0xc90 [ 1992.116836] ? mark_lock+0xf5/0x2df0 [ 1992.117651] ? lock_chain_count+0x20/0x20 [ 1992.118582] ? __lock_acquire+0xbb1/0x5b00 [ 1992.119513] io_issue_sqe+0x2e8a/0x77b0 [ 1992.120371] ? find_held_lock+0x2c/0x110 [ 1992.121254] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1992.122386] ? SOFTIRQ_verbose+0x10/0x10 [ 1992.123272] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1992.124298] ? lock_downgrade+0x6d0/0x6d0 [ 1992.125189] ? io_connect+0x610/0x610 [ 1992.126025] ? lock_acquire+0x197/0x470 [ 1992.126889] ? find_held_lock+0x2c/0x110 [ 1992.127776] ? __fget_files+0x2cf/0x520 [ 1992.128638] ? lock_downgrade+0x6d0/0x6d0 [ 1992.129534] __io_queue_sqe+0x90/0x9d0 [ 1992.130381] ? io_issue_sqe+0x77b0/0x77b0 [ 1992.131284] ? __fget_files+0x2f8/0x520 [ 1992.132143] ? __io_file_supports_nowait+0x22a/0x510 [ 1992.133242] ? io_prep_rw+0x7f5/0x1050 [ 1992.134091] io_submit_sqes+0x44aa/0x8610 [ 1992.135025] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1992.136096] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1992.137143] ? find_held_lock+0x2c/0x110 [ 1992.138027] ? io_submit_sqes+0x8610/0x8610 [ 1992.138977] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1992.140016] ? wait_for_completion_io+0x270/0x270 [ 1992.141056] ? rcu_read_lock_any_held+0x75/0xa0 [ 1992.142052] ? vfs_write+0x354/0xb10 [ 1992.142867] ? fput_many+0x2f/0x1a0 [ 1992.143651] ? ksys_write+0x1a9/0x260 [ 1992.144476] ? __ia32_sys_read+0xb0/0xb0 [ 1992.145355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1992.146480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1992.147598] do_syscall_64+0x33/0x40 [ 1992.148402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1992.149500] RIP: 0033:0x7f7726e3cb19 [ 1992.150295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1992.154262] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1992.155904] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 1992.157437] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1992.158973] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1992.160514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1992.162060] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:55:47 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000000000003caaff"], 0x0) 02:55:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000060000000000000aaff02"], 0x0) 02:55:47 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:55:47 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 02:55:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYBLOB='6\a']) [ 1992.245408] 9p: Unknown access argument 6 [ 1992.264861] 9p: Unknown access argument 6 [ 1992.287622] FAULT_INJECTION: forcing a failure. [ 1992.287622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1992.290362] CPU: 0 PID: 10453 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1992.291860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1992.293644] Call Trace: [ 1992.294217] dump_stack+0x107/0x167 [ 1992.295024] should_fail.cold+0x5/0xa [ 1992.295859] _copy_from_user+0x2e/0x1b0 [ 1992.296726] iovec_from_user+0x141/0x400 [ 1992.297612] __import_iovec+0x67/0x590 [ 1992.298457] ? SOFTIRQ_verbose+0x10/0x10 [ 1992.299341] ? lock_downgrade+0x6d0/0x6d0 [ 1992.300243] io_import_iovec+0x581/0x1120 [ 1992.301152] ? io_complete_rw+0x230/0x230 [ 1992.302051] ? lock_downgrade+0x6d0/0x6d0 [ 1992.302958] ? mark_lock+0xf5/0x2df0 [ 1992.303769] io_read+0xe14/0x11e0 [ 1992.304521] ? lock_chain_count+0x20/0x20 [ 1992.305413] ? __is_insn_slot_addr+0x14c/0x290 [ 1992.306407] ? __lock_acquire+0x1657/0x5b00 [ 1992.307346] ? kiocb_done+0xc90/0xc90 [ 1992.308166] ? mark_lock+0xf5/0x2df0 [ 1992.308976] ? lock_chain_count+0x20/0x20 [ 1992.309882] ? __lock_acquire+0x1657/0x5b00 [ 1992.310841] ? __lock_acquire+0xbb1/0x5b00 [ 1992.311759] io_issue_sqe+0x2e8a/0x77b0 [ 1992.312623] ? find_held_lock+0x2c/0x110 [ 1992.313514] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1992.314653] ? SOFTIRQ_verbose+0x10/0x10 [ 1992.315540] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1992.316563] ? lock_downgrade+0x6d0/0x6d0 [ 1992.317455] ? io_connect+0x610/0x610 [ 1992.318292] ? lock_acquire+0x197/0x470 [ 1992.319154] ? find_held_lock+0x2c/0x110 [ 1992.320037] ? __fget_files+0x2cf/0x520 [ 1992.320895] ? lock_downgrade+0x6d0/0x6d0 [ 1992.321793] __io_queue_sqe+0x90/0x9d0 [ 1992.322646] ? io_issue_sqe+0x77b0/0x77b0 [ 1992.323539] ? __fget_files+0x2f8/0x520 [ 1992.324402] ? __io_file_supports_nowait+0x22a/0x510 [ 1992.325495] ? io_prep_rw+0x7f5/0x1050 [ 1992.326349] io_submit_sqes+0x44aa/0x8610 [ 1992.327285] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1992.328356] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1992.329386] ? find_held_lock+0x2c/0x110 [ 1992.330305] ? io_submit_sqes+0x8610/0x8610 [ 1992.331263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1992.332303] ? wait_for_completion_io+0x270/0x270 [ 1992.333354] ? rcu_read_lock_any_held+0x75/0xa0 [ 1992.334361] ? vfs_write+0x354/0xb10 [ 1992.335170] ? fput_many+0x2f/0x1a0 [ 1992.335958] ? ksys_write+0x1a9/0x260 [ 1992.336781] ? __ia32_sys_read+0xb0/0xb0 [ 1992.337662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1992.338795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1992.339911] do_syscall_64+0x33/0x40 [ 1992.340713] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1992.341825] RIP: 0033:0x7f8398de7b19 [ 1992.342628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1992.346615] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1992.348252] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 1992.349776] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1992.351314] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1992.352836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1992.354370] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:56:02 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 02:56:02 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 02:56:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000100000000aaff02"], 0x0) 02:56:02 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 02:56:02 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000030000aaff"], 0x0) 02:56:02 executing program 3: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4004081) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) fork() 02:56:02 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 02:56:02 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2006.896553] FAULT_INJECTION: forcing a failure. [ 2006.896553] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.899409] CPU: 0 PID: 10464 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2006.900882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2006.902690] Call Trace: [ 2006.903373] dump_stack+0x107/0x167 [ 2006.904285] should_fail.cold+0x5/0xa [ 2006.905102] ? io_setup_async_rw+0x180/0x580 [ 2006.906246] should_failslab+0x5/0x20 [ 2006.907094] __kmalloc+0x72/0x390 [ 2006.907831] io_setup_async_rw+0x180/0x580 [ 2006.908751] ? iov_iter_restore+0x195/0x3a0 [ 2006.909674] io_read+0x775/0x11e0 [ 2006.910447] ? __is_insn_slot_addr+0x14c/0x290 [ 2006.911484] ? kiocb_done+0xc90/0xc90 [ 2006.912316] ? mark_lock+0xf5/0x2df0 [ 2006.913138] ? lock_chain_count+0x20/0x20 [ 2006.914160] ? __lock_acquire+0xbb1/0x5b00 [ 2006.915120] io_issue_sqe+0x2e8a/0x77b0 [ 2006.915985] ? find_held_lock+0x2c/0x110 [ 2006.916857] ? perf_trace_lock+0xac/0x490 [ 2006.917772] ? SOFTIRQ_verbose+0x10/0x10 [ 2006.918949] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2006.920043] ? io_connect+0x610/0x610 [ 2006.920851] ? lock_acquire+0x197/0x470 [ 2006.921689] ? find_held_lock+0x2c/0x110 [ 2006.922573] ? __fget_files+0x2cf/0x520 [ 2006.923547] ? lock_downgrade+0x6d0/0x6d0 [ 2006.924426] __io_queue_sqe+0x90/0x9d0 [ 2006.925250] ? io_issue_sqe+0x77b0/0x77b0 [ 2006.926119] ? __fget_files+0x2f8/0x520 [ 2006.927044] ? __io_file_supports_nowait+0x22a/0x510 [ 2006.928131] ? io_prep_rw+0x7f5/0x1050 [ 2006.928998] io_submit_sqes+0x44aa/0x8610 [ 2006.929927] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2006.930126] FAULT_INJECTION: forcing a failure. [ 2006.930126] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.931006] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2006.931043] ? find_held_lock+0x2c/0x110 [ 2006.935395] ? io_submit_sqes+0x8610/0x8610 [ 2006.936327] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2006.937372] ? wait_for_completion_io+0x270/0x270 [ 2006.938426] ? rcu_read_lock_any_held+0x75/0xa0 [ 2006.939420] ? vfs_write+0x354/0xb10 [ 2006.940208] ? fput_many+0x2f/0x1a0 [ 2006.940975] ? ksys_write+0x1a9/0x260 [ 2006.941790] ? __ia32_sys_read+0xb0/0xb0 [ 2006.942697] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2006.943847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2006.944935] do_syscall_64+0x33/0x40 [ 2006.945720] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2006.946831] RIP: 0033:0x7f8398de7b19 [ 2006.947627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2006.951562] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2006.953184] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 2006.954698] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2006.956204] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2006.957717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2006.959290] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 2006.961511] CPU: 1 PID: 10476 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2006.963000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2006.964777] Call Trace: [ 2006.965349] dump_stack+0x107/0x167 [ 2006.966132] should_fail.cold+0x5/0xa [ 2006.966954] ? __io_queue_sqe+0x666/0x9d0 [ 2006.967846] should_failslab+0x5/0x20 [ 2006.968660] kmem_cache_alloc_trace+0x55/0x320 [ 2006.969622] ? lock_downgrade+0x6d0/0x6d0 [ 2006.970508] __io_queue_sqe+0x666/0x9d0 [ 2006.971372] ? io_issue_sqe+0x77b0/0x77b0 [ 2006.972246] ? __fget_files+0x2f8/0x520 [ 2006.973089] ? __io_file_supports_nowait+0x22a/0x510 [ 2006.974158] ? io_prep_rw+0x7f5/0x1050 [ 2006.974997] io_submit_sqes+0x44aa/0x8610 [ 2006.975919] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2006.976965] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2006.977988] ? find_held_lock+0x2c/0x110 [ 2006.978870] ? io_submit_sqes+0x8610/0x8610 [ 2006.979798] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2006.980833] ? wait_for_completion_io+0x270/0x270 [ 2006.981856] ? rcu_read_lock_any_held+0x75/0xa0 [ 2006.982847] ? vfs_write+0x354/0xb10 [ 2006.983642] ? fput_many+0x2f/0x1a0 [ 2006.984411] ? ksys_write+0x1a9/0x260 [ 2006.985234] ? __ia32_sys_read+0xb0/0xb0 [ 2006.986098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2006.987216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2006.988320] do_syscall_64+0x33/0x40 [ 2006.989116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2006.990191] RIP: 0033:0x7f175bb3ab19 [ 2006.990982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2006.994908] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2006.996553] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2006.998378] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2007.000172] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2007.001988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2007.003808] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2007.020860] FAULT_INJECTION: forcing a failure. [ 2007.020860] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.023885] CPU: 1 PID: 10478 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2007.025660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.027802] Call Trace: [ 2007.028477] dump_stack+0x107/0x167 [ 2007.029409] should_fail.cold+0x5/0xa [ 2007.030387] ? create_object.isra.0+0x3a/0xa20 [ 2007.031569] should_failslab+0x5/0x20 [ 2007.032548] kmem_cache_alloc+0x5b/0x310 [ 2007.033588] ? mark_held_locks+0x9e/0xe0 [ 2007.034632] create_object.isra.0+0x3a/0xa20 [ 2007.035752] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.037064] kmem_cache_alloc_bulk+0x168/0x320 [ 2007.038238] io_submit_sqes+0x6fe6/0x8610 [ 2007.039319] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2007.040582] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2007.041855] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2007.043079] ? find_held_lock+0x2c/0x110 [ 2007.044109] ? io_submit_sqes+0x8610/0x8610 [ 2007.045192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2007.046414] ? wait_for_completion_io+0x270/0x270 [ 2007.047639] ? rcu_read_lock_any_held+0x75/0xa0 [ 2007.048810] ? vfs_write+0x354/0xb10 [ 2007.049758] ? fput_many+0x2f/0x1a0 [ 2007.050679] ? ksys_write+0x1a9/0x260 [ 2007.051645] ? __ia32_sys_read+0xb0/0xb0 [ 2007.052699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.054020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.055325] do_syscall_64+0x33/0x40 [ 2007.056265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.057555] RIP: 0033:0x7fa33f43fb19 [ 2007.058485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.063099] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2007.065035] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2007.066830] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2007.068625] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2007.070419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2007.072206] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2007.081613] FAULT_INJECTION: forcing a failure. [ 2007.081613] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.084665] CPU: 1 PID: 10475 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 2007.086395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.088456] Call Trace: [ 2007.089116] dump_stack+0x107/0x167 [ 2007.090020] should_fail.cold+0x5/0xa [ 2007.090979] ? __io_queue_sqe+0x666/0x9d0 [ 2007.092007] should_failslab+0x5/0x20 [ 2007.092973] kmem_cache_alloc_trace+0x55/0x320 [ 2007.094096] ? lock_downgrade+0x6d0/0x6d0 [ 2007.095160] __io_queue_sqe+0x666/0x9d0 02:56:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000300000000aaff02"], 0x0) [ 2007.096168] ? io_issue_sqe+0x77b0/0x77b0 [ 2007.097414] ? __fget_files+0x2f8/0x520 [ 2007.098390] ? __io_file_supports_nowait+0x22a/0x510 [ 2007.099686] ? io_prep_rw+0x7f5/0x1050 [ 2007.100668] io_submit_sqes+0x44aa/0x8610 [ 2007.101770] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2007.103015] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2007.104212] ? find_held_lock+0x2c/0x110 [ 2007.105211] ? io_submit_sqes+0x8610/0x8610 [ 2007.106286] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2007.107489] ? wait_for_completion_io+0x270/0x270 [ 2007.108670] ? rcu_read_lock_any_held+0x75/0xa0 [ 2007.109805] ? vfs_write+0x354/0xb10 [ 2007.110718] ? fput_many+0x2f/0x1a0 [ 2007.111635] ? ksys_write+0x1a9/0x260 [ 2007.112578] ? __ia32_sys_read+0xb0/0xb0 [ 2007.113597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.114883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.116137] do_syscall_64+0x33/0x40 [ 2007.117068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.118322] RIP: 0033:0x7f7726e3cb19 [ 2007.119242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.123754] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2007.125593] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 2007.127345] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2007.129099] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2007.130855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2007.132601] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:56:02 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:56:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000500000000aaff02"], 0x0) 02:56:02 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000050000aaff"], 0x0) 02:56:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4010, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa63fd6a5717620d2}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) r5 = dup(0xffffffffffffffff) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x718, 0x280) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0xee00}}, './file0\x00'}) io_uring_enter(r5, 0x84, 0x66c4, 0x2, &(0x7f0000000140)={[0x6]}, 0x8) lsetxattr$system_posix_acl(0x0, &(0x7f0000000400)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./mnt/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000700)='./mnt/file0\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [], {}, [{0x8, 0x0, 0xee00}, {}]}, 0x34, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 02:56:02 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000003c0000aaff"], 0x0) 02:56:02 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 02:56:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000003c00000000aaff02"], 0x0) [ 2007.400263] FAULT_INJECTION: forcing a failure. [ 2007.400263] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.402873] CPU: 1 PID: 10497 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2007.404390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.406185] Call Trace: [ 2007.406757] dump_stack+0x107/0x167 [ 2007.407564] should_fail.cold+0x5/0xa [ 2007.408396] should_failslab+0x5/0x20 [ 2007.409216] kmem_cache_alloc_bulk+0x4b/0x320 [ 2007.410205] io_submit_sqes+0x6fe6/0x8610 [ 2007.411119] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2007.412211] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2007.413293] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2007.414327] ? find_held_lock+0x2c/0x110 [ 2007.415222] ? io_submit_sqes+0x8610/0x8610 [ 2007.416160] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2007.417191] ? wait_for_completion_io+0x270/0x270 [ 2007.418230] ? rcu_read_lock_any_held+0x75/0xa0 [ 2007.419241] ? vfs_write+0x354/0xb10 [ 2007.420046] ? fput_many+0x2f/0x1a0 [ 2007.420828] ? ksys_write+0x1a9/0x260 [ 2007.421644] ? __ia32_sys_read+0xb0/0xb0 [ 2007.422524] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.423684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.424816] do_syscall_64+0x33/0x40 [ 2007.425628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2007.426728] RIP: 0033:0x7f1e32d62b19 [ 2007.427542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.431498] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2007.433113] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2007.434637] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2007.436170] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2007.437718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2007.439216] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:56:17 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 02:56:17 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 02:56:17 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 02:56:17 executing program 3: r0 = semget(0x2, 0x0, 0x20b) semop(r0, &(0x7f0000000340)=[{0x0, 0x4, 0x800}, {0x2, 0x57, 0x1000}, {0x1, 0x9, 0x1800}, {0x1, 0x80, 0x800}, {0x1, 0x6, 0x1000}, {0x1}], 0x6) semtimedop(r0, &(0x7f0000000400)=[{0x0, 0x4, 0x1000}], 0x1, &(0x7f00000003c0)) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000400)=""/42) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x3873, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fadvise64(r5, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4, 0x8800) syz_io_uring_submit(0x0, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r7, &(0x7f0000000340)={0x0, 0x80}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) io_submit(0x0, 0x6, &(0x7f0000001800)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000440)="657317", 0x3, 0x5, 0x0, 0x3, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x4, r1, &(0x7f00000004c0)="7ab83b2394dc4b15ed0cad32bc34351cd5c625a1e6991c09039991a1072204cda7fc3c6e18db3f9722", 0x29, 0x4, 0x0, 0x3, r1}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x3, 0x97, 0xffffffffffffffff, &(0x7f0000000540)="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", 0x1000, 0x6}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x5, 0x401, r5, &(0x7f0000001580), 0x0, 0x101, 0x0, 0x2, r5}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000001600)="39e2c04e4f38b86bdc4ba5536699fbcb81c6742de989db866211ec58a9f79acc4d26c907c12b61cdc9ce9f65f1708529dceeb703debd2ed9e6642b7cbce774c94438283a8aaff198221960134da07032f5ba71e0f76c30faea996ea37de102da4d649eefa733a48309b36c3980721bdbf99ef470ad5091b9fd74f56291493c8f04332cf59dbb96329395992af49aae43d61ea21f0d8e93b89506248c7db890fa280ff48650a0f87b9dcaca6cedd931c9063abb49d7a8a9e0eac62791c2eca651c40a9faf0b349ae6417a629df2a10a51cae72346addbd38551", 0xd9, 0x800, 0x0, 0x1}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6, 0x3ff, r5, &(0x7f0000001740)="e23aabe33e55a976c3a047eeeffb1c5e66de4bac0bd9d28dfcbeda3449d1802911488db5cc5a69cd7d456b89fcb6d5f5bd3f2bfb4d7e42e0e3f32a9e67a87f00ef88c73f", 0x44, 0xb598, 0x0, 0x2, r1}]) 02:56:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000300aaff"], 0x0) 02:56:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000004000000000aaff02"], 0x0) 02:56:17 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 02:56:17 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) [ 2021.980663] FAULT_INJECTION: forcing a failure. [ 2021.980663] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.982168] CPU: 1 PID: 10517 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2021.983036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.984070] Call Trace: [ 2021.984406] dump_stack+0x107/0x167 [ 2021.984871] should_fail.cold+0x5/0xa [ 2021.985351] ? create_object.isra.0+0x3a/0xa20 [ 2021.985923] should_failslab+0x5/0x20 [ 2021.986399] kmem_cache_alloc+0x5b/0x310 [ 2021.986913] ? mark_held_locks+0x9e/0xe0 [ 2021.987433] create_object.isra.0+0x3a/0xa20 [ 2021.987981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.988615] kmem_cache_alloc_bulk+0x168/0x320 [ 2021.989190] io_submit_sqes+0x6fe6/0x8610 [ 2021.989711] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2021.990329] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2021.990954] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2021.991569] ? find_held_lock+0x2c/0x110 [ 2021.992077] ? io_submit_sqes+0x8610/0x8610 [ 2021.992616] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2021.993217] ? wait_for_completion_io+0x270/0x270 [ 2021.993825] ? rcu_read_lock_any_held+0x75/0xa0 [ 2021.994401] ? vfs_write+0x354/0xb10 [ 2021.994864] ? fput_many+0x2f/0x1a0 [ 2021.995325] ? ksys_write+0x1a9/0x260 [ 2021.995798] ? __ia32_sys_read+0xb0/0xb0 [ 2021.996304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.996962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.997601] do_syscall_64+0x33/0x40 [ 2021.998063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2021.998696] RIP: 0033:0x7fa33f43fb19 [ 2021.999171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.001441] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.002379] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2022.003271] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.004155] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.005036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2022.005916] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2022.026946] FAULT_INJECTION: forcing a failure. [ 2022.026946] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.028394] CPU: 1 PID: 10525 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2022.029266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.030281] Call Trace: [ 2022.030610] dump_stack+0x107/0x167 [ 2022.031080] should_fail.cold+0x5/0xa [ 2022.031556] ? create_object.isra.0+0x3a/0xa20 [ 2022.032114] should_failslab+0x5/0x20 [ 2022.032582] kmem_cache_alloc+0x5b/0x310 [ 2022.033095] create_object.isra.0+0x3a/0xa20 [ 2022.033639] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.034266] kmem_cache_alloc_trace+0x151/0x320 [ 2022.034836] ? lock_downgrade+0x6d0/0x6d0 [ 2022.035360] __io_queue_sqe+0x666/0x9d0 [ 2022.035851] ? io_issue_sqe+0x77b0/0x77b0 [ 2022.036361] ? __fget_files+0x2f8/0x520 [ 2022.036856] ? __io_file_supports_nowait+0x22a/0x510 [ 2022.037477] ? io_prep_rw+0x7f5/0x1050 [ 2022.037954] io_submit_sqes+0x44aa/0x8610 [ 2022.038476] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.039089] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.039682] ? find_held_lock+0x2c/0x110 [ 2022.040187] ? io_submit_sqes+0x8610/0x8610 [ 2022.040718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.041307] ? wait_for_completion_io+0x270/0x270 [ 2022.041898] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.042471] ? vfs_write+0x354/0xb10 [ 2022.042948] ? fput_many+0x2f/0x1a0 [ 2022.043397] ? ksys_write+0x1a9/0x260 [ 2022.043864] ? __ia32_sys_read+0xb0/0xb0 [ 2022.044363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.045023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.045658] do_syscall_64+0x33/0x40 [ 2022.046116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.046396] FAULT_INJECTION: forcing a failure. [ 2022.046396] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.046736] RIP: 0033:0x7f175bb3ab19 [ 2022.046757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.051847] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.052772] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2022.053669] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.054536] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.055414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.056294] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2022.057185] CPU: 0 PID: 10528 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2022.058697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.060495] Call Trace: [ 2022.061073] dump_stack+0x107/0x167 [ 2022.061859] should_fail.cold+0x5/0xa [ 2022.062679] ? create_object.isra.0+0x3a/0xa20 [ 2022.063666] should_failslab+0x5/0x20 [ 2022.064483] kmem_cache_alloc+0x5b/0x310 [ 2022.065369] create_object.isra.0+0x3a/0xa20 [ 2022.066311] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.067456] __kmalloc+0x16e/0x390 [ 2022.068288] io_setup_async_rw+0x180/0x580 [ 2022.069268] ? iov_iter_restore+0x195/0x3a0 [ 2022.070262] io_read+0x775/0x11e0 [ 2022.071084] ? __is_insn_slot_addr+0x14c/0x290 [ 2022.072144] ? kiocb_done+0xc90/0xc90 [ 2022.073029] ? mark_lock+0xf5/0x2df0 [ 2022.073897] ? lock_chain_count+0x20/0x20 [ 2022.074880] ? __lock_acquire+0xbb1/0x5b00 [ 2022.075937] io_issue_sqe+0x2e8a/0x77b0 [ 2022.076901] ? find_held_lock+0x2c/0x110 [ 2022.077883] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.079150] ? SOFTIRQ_verbose+0x10/0x10 [ 2022.080124] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2022.081257] ? lock_downgrade+0x6d0/0x6d0 [ 2022.082331] ? io_connect+0x610/0x610 [ 2022.083198] ? lock_acquire+0x197/0x470 [ 2022.084073] ? find_held_lock+0x2c/0x110 [ 2022.084981] ? __fget_files+0x2cf/0x520 [ 2022.085913] ? lock_downgrade+0x6d0/0x6d0 [ 2022.086835] __io_queue_sqe+0x90/0x9d0 [ 2022.087718] ? io_issue_sqe+0x77b0/0x77b0 [ 2022.088626] ? __fget_files+0x2f8/0x520 [ 2022.089562] ? __io_file_supports_nowait+0x22a/0x510 [ 2022.090682] ? io_prep_rw+0x7f5/0x1050 [ 2022.091618] io_submit_sqes+0x44aa/0x8610 [ 2022.092564] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.093675] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.094810] ? find_held_lock+0x2c/0x110 [ 2022.095760] ? io_submit_sqes+0x8610/0x8610 [ 2022.096718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.097844] ? wait_for_completion_io+0x270/0x270 [ 2022.098912] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.100044] ? vfs_write+0x354/0xb10 [ 2022.100870] ? fput_many+0x2f/0x1a0 [ 2022.101676] ? ksys_write+0x1a9/0x260 [ 2022.102522] ? __ia32_sys_read+0xb0/0xb0 [ 2022.103442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.104605] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.105747] do_syscall_64+0x33/0x40 [ 2022.106570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.107718] RIP: 0033:0x7f8398de7b19 [ 2022.108542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.109198] FAULT_INJECTION: forcing a failure. [ 2022.109198] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.112623] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.112652] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 2022.117224] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.118794] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.120349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.121939] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 2022.123517] CPU: 1 PID: 10530 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2022.124342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.125321] Call Trace: [ 2022.125639] dump_stack+0x107/0x167 [ 2022.126072] should_fail.cold+0x5/0xa [ 2022.126529] ? create_object.isra.0+0x3a/0xa20 [ 2022.127082] should_failslab+0x5/0x20 [ 2022.127547] kmem_cache_alloc+0x5b/0x310 [ 2022.127594] FAULT_INJECTION: forcing a failure. [ 2022.127594] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.128028] create_object.isra.0+0x3a/0xa20 [ 2022.128041] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.128058] kmem_cache_alloc_trace+0x151/0x320 [ 2022.128076] io_uring_alloc_task_context+0x99/0x6a0 [ 2022.128088] ? io_import_iovec+0x1120/0x1120 [ 2022.128101] ? find_held_lock+0x2c/0x110 [ 2022.128115] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2022.128129] __io_uring_add_tctx_node+0x2c6/0x520 [ 2022.128141] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2022.128160] __do_sys_io_uring_enter+0x146f/0x1890 [ 2022.128173] ? find_held_lock+0x2c/0x110 [ 2022.128188] ? io_submit_sqes+0x8610/0x8610 [ 2022.128204] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.128223] ? wait_for_completion_io+0x270/0x270 [ 2022.138251] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.138806] ? vfs_write+0x354/0xb10 [ 2022.139252] ? fput_many+0x2f/0x1a0 [ 2022.139685] ? ksys_write+0x1a9/0x260 [ 2022.140131] ? __ia32_sys_read+0xb0/0xb0 [ 2022.140614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.141229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.141840] do_syscall_64+0x33/0x40 [ 2022.142274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.142879] RIP: 0033:0x7f1e32d62b19 [ 2022.143333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.145467] RSP: 002b:00007f1e302b7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.146378] RAX: ffffffffffffffda RBX: 00007f1e32e76020 RCX: 00007f1e32d62b19 [ 2022.147218] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.148083] RBP: 00007f1e302b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.148947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2022.149808] R13: 00007ffcc97037ef R14: 00007f1e302b7300 R15: 0000000000022000 [ 2022.150700] CPU: 0 PID: 10526 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 2022.152262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.154106] Call Trace: [ 2022.154691] dump_stack+0x107/0x167 [ 2022.155512] should_fail.cold+0x5/0xa [ 2022.156360] ? create_object.isra.0+0x3a/0xa20 [ 2022.157373] should_failslab+0x5/0x20 [ 2022.158218] kmem_cache_alloc+0x5b/0x310 [ 2022.159138] create_object.isra.0+0x3a/0xa20 [ 2022.160113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.161244] kmem_cache_alloc_trace+0x151/0x320 [ 2022.162277] ? lock_downgrade+0x6d0/0x6d0 [ 2022.163210] __io_queue_sqe+0x666/0x9d0 [ 2022.164100] ? io_issue_sqe+0x77b0/0x77b0 [ 2022.165016] ? __fget_files+0x2f8/0x520 [ 2022.165899] ? __io_file_supports_nowait+0x22a/0x510 [ 2022.167036] ? io_prep_rw+0x7f5/0x1050 [ 2022.167907] io_submit_sqes+0x44aa/0x8610 [ 2022.168861] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.169964] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.171051] ? find_held_lock+0x2c/0x110 [ 2022.171953] ? io_submit_sqes+0x8610/0x8610 [ 2022.172890] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.174029] ? wait_for_completion_io+0x270/0x270 [ 2022.175131] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.176146] ? vfs_write+0x354/0xb10 [ 2022.176946] ? fput_many+0x2f/0x1a0 [ 2022.177724] ? ksys_write+0x1a9/0x260 [ 2022.178539] ? __ia32_sys_read+0xb0/0xb0 [ 2022.179425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.180551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.181657] do_syscall_64+0x33/0x40 [ 2022.182452] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.183568] RIP: 0033:0x7f7726e3cb19 [ 2022.184360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.188341] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.189979] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 2022.191521] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.193056] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.194604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.196158] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:56:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000500aaff"], 0x0) 02:56:17 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 2022.314447] FAULT_INJECTION: forcing a failure. [ 2022.314447] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.315765] CPU: 1 PID: 10537 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2022.316519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.317433] Call Trace: [ 2022.317740] dump_stack+0x107/0x167 [ 2022.318156] should_fail.cold+0x5/0xa [ 2022.318609] ? create_object.isra.0+0x3a/0xa20 [ 2022.319129] should_failslab+0x5/0x20 [ 2022.319551] kmem_cache_alloc+0x5b/0x310 [ 2022.319997] ? mark_held_locks+0x9e/0xe0 [ 2022.320457] create_object.isra.0+0x3a/0xa20 [ 2022.320932] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.321481] kmem_cache_alloc_bulk+0x168/0x320 [ 2022.321980] io_submit_sqes+0x6fe6/0x8610 [ 2022.322432] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2022.322983] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.323519] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.324041] ? find_held_lock+0x2c/0x110 [ 2022.324485] ? io_submit_sqes+0x8610/0x8610 [ 2022.324957] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.325489] ? wait_for_completion_io+0x270/0x270 [ 2022.326013] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.326518] ? vfs_write+0x354/0xb10 [ 2022.326919] ? fput_many+0x2f/0x1a0 [ 2022.327332] ? ksys_write+0x1a9/0x260 [ 2022.327740] ? __ia32_sys_read+0xb0/0xb0 [ 2022.328189] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.328756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.329323] do_syscall_64+0x33/0x40 [ 2022.329727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.330285] RIP: 0033:0x7fa33f43fb19 [ 2022.330682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.332695] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.333524] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2022.334303] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.335101] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.335888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.336681] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:56:17 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 02:56:17 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) [ 2022.460528] FAULT_INJECTION: forcing a failure. [ 2022.460528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2022.463381] CPU: 0 PID: 10541 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 2022.464931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.466783] Call Trace: [ 2022.467390] dump_stack+0x107/0x167 [ 2022.468208] should_fail.cold+0x5/0xa [ 2022.469069] _copy_from_user+0x2e/0x1b0 [ 2022.469963] iovec_from_user+0x141/0x400 [ 2022.470875] __import_iovec+0x67/0x590 [ 2022.471750] ? SOFTIRQ_verbose+0x10/0x10 [ 2022.472652] ? lock_downgrade+0x6d0/0x6d0 [ 2022.473547] io_import_iovec+0x581/0x1120 [ 2022.474479] ? io_complete_rw+0x230/0x230 [ 2022.475420] ? lock_downgrade+0x6d0/0x6d0 [ 2022.476362] ? mark_lock+0xf5/0x2df0 [ 2022.476387] io_read+0xe14/0x11e0 [ 2022.476405] ? lock_chain_count+0x20/0x20 [ 2022.476431] ? __is_insn_slot_addr+0x14c/0x290 [ 2022.479686] ? __lock_acquire+0x1657/0x5b00 [ 2022.480651] ? kiocb_done+0xc90/0xc90 [ 2022.481496] ? mark_lock+0xf5/0x2df0 [ 2022.482306] ? lock_chain_count+0x20/0x20 [ 2022.483244] ? __lock_acquire+0x1657/0x5b00 [ 2022.484198] ? __lock_acquire+0xbb1/0x5b00 [ 2022.485142] io_issue_sqe+0x2e8a/0x77b0 [ 2022.486001] ? find_held_lock+0x2c/0x110 [ 2022.486908] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.488079] ? SOFTIRQ_verbose+0x10/0x10 [ 2022.488947] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2022.489998] ? lock_downgrade+0x6d0/0x6d0 [ 2022.490884] ? io_connect+0x610/0x610 [ 2022.491760] ? lock_acquire+0x197/0x470 [ 2022.492613] ? find_held_lock+0x2c/0x110 [ 2022.493522] ? __fget_files+0x2cf/0x520 [ 2022.494377] ? lock_downgrade+0x6d0/0x6d0 [ 2022.495308] __io_queue_sqe+0x90/0x9d0 [ 2022.496180] ? io_issue_sqe+0x77b0/0x77b0 [ 2022.497092] ? __fget_files+0x2f8/0x520 [ 2022.497982] ? __io_file_supports_nowait+0x22a/0x510 [ 2022.499122] ? io_prep_rw+0x7f5/0x1050 [ 2022.500001] io_submit_sqes+0x44aa/0x8610 [ 2022.500962] ? __do_sys_io_uring_enter+0x1ef/0x1890 [ 2022.502076] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.503193] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.504277] ? _raw_spin_unlock_irq+0x1f/0x30 02:56:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000003c00aaff"], 0x0) 02:56:18 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 2022.505269] ? _raw_spin_unlock_irq+0x27/0x30 [ 2022.506444] ? io_submit_sqes+0x8610/0x8610 [ 2022.507411] ? finish_task_switch+0x126/0x5d0 [ 2022.508407] ? finish_task_switch+0xef/0x5d0 [ 2022.509379] ? __switch_to+0x572/0xf70 [ 2022.510240] ? __switch_to_asm+0x3a/0x60 [ 2022.511164] ? __switch_to_asm+0x34/0x60 [ 2022.512068] ? __schedule+0x82c/0x1ea0 [ 2022.512941] ? io_schedule_timeout+0x140/0x140 [ 2022.513951] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2022.514981] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2022.516187] ? ksys_write+0x1a9/0x260 [ 2022.517041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.518209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.519365] do_syscall_64+0x33/0x40 [ 2022.520194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.521333] RIP: 0033:0x7f7726e3cb19 [ 2022.522157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.526247] RSP: 002b:00007f77243b2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.527950] RAX: ffffffffffffffda RBX: 00007f7726f4ff60 RCX: 00007f7726e3cb19 [ 2022.529531] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.531125] RBP: 00007f77243b21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.532704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.534293] R13: 00007ffc7920e16f R14: 00007f77243b2300 R15: 0000000000022000 02:56:18 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 2022.560309] FAULT_INJECTION: forcing a failure. [ 2022.560309] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.561646] CPU: 1 PID: 10546 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2022.562434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.563389] Call Trace: [ 2022.563694] dump_stack+0x107/0x167 [ 2022.564109] should_fail.cold+0x5/0xa [ 2022.564544] ? __io_queue_sqe+0x666/0x9d0 [ 2022.565024] should_failslab+0x5/0x20 [ 2022.565465] kmem_cache_alloc_trace+0x55/0x320 [ 2022.565998] ? lock_downgrade+0x6d0/0x6d0 [ 2022.566472] __io_queue_sqe+0x666/0x9d0 [ 2022.566929] ? io_issue_sqe+0x77b0/0x77b0 [ 2022.567407] ? __fget_files+0x2f8/0x520 [ 2022.567856] ? __io_file_supports_nowait+0x22a/0x510 [ 2022.568436] ? io_prep_rw+0x7f5/0x1050 [ 2022.568879] io_submit_sqes+0x44aa/0x8610 [ 2022.569369] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.569932] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.570480] ? find_held_lock+0x2c/0x110 [ 2022.570764] FAULT_INJECTION: forcing a failure. [ 2022.570764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2022.570953] ? io_submit_sqes+0x8610/0x8610 [ 2022.570969] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.570981] ? wait_for_completion_io+0x270/0x270 [ 2022.570995] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.571005] ? vfs_write+0x354/0xb10 [ 2022.571016] ? fput_many+0x2f/0x1a0 [ 2022.571027] ? ksys_write+0x1a9/0x260 [ 2022.571046] ? __ia32_sys_read+0xb0/0xb0 [ 2022.577461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.578062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.578644] do_syscall_64+0x33/0x40 [ 2022.579075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.579651] RIP: 0033:0x7f8398de7b19 [ 2022.580077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.582157] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.583024] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 2022.583827] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.584635] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.585446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.586252] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:56:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000006000000000aaff02"], 0x0) [ 2022.587103] CPU: 0 PID: 10549 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2022.588813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.590658] Call Trace: [ 2022.591259] dump_stack+0x107/0x167 [ 2022.592074] should_fail.cold+0x5/0xa [ 2022.592928] _copy_from_user+0x2e/0x1b0 [ 2022.593815] iovec_from_user+0x141/0x400 [ 2022.594724] __import_iovec+0x67/0x590 [ 2022.595592] ? SOFTIRQ_verbose+0x10/0x10 [ 2022.596492] ? lock_downgrade+0x6d0/0x6d0 [ 2022.597420] io_import_iovec+0x581/0x1120 [ 2022.598348] ? io_complete_rw+0x230/0x230 [ 2022.599274] ? register_lock_class+0xbb/0x17b0 [ 2022.600285] ? lock_downgrade+0x6d0/0x6d0 [ 2022.601210] ? mark_lock+0xf5/0x2df0 [ 2022.602041] io_read+0xe14/0x11e0 [ 2022.602809] ? lock_chain_count+0x20/0x20 [ 2022.603737] ? __is_insn_slot_addr+0x14c/0x290 [ 2022.604749] ? register_lock_class+0xbb/0x17b0 [ 2022.605855] ? __lock_acquire+0x1657/0x5b00 [ 2022.606815] ? kiocb_done+0xc90/0xc90 [ 2022.607667] ? mark_lock+0xf5/0x2df0 [ 2022.608500] ? lock_chain_count+0x20/0x20 [ 2022.609425] ? __lock_acquire+0x1657/0x5b00 [ 2022.610410] ? __lock_acquire+0xbb1/0x5b00 [ 2022.611361] io_issue_sqe+0x2e8a/0x77b0 [ 2022.612245] ? find_held_lock+0x2c/0x110 [ 2022.613148] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.614306] ? SOFTIRQ_verbose+0x10/0x10 [ 2022.615212] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2022.616262] ? lock_downgrade+0x6d0/0x6d0 [ 2022.617179] ? io_connect+0x610/0x610 [ 2022.618029] ? lock_acquire+0x197/0x470 [ 2022.618907] ? find_held_lock+0x2c/0x110 [ 2022.619911] ? __fget_files+0x2cf/0x520 [ 2022.620798] ? lock_downgrade+0x6d0/0x6d0 [ 2022.621727] __io_queue_sqe+0x90/0x9d0 [ 2022.622604] ? io_issue_sqe+0x77b0/0x77b0 [ 2022.623535] ? __fget_files+0x2f8/0x520 [ 2022.624418] ? __io_file_supports_nowait+0x22a/0x510 [ 2022.625576] ? io_prep_rw+0x7f5/0x1050 [ 2022.626476] io_submit_sqes+0x44aa/0x8610 [ 2022.627446] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.628552] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.629725] ? find_held_lock+0x2c/0x110 [ 2022.630633] ? io_submit_sqes+0x8610/0x8610 [ 2022.631663] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.632733] ? wait_for_completion_io+0x270/0x270 [ 2022.633804] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.634891] ? vfs_write+0x354/0xb10 [ 2022.635750] ? fput_many+0x2f/0x1a0 [ 2022.636640] ? ksys_write+0x1a9/0x260 [ 2022.637510] ? __ia32_sys_read+0xb0/0xb0 [ 2022.638505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.639688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.640834] do_syscall_64+0x33/0x40 [ 2022.641659] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.642796] RIP: 0033:0x7f175bb3ab19 [ 2022.643692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.647800] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.649573] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2022.651176] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.652754] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.654391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.655988] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2022.671189] FAULT_INJECTION: forcing a failure. [ 2022.671189] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.672576] CPU: 1 PID: 10552 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2022.673368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.674321] Call Trace: [ 2022.674627] dump_stack+0x107/0x167 [ 2022.675059] should_fail.cold+0x5/0xa [ 2022.675504] ? create_object.isra.0+0x3a/0xa20 [ 2022.676030] should_failslab+0x5/0x20 [ 2022.676471] kmem_cache_alloc+0x5b/0x310 [ 2022.676941] create_object.isra.0+0x3a/0xa20 [ 2022.677446] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.678036] kmem_cache_alloc_bulk+0x168/0x320 [ 2022.678569] io_submit_sqes+0x6fe6/0x8610 [ 2022.679059] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2022.679634] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.680207] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.680762] ? find_held_lock+0x2c/0x110 [ 2022.681230] ? io_submit_sqes+0x8610/0x8610 [ 2022.681729] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.682285] ? wait_for_completion_io+0x270/0x270 [ 2022.682843] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.683383] ? vfs_write+0x354/0xb10 [ 2022.683813] ? fput_many+0x2f/0x1a0 [ 2022.684233] ? ksys_write+0x1a9/0x260 [ 2022.684672] ? __ia32_sys_read+0xb0/0xb0 [ 2022.685142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.685744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.686338] do_syscall_64+0x33/0x40 [ 2022.686767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.687367] RIP: 0033:0x7f1e32d62b19 [ 2022.687794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.689913] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.690791] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2022.691615] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2022.692436] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.693259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2022.694080] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:56:33 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 02:56:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000003c00000000aaff02"], 0x0) 02:56:33 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 02:56:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000fffffff500000000aaff02"], 0x0) 02:56:33 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 02:56:33 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 02:56:33 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000300aaff"], 0x0) 02:56:34 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 2038.430467] FAULT_INJECTION: forcing a failure. [ 2038.430467] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.432938] CPU: 1 PID: 10564 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2038.434411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.436197] Call Trace: [ 2038.436767] dump_stack+0x107/0x167 [ 2038.437564] should_fail.cold+0x5/0xa [ 2038.438385] ? io_setup_async_rw+0x180/0x580 [ 2038.439360] should_failslab+0x5/0x20 [ 2038.439670] FAULT_INJECTION: forcing a failure. [ 2038.439670] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.440185] __kmalloc+0x72/0x390 [ 2038.440212] io_setup_async_rw+0x180/0x580 [ 2038.440229] ? iov_iter_restore+0x195/0x3a0 [ 2038.440253] io_read+0x775/0x11e0 [ 2038.440290] ? kiocb_done+0xc90/0xc90 [ 2038.447615] ? mark_lock+0xf5/0x2df0 [ 2038.448422] ? lock_chain_count+0x20/0x20 [ 2038.449312] ? stack_trace_consume_entry+0x160/0x160 [ 2038.450398] ? lock_acquire+0x197/0x470 [ 2038.451266] ? __lock_acquire+0xbb1/0x5b00 [ 2038.452170] io_issue_sqe+0x2e8a/0x77b0 [ 2038.453035] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.454141] ? SOFTIRQ_verbose+0x10/0x10 [ 2038.454998] ? lock_chain_count+0x20/0x20 [ 2038.455892] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.457002] ? io_connect+0x610/0x610 [ 2038.457814] ? lock_acquire+0x197/0x470 [ 2038.458657] ? find_held_lock+0x2c/0x110 [ 2038.459535] ? __fget_files+0x2cf/0x520 [ 2038.460380] ? lock_downgrade+0x6d0/0x6d0 [ 2038.461269] __io_queue_sqe+0x90/0x9d0 [ 2038.462113] ? io_issue_sqe+0x77b0/0x77b0 [ 2038.462992] ? __fget_files+0x2f8/0x520 [ 2038.463837] ? __io_file_supports_nowait+0x22a/0x510 [ 2038.464920] ? io_prep_rw+0x7f5/0x1050 [ 2038.465754] io_submit_sqes+0x44aa/0x8610 [ 2038.466659] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2038.467731] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2038.468759] ? find_held_lock+0x2c/0x110 [ 2038.469636] ? io_submit_sqes+0x8610/0x8610 [ 2038.470559] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2038.471592] ? wait_for_completion_io+0x270/0x270 [ 2038.472619] ? rcu_read_lock_any_held+0x75/0xa0 [ 2038.473656] ? vfs_write+0x354/0xb10 [ 2038.474456] ? fput_many+0x2f/0x1a0 [ 2038.475249] ? ksys_write+0x1a9/0x260 [ 2038.476054] ? __ia32_sys_read+0xb0/0xb0 [ 2038.476914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.478027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.479132] do_syscall_64+0x33/0x40 [ 2038.479933] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.481020] RIP: 0033:0x7fa33f43fb19 [ 2038.481806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.485735] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2038.487363] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2038.488884] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2038.490387] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.491907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2038.493426] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2038.494978] CPU: 0 PID: 10567 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2038.496521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.498351] Call Trace: [ 2038.498934] dump_stack+0x107/0x167 [ 2038.499754] should_fail.cold+0x5/0xa [ 2038.500604] ? create_object.isra.0+0x3a/0xa20 [ 2038.501606] should_failslab+0x5/0x20 [ 2038.502435] kmem_cache_alloc+0x5b/0x310 [ 2038.503352] create_object.isra.0+0x3a/0xa20 [ 2038.504302] FAULT_INJECTION: forcing a failure. [ 2038.504302] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.506695] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.507851] kmem_cache_alloc_trace+0x151/0x320 [ 2038.508861] ? lock_downgrade+0x6d0/0x6d0 [ 2038.509770] __io_queue_sqe+0x666/0x9d0 [ 2038.510645] ? io_issue_sqe+0x77b0/0x77b0 [ 2038.511565] ? __fget_files+0x2f8/0x520 [ 2038.512438] ? __io_file_supports_nowait+0x22a/0x510 [ 2038.513554] ? io_prep_rw+0x7f5/0x1050 [ 2038.514407] io_submit_sqes+0x44aa/0x8610 [ 2038.515359] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2038.516447] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2038.517521] ? find_held_lock+0x2c/0x110 [ 2038.518422] ? io_submit_sqes+0x8610/0x8610 [ 2038.519390] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2038.520437] ? wait_for_completion_io+0x270/0x270 [ 2038.521484] ? rcu_read_lock_any_held+0x75/0xa0 [ 2038.522507] ? vfs_write+0x354/0xb10 [ 2038.523337] ? fput_many+0x2f/0x1a0 [ 2038.524129] ? ksys_write+0x1a9/0x260 [ 2038.524970] ? __ia32_sys_read+0xb0/0xb0 [ 2038.525853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.527005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.528144] do_syscall_64+0x33/0x40 [ 2038.528969] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.530132] RIP: 0033:0x7f8398de7b19 [ 2038.530949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.535094] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2038.536793] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 2038.538380] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2038.539968] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.541544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2038.543152] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 2038.544787] CPU: 1 PID: 10572 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2038.546280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.548061] Call Trace: [ 2038.548632] dump_stack+0x107/0x167 [ 2038.549416] should_fail.cold+0x5/0xa [ 2038.550229] ? create_object.isra.0+0x3a/0xa20 [ 2038.551202] should_failslab+0x5/0x20 [ 2038.552038] kmem_cache_alloc+0x5b/0x310 [ 2038.552902] ? mark_held_locks+0x9e/0xe0 [ 2038.553764] create_object.isra.0+0x3a/0xa20 [ 2038.554711] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.555821] kmem_cache_alloc_bulk+0x168/0x320 [ 2038.556798] io_submit_sqes+0x6fe6/0x8610 [ 2038.557689] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2038.558752] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2038.559818] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2038.560849] ? find_held_lock+0x2c/0x110 [ 2038.561722] ? io_submit_sqes+0x8610/0x8610 [ 2038.562649] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2038.563725] ? wait_for_completion_io+0x270/0x270 [ 2038.564746] ? rcu_read_lock_any_held+0x75/0xa0 [ 2038.565739] ? vfs_write+0x354/0xb10 [ 2038.566533] ? fput_many+0x2f/0x1a0 [ 2038.567362] ? ksys_write+0x1a9/0x260 [ 2038.568247] ? __ia32_sys_read+0xb0/0xb0 [ 2038.569118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.570247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.571370] do_syscall_64+0x33/0x40 [ 2038.572163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.573243] RIP: 0033:0x7f1e32d62b19 [ 2038.574038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.577971] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2038.579610] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2038.581131] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2038.582639] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.584163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2038.585674] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2038.607996] FAULT_INJECTION: forcing a failure. [ 2038.607996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2038.610506] CPU: 1 PID: 10576 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2038.612034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.613835] Call Trace: [ 2038.614414] dump_stack+0x107/0x167 [ 2038.615228] should_fail.cold+0x5/0xa [ 2038.616067] _copy_from_user+0x2e/0x1b0 [ 2038.616926] iovec_from_user+0x141/0x400 [ 2038.617794] __import_iovec+0x67/0x590 [ 2038.618617] ? SOFTIRQ_verbose+0x10/0x10 [ 2038.619492] ? lock_downgrade+0x6d0/0x6d0 [ 2038.620383] io_import_iovec+0x581/0x1120 [ 2038.621274] ? io_complete_rw+0x230/0x230 [ 2038.622143] ? register_lock_class+0xbb/0x17b0 [ 2038.623110] ? lock_downgrade+0x6d0/0x6d0 [ 2038.624018] ? mark_lock+0xf5/0x2df0 [ 2038.624817] io_read+0xe14/0x11e0 [ 2038.625557] ? lock_chain_count+0x20/0x20 [ 2038.626451] ? __is_insn_slot_addr+0x14c/0x290 [ 2038.627442] ? register_lock_class+0xbb/0x17b0 [ 2038.628419] ? __lock_acquire+0x1657/0x5b00 [ 2038.629339] ? kiocb_done+0xc90/0xc90 [ 2038.630149] ? mark_lock+0xf5/0x2df0 [ 2038.630951] ? lock_chain_count+0x20/0x20 [ 2038.631847] ? __lock_acquire+0x1657/0x5b00 [ 2038.632794] ? __lock_acquire+0xbb1/0x5b00 [ 2038.633704] io_issue_sqe+0x2e8a/0x77b0 [ 2038.634551] ? find_held_lock+0x2c/0x110 [ 2038.635453] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.636558] ? SOFTIRQ_verbose+0x10/0x10 [ 2038.637411] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2038.638415] ? lock_downgrade+0x6d0/0x6d0 [ 2038.639303] ? io_connect+0x610/0x610 [ 2038.640123] ? lock_acquire+0x197/0x470 [ 2038.640960] ? find_held_lock+0x2c/0x110 [ 2038.641825] ? __fget_files+0x2cf/0x520 [ 2038.642664] ? lock_downgrade+0x6d0/0x6d0 [ 2038.643557] __io_queue_sqe+0x90/0x9d0 [ 2038.644383] ? io_issue_sqe+0x77b0/0x77b0 [ 2038.645264] ? __fget_files+0x2f8/0x520 [ 2038.646115] ? __io_file_supports_nowait+0x22a/0x510 [ 2038.647197] ? io_prep_rw+0x7f5/0x1050 [ 2038.648024] io_submit_sqes+0x44aa/0x8610 [ 2038.648930] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2038.649991] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2038.651011] ? find_held_lock+0x2c/0x110 [ 2038.651883] ? io_submit_sqes+0x8610/0x8610 [ 2038.652796] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2038.653820] ? wait_for_completion_io+0x270/0x270 [ 2038.654867] ? rcu_read_lock_any_held+0x75/0xa0 [ 2038.655936] ? vfs_write+0x354/0xb10 [ 2038.656728] ? fput_many+0x2f/0x1a0 [ 2038.657507] ? ksys_write+0x1a9/0x260 [ 2038.658320] ? __ia32_sys_read+0xb0/0xb0 [ 2038.659207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.660318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.661434] do_syscall_64+0x33/0x40 [ 2038.662224] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.663328] RIP: 0033:0x7f175bb3ab19 [ 2038.664121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.668042] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2038.669650] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2038.671175] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2038.672700] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.674225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2038.675760] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:56:34 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:56:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000f5ffffff00000000aaff02"], 0x0) 02:56:50 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 02:56:50 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0xe, 0x0, 0x0, 0x0, 0x0) 02:56:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14001e001d00210c00000000fdd3df2510000200"], 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x60080) 02:56:50 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000500aaff"], 0x0) 02:56:50 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 02:56:50 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 02:56:50 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 2054.443610] FAULT_INJECTION: forcing a failure. [ 2054.443610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2054.445250] CPU: 0 PID: 10601 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2054.446186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2054.447284] Call Trace: [ 2054.447657] dump_stack+0x107/0x167 [ 2054.448154] should_fail.cold+0x5/0xa [ 2054.448671] _copy_from_user+0x2e/0x1b0 [ 2054.449211] iovec_from_user+0x141/0x400 [ 2054.449761] __import_iovec+0x67/0x590 [ 2054.450295] ? SOFTIRQ_verbose+0x10/0x10 [ 2054.450503] FAULT_INJECTION: forcing a failure. [ 2054.450503] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.450848] ? lock_downgrade+0x6d0/0x6d0 [ 2054.450867] io_import_iovec+0x581/0x1120 [ 2054.450885] ? io_complete_rw+0x230/0x230 [ 2054.450897] ? lock_downgrade+0x6d0/0x6d0 [ 2054.450916] ? mark_lock+0xf5/0x2df0 [ 2054.456050] io_read+0xe14/0x11e0 [ 2054.456520] ? lock_chain_count+0x20/0x20 [ 2054.457062] ? __is_insn_slot_addr+0x14c/0x290 [ 2054.457658] ? __lock_acquire+0x1657/0x5b00 [ 2054.458225] ? kiocb_done+0xc90/0xc90 [ 2054.458735] ? mark_lock+0xf5/0x2df0 [ 2054.459326] ? lock_chain_count+0x20/0x20 [ 2054.459922] ? __lock_acquire+0x1657/0x5b00 [ 2054.460503] ? __lock_acquire+0xbb1/0x5b00 [ 2054.461057] io_issue_sqe+0x2e8a/0x77b0 [ 2054.461607] ? find_held_lock+0x2c/0x110 [ 2054.462217] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2054.462904] ? SOFTIRQ_verbose+0x10/0x10 [ 2054.463439] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2054.464055] ? lock_downgrade+0x6d0/0x6d0 [ 2054.464587] ? io_connect+0x610/0x610 [ 2054.465088] ? lock_acquire+0x197/0x470 [ 2054.465602] ? find_held_lock+0x2c/0x110 [ 2054.466135] ? __fget_files+0x2cf/0x520 [ 2054.466656] ? lock_downgrade+0x6d0/0x6d0 [ 2054.467201] __io_queue_sqe+0x90/0x9d0 [ 2054.467716] ? io_issue_sqe+0x77b0/0x77b0 [ 2054.468259] ? __fget_files+0x2f8/0x520 [ 2054.468767] ? __io_file_supports_nowait+0x22a/0x510 [ 2054.469422] ? io_prep_rw+0x7f5/0x1050 [ 2054.469925] io_submit_sqes+0x44aa/0x8610 [ 2054.470501] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.471170] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.471829] ? find_held_lock+0x2c/0x110 [ 2054.472361] ? io_submit_sqes+0x8610/0x8610 [ 2054.472926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2054.473552] ? wait_for_completion_io+0x270/0x270 [ 2054.474194] ? rcu_read_lock_any_held+0x75/0xa0 [ 2054.474791] ? vfs_write+0x354/0xb10 [ 2054.475268] ? fput_many+0x2f/0x1a0 [ 2054.475771] ? ksys_write+0x1a9/0x260 [ 2054.476261] ? __ia32_sys_read+0xb0/0xb0 [ 2054.476785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2054.477458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2054.478126] do_syscall_64+0x33/0x40 [ 2054.478607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2054.479279] RIP: 0033:0x7f8398de7b19 [ 2054.479768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2054.482141] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2054.483126] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 2054.484074] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2054.485003] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2054.485933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2054.486856] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 2054.487832] CPU: 1 PID: 10591 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2054.489314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2054.491002] Call Trace: [ 2054.491589] dump_stack+0x107/0x167 [ 2054.492339] should_fail.cold+0x5/0xa [ 2054.493121] ? create_object.isra.0+0x3a/0xa20 [ 2054.494057] should_failslab+0x5/0x20 [ 2054.494866] kmem_cache_alloc+0x5b/0x310 [ 2054.495744] create_object.isra.0+0x3a/0xa20 [ 2054.496682] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2054.497728] __kmalloc+0x16e/0x390 [ 2054.498492] io_setup_async_rw+0x180/0x580 [ 2054.499383] ? iov_iter_restore+0x195/0x3a0 [ 2054.500319] io_read+0x775/0x11e0 [ 2054.501034] ? __is_insn_slot_addr+0x14c/0x290 [ 2054.502014] ? register_lock_class+0xbb/0x17b0 [ 2054.502957] ? kiocb_done+0xc90/0xc90 [ 2054.503804] ? mark_lock+0xf5/0x2df0 [ 2054.504610] ? lock_chain_count+0x20/0x20 [ 2054.505531] ? __lock_acquire+0xbb1/0x5b00 [ 2054.506440] io_issue_sqe+0x2e8a/0x77b0 [ 2054.507289] ? find_held_lock+0x2c/0x110 [ 2054.508188] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2054.509297] ? SOFTIRQ_verbose+0x10/0x10 [ 2054.510162] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2054.511128] ? lock_downgrade+0x6d0/0x6d0 [ 2054.512039] ? io_connect+0x610/0x610 [ 2054.512856] ? lock_acquire+0x197/0x470 [ 2054.513703] ? find_held_lock+0x2c/0x110 [ 2054.514569] ? __fget_files+0x2cf/0x520 [ 2054.515444] ? lock_downgrade+0x6d0/0x6d0 [ 2054.516339] __io_queue_sqe+0x90/0x9d0 [ 2054.517177] ? io_issue_sqe+0x77b0/0x77b0 [ 2054.518058] ? __fget_files+0x2f8/0x520 [ 2054.518916] ? __io_file_supports_nowait+0x22a/0x510 [ 2054.520021] ? io_prep_rw+0x7f5/0x1050 [ 2054.520858] io_submit_sqes+0x44aa/0x8610 [ 2054.521776] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.522866] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.523915] ? find_held_lock+0x2c/0x110 [ 2054.524779] ? io_submit_sqes+0x8610/0x8610 [ 2054.525714] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2054.526739] ? wait_for_completion_io+0x270/0x270 [ 2054.527794] ? rcu_read_lock_any_held+0x75/0xa0 [ 2054.528778] ? vfs_write+0x354/0xb10 [ 2054.529540] ? fput_many+0x2f/0x1a0 [ 2054.530317] ? ksys_write+0x1a9/0x260 [ 2054.531131] ? __ia32_sys_read+0xb0/0xb0 [ 2054.532031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2054.533138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2054.534242] do_syscall_64+0x33/0x40 [ 2054.535036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2054.536148] RIP: 0033:0x7f175bb3ab19 [ 2054.536935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2054.540918] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2054.542319] FAULT_INJECTION: forcing a failure. [ 2054.542319] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.542543] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2054.545479] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2054.547006] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2054.548557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2054.550100] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2054.551699] CPU: 0 PID: 10605 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2054.552588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2054.553857] Call Trace: [ 2054.554276] dump_stack+0x107/0x167 [ 2054.554737] should_fail.cold+0x5/0xa [ 2054.555224] ? create_object.isra.0+0x3a/0xa20 [ 2054.555803] should_failslab+0x5/0x20 [ 2054.556283] kmem_cache_alloc+0x5b/0x310 [ 2054.556791] create_object.isra.0+0x3a/0xa20 [ 2054.557379] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2054.558026] kmem_cache_alloc+0x159/0x310 [ 2054.558549] xas_alloc+0x336/0x440 [ 2054.559006] xas_create+0x34a/0x10d0 [ 2054.559504] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2054.560189] xas_store+0x8c/0x1c40 [ 2054.560656] __xa_store+0x164/0x2d0 [ 2054.561115] ? xa_delete_node+0x280/0x280 [ 2054.561638] ? trace_hardirqs_on+0x5b/0x180 [ 2054.562176] xa_store+0x31/0x50 [ 2054.562628] __io_uring_add_tctx_node+0x1cf/0x520 [ 2054.563229] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2054.563914] __do_sys_io_uring_enter+0x146f/0x1890 [ 2054.564569] ? find_held_lock+0x2c/0x110 [ 2054.565088] ? io_submit_sqes+0x8610/0x8610 [ 2054.565634] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2054.566246] ? wait_for_completion_io+0x270/0x270 [ 2054.566884] ? rcu_read_lock_any_held+0x75/0xa0 [ 2054.567477] ? vfs_write+0x354/0xb10 [ 2054.567946] ? fput_many+0x2f/0x1a0 [ 2054.568414] ? ksys_write+0x1a9/0x260 [ 2054.568924] ? __ia32_sys_read+0xb0/0xb0 [ 2054.569432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2054.570083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2054.570724] do_syscall_64+0x33/0x40 [ 2054.571190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2054.571840] RIP: 0033:0x7fa33f43fb19 [ 2054.572332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2054.574759] RSP: 002b:00007fa33c994188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2054.575784] RAX: ffffffffffffffda RBX: 00007fa33f553020 RCX: 00007fa33f43fb19 [ 2054.576681] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2054.577570] RBP: 00007fa33c9941d0 R08: 0000000000000000 R09: 0000000000000000 [ 2054.578498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2054.579396] R13: 00007ffc747de33f R14: 00007fa33c994300 R15: 0000000000022000 02:56:50 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f0000000000)='trusted\x00', &(0x7f0000000040)='+\x00') add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) keyctl$clear(0x7, r0) 02:56:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000001aaff02"], 0x0) [ 2054.597306] FAULT_INJECTION: forcing a failure. [ 2054.597306] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.599700] CPU: 1 PID: 10597 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2054.601165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2054.602909] Call Trace: [ 2054.603501] dump_stack+0x107/0x167 [ 2054.604276] should_fail.cold+0x5/0xa [ 2054.605083] ? create_object.isra.0+0x3a/0xa20 [ 2054.606052] should_failslab+0x5/0x20 [ 2054.606858] kmem_cache_alloc+0x5b/0x310 [ 2054.607752] ? mark_held_locks+0x9e/0xe0 [ 2054.608620] create_object.isra.0+0x3a/0xa20 [ 2054.609543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2054.610628] kmem_cache_alloc_bulk+0x168/0x320 [ 2054.611622] io_submit_sqes+0x6fe6/0x8610 [ 2054.612508] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2054.613558] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.614605] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.615653] ? find_held_lock+0x2c/0x110 [ 2054.616527] ? io_submit_sqes+0x8610/0x8610 [ 2054.617443] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2054.618459] ? wait_for_completion_io+0x270/0x270 [ 2054.619506] ? rcu_read_lock_any_held+0x75/0xa0 [ 2054.620491] ? vfs_write+0x354/0xb10 [ 2054.621279] ? fput_many+0x2f/0x1a0 [ 2054.622052] ? ksys_write+0x1a9/0x260 [ 2054.622858] ? __ia32_sys_read+0xb0/0xb0 [ 2054.623750] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2054.624860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2054.625954] do_syscall_64+0x33/0x40 [ 2054.626739] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2054.627849] RIP: 0033:0x7f1e32d62b19 [ 2054.628642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2054.632571] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2054.634188] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2054.635724] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2054.637231] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2054.638733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2054.640275] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:56:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000003aaff02"], 0x0) 02:56:50 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000003c00aaff"], 0x0) 02:56:50 executing program 3: clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000640)='net/hci\x00') r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000040)=""/192, &(0x7f0000000000)=0xc0) kcmp(r0, r1, 0x2, r2, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r4, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x200000001, 0x6a}) pidfd_send_signal(r5, 0x1e, &(0x7f0000000100)={0x37, 0x8, 0x5}, 0x0) 02:56:50 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 02:56:50 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2054.815881] FAULT_INJECTION: forcing a failure. [ 2054.815881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2054.817333] CPU: 0 PID: 10625 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2054.818132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2054.819092] Call Trace: [ 2054.819411] dump_stack+0x107/0x167 [ 2054.819840] should_fail.cold+0x5/0xa [ 2054.820283] _copy_from_user+0x2e/0x1b0 [ 2054.820747] iovec_from_user+0x141/0x400 [ 2054.821222] __import_iovec+0x67/0x590 [ 2054.821685] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2054.822295] ? lock_downgrade+0x6d0/0x6d0 [ 2054.822775] io_import_iovec+0x581/0x1120 [ 2054.823261] ? io_complete_rw+0x230/0x230 [ 2054.823797] ? __is_insn_slot_addr+0x123/0x290 [ 2054.824342] ? lock_downgrade+0x6d0/0x6d0 [ 2054.824824] io_read+0xe14/0x11e0 [ 2054.825224] ? mark_lock+0xf5/0x2df0 [ 2054.825653] ? mark_lock+0xf5/0x2df0 [ 2054.826088] ? __is_insn_slot_addr+0x14c/0x290 [ 2054.826617] ? lock_chain_count+0x20/0x20 [ 2054.827101] ? kiocb_done+0xc90/0xc90 [ 2054.827550] ? mark_lock+0xf5/0x2df0 [ 2054.827981] ? register_lock_class+0xbb/0x17b0 [ 2054.828506] ? arch_stack_walk+0x99/0xf0 [ 2054.828976] ? lock_chain_count+0x20/0x20 [ 2054.829455] ? is_dynamic_key+0x1e0/0x1e0 [ 2054.829980] ? lock_chain_count+0x20/0x20 [ 2054.830509] ? mark_lock+0xf5/0x2df0 [ 2054.830946] ? lock_chain_count+0x20/0x20 [ 2054.831450] io_issue_sqe+0x2e8a/0x77b0 [ 2054.831918] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2054.832530] ? SOFTIRQ_verbose+0x10/0x10 [ 2054.833000] ? lock_chain_count+0x20/0x20 [ 2054.833484] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2054.834110] ? io_connect+0x610/0x610 [ 2054.834559] ? mark_held_locks+0x9e/0xe0 [ 2054.835039] ? find_held_lock+0x2c/0x110 [ 2054.835525] ? __fget_files+0x2cf/0x520 [ 2054.835994] ? lock_downgrade+0x6d0/0x6d0 [ 2054.836476] __io_queue_sqe+0x90/0x9d0 [ 2054.836932] ? io_issue_sqe+0x77b0/0x77b0 [ 2054.837412] ? __fget_files+0x2f8/0x520 [ 2054.837874] ? __io_file_supports_nowait+0x22a/0x510 [ 2054.838459] ? io_prep_rw+0x7f5/0x1050 [ 2054.838925] io_submit_sqes+0x44aa/0x8610 [ 2054.839437] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.840013] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.840571] ? find_held_lock+0x2c/0x110 [ 2054.841047] ? io_submit_sqes+0x8610/0x8610 [ 2054.841552] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2054.842110] ? wait_for_completion_io+0x270/0x270 [ 2054.842669] ? rcu_read_lock_any_held+0x75/0xa0 [ 2054.843208] ? vfs_write+0x354/0xb10 [ 2054.843655] ? fput_many+0x2f/0x1a0 [ 2054.844078] ? ksys_write+0x1a9/0x260 [ 2054.844518] ? __ia32_sys_read+0xb0/0xb0 [ 2054.844991] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2054.845593] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2054.846191] do_syscall_64+0x33/0x40 [ 2054.846622] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2054.847212] RIP: 0033:0x7fa33f43fb19 [ 2054.847661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2054.849796] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2054.850681] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2054.851528] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2054.852361] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2054.853191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2054.854022] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:57:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000005aaff02"], 0x0) 02:57:04 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 02:57:04 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 02:57:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10181, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2c02, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r2, 0xc3, 0xe8}, &(0x7f0000000180)=ANY=[@ANYBLOB="656e633d6f61657020686173683d726d643136302d67000065726963000000000000000000000000000b2f65cbfa9fe48400"/78], &(0x7f0000000280)="55dbb51f1079087bbc360aecd72e1a8d3c58afd5097448c1c001a2205859fb0a9a2d24da9274e02498b7a1382185962d712107729aaaf37f265a94aa45ee42fd89c3bbf4a7ddad5c4d9e2acf344d479ea7b7de4c727801d3ceff410203dd02679ea8b845780a6f27eb912f84786de86dbec143560ca69a7a7e7777a653cd12f455adc18fe159e488e8a969e9c66d0cb638cf5e37e66189ba42a1fb309d28496f20057bf0ccfa368be94f092f3c3fe60638f276e13161757ebd015ebe3f207c3745186a", &(0x7f0000000380)=""/232) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) r5 = request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)='rmd160-generic\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, r2, r3, 0x1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000640)=ANY=[@ANYBLOB="0100ba00e98eeab3b9386523f35bd3a090c50a5305f8588515db8c90010f278bd9d01ce72e7d84ddf4622b05f1a8ca7616851bbc61889242123db42a44c0fa7c8abd12c4b9de292729f1326079847bc6262d593034840095cbd67c40cec1debe6c8b80d6d1e9ab9f45b4825b0dd2517faa84f5bfb9bbaac3bef9adc3fe51b30389d655c56d06421eccdb139df3e45aa664de88d7fd49b42b4056f917c0b2c331dba3a4e3aae61efd916ebd3c4f0abd48dcea11a02f6cdea8aa28119e1c2b8175f5d4c3d95b95dc2a93edd931720000000000000000"]) ioctl$TUNSETQUEUE(r6, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r6, 0x800000000000202) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x6, 0x2, 0x0, 0x0, 0x60, 0x2084, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x8}, 0x18001, 0x3f, 0x40000000, 0x0, 0x8, 0x10001, 0x3, 0x0, 0x800, 0x0, 0x9}, 0x0, 0x7, r0, 0x9) unshare(0x4a060400) 02:57:04 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 02:57:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000003aaff"], 0x0) 02:57:04 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 02:57:04 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 2068.736924] FAULT_INJECTION: forcing a failure. [ 2068.736924] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.738294] CPU: 1 PID: 10649 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2068.739087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.740050] Call Trace: [ 2068.740356] dump_stack+0x107/0x167 [ 2068.740771] should_fail.cold+0x5/0xa [ 2068.741207] ? io_setup_async_rw+0x180/0x580 [ 2068.741712] should_failslab+0x5/0x20 [ 2068.742146] __kmalloc+0x72/0x390 [ 2068.742546] io_setup_async_rw+0x180/0x580 [ 2068.743030] ? iov_iter_restore+0x195/0x3a0 [ 2068.743534] io_read+0x775/0x11e0 [ 2068.743942] ? __is_insn_slot_addr+0x14c/0x290 [ 2068.744488] ? kiocb_done+0xc90/0xc90 [ 2068.744940] ? mark_lock+0xf5/0x2df0 [ 2068.745379] ? lock_chain_count+0x20/0x20 [ 2068.745889] ? __lock_acquire+0xbb1/0x5b00 [ 2068.746372] io_issue_sqe+0x2e8a/0x77b0 [ 2068.746844] ? find_held_lock+0x2c/0x110 [ 2068.747313] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2068.747928] ? SOFTIRQ_verbose+0x10/0x10 [ 2068.748404] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2068.748955] ? lock_downgrade+0x6d0/0x6d0 [ 2068.749449] ? io_connect+0x610/0x610 [ 2068.749905] ? lock_acquire+0x197/0x470 [ 2068.750368] ? find_held_lock+0x2c/0x110 [ 2068.750837] ? __fget_files+0x2cf/0x520 [ 2068.751291] ? lock_downgrade+0x6d0/0x6d0 [ 2068.751773] __io_queue_sqe+0x90/0x9d0 [ 2068.752223] ? io_issue_sqe+0x77b0/0x77b0 [ 2068.752694] ? __fget_files+0x2f8/0x520 [ 2068.753175] ? __io_file_supports_nowait+0x22a/0x510 [ 2068.753782] ? io_prep_rw+0x7f5/0x1050 [ 2068.754247] io_submit_sqes+0x44aa/0x8610 [ 2068.754748] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.755323] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.755889] ? find_held_lock+0x2c/0x110 [ 2068.756352] ? io_submit_sqes+0x8610/0x8610 [ 2068.756851] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2068.757408] ? wait_for_completion_io+0x270/0x270 [ 2068.757981] ? rcu_read_lock_any_held+0x75/0xa0 [ 2068.758528] ? vfs_write+0x354/0xb10 [ 2068.758960] ? fput_many+0x2f/0x1a0 [ 2068.759383] ? ksys_write+0x1a9/0x260 [ 2068.759834] ? __ia32_sys_read+0xb0/0xb0 [ 2068.760313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.760928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.761532] do_syscall_64+0x33/0x40 [ 2068.761966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.762558] RIP: 0033:0x7f8398de7b19 [ 2068.762984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.765083] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2068.765952] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 2068.766776] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2068.767609] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.768446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2068.769267] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 2068.776290] FAULT_INJECTION: forcing a failure. [ 2068.776290] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.777709] CPU: 1 PID: 10641 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2068.778535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.779514] Call Trace: [ 2068.779823] dump_stack+0x107/0x167 [ 2068.780243] should_fail.cold+0x5/0xa [ 2068.780681] ? create_object.isra.0+0x3a/0xa20 [ 2068.781207] should_failslab+0x5/0x20 [ 2068.781641] kmem_cache_alloc+0x5b/0x310 [ 2068.782110] create_object.isra.0+0x3a/0xa20 [ 2068.782609] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.783191] kmem_cache_alloc_trace+0x151/0x320 [ 2068.783736] ? lock_downgrade+0x6d0/0x6d0 [ 2068.784225] __io_queue_sqe+0x666/0x9d0 [ 2068.784683] ? io_issue_sqe+0x77b0/0x77b0 [ 2068.785171] ? __fget_files+0x2f8/0x520 02:57:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000000000003caaff02"], 0x0) [ 2068.785636] ? __io_file_supports_nowait+0x22a/0x510 [ 2068.786384] ? io_prep_rw+0x7f5/0x1050 [ 2068.786870] io_submit_sqes+0x44aa/0x8610 [ 2068.787368] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.787949] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.788520] ? find_held_lock+0x2c/0x110 [ 2068.789006] ? io_submit_sqes+0x8610/0x8610 [ 2068.789516] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2068.790089] ? wait_for_completion_io+0x270/0x270 [ 2068.790662] ? rcu_read_lock_any_held+0x75/0xa0 [ 2068.791208] ? vfs_write+0x354/0xb10 [ 2068.791644] ? fput_many+0x2f/0x1a0 [ 2068.792079] ? ksys_write+0x1a9/0x260 [ 2068.792523] ? __ia32_sys_read+0xb0/0xb0 [ 2068.793000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.793627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.794216] do_syscall_64+0x33/0x40 [ 2068.794653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.795245] RIP: 0033:0x7fa33f43fb19 [ 2068.795696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.797856] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2068.798748] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2068.799596] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2068.800447] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.801296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2068.802126] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2068.805381] FAULT_INJECTION: forcing a failure. [ 2068.805381] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.806705] CPU: 1 PID: 10648 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2068.807515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.808465] Call Trace: [ 2068.808756] dump_stack+0x107/0x167 [ 2068.809176] should_fail.cold+0x5/0xa [ 2068.809616] ? __io_queue_sqe+0x666/0x9d0 [ 2068.810097] should_failslab+0x5/0x20 [ 2068.810535] kmem_cache_alloc_trace+0x55/0x320 [ 2068.811046] ? lock_downgrade+0x6d0/0x6d0 [ 2068.811539] __io_queue_sqe+0x666/0x9d0 [ 2068.812003] ? io_issue_sqe+0x77b0/0x77b0 [ 2068.812480] ? __fget_files+0x2f8/0x520 [ 2068.812935] ? __io_file_supports_nowait+0x22a/0x510 [ 2068.813544] ? io_prep_rw+0x7f5/0x1050 [ 2068.814007] io_submit_sqes+0x44aa/0x8610 [ 2068.814508] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.815087] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.815614] ? find_held_lock+0x2c/0x110 [ 2068.816086] ? io_submit_sqes+0x8610/0x8610 [ 2068.816557] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2068.817131] ? wait_for_completion_io+0x270/0x270 [ 2068.817691] ? rcu_read_lock_any_held+0x75/0xa0 [ 2068.818234] ? vfs_write+0x354/0xb10 [ 2068.818670] ? fput_many+0x2f/0x1a0 [ 2068.819094] ? ksys_write+0x1a9/0x260 [ 2068.819544] ? __ia32_sys_read+0xb0/0xb0 [ 2068.820029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.820641] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.821244] do_syscall_64+0x33/0x40 [ 2068.821680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.822278] RIP: 0033:0x7f175bb3ab19 [ 2068.822711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.824866] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2068.825731] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2068.826523] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2068.827335] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.828150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2068.828959] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2068.836604] FAULT_INJECTION: forcing a failure. [ 2068.836604] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.837947] CPU: 1 PID: 10646 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2068.838756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.839737] Call Trace: [ 2068.840053] dump_stack+0x107/0x167 [ 2068.840491] should_fail.cold+0x5/0xa [ 2068.840938] ? create_object.isra.0+0x3a/0xa20 [ 2068.841480] should_failslab+0x5/0x20 [ 2068.841925] kmem_cache_alloc+0x5b/0x310 [ 2068.842396] ? mark_held_locks+0x9e/0xe0 [ 2068.842869] create_object.isra.0+0x3a/0xa20 [ 2068.843380] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.843994] kmem_cache_alloc_bulk+0x168/0x320 [ 2068.844526] io_submit_sqes+0x6fe6/0x8610 [ 2068.844987] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2068.845523] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.846059] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.846594] ? find_held_lock+0x2c/0x110 [ 2068.847062] ? io_submit_sqes+0x8610/0x8610 [ 2068.847565] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2068.848112] ? wait_for_completion_io+0x270/0x270 [ 2068.848663] ? rcu_read_lock_any_held+0x75/0xa0 [ 2068.849178] ? vfs_write+0x354/0xb10 [ 2068.849604] ? fput_many+0x2f/0x1a0 [ 2068.850009] ? ksys_write+0x1a9/0x260 [ 2068.850426] ? __ia32_sys_read+0xb0/0xb0 [ 2068.850896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.851477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.852066] do_syscall_64+0x33/0x40 [ 2068.852491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.853078] RIP: 0033:0x7f1e32d62b19 [ 2068.853501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.855618] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2068.856495] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2068.857314] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2068.858126] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.858919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2068.859757] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:57:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000040aaff02"], 0x0) 02:57:04 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 02:57:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000005aaff"], 0x0) 02:57:04 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000060aaff02"], 0x0) 02:57:04 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0) 02:57:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000000000003caaff"], 0x0) 02:57:18 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 02:57:18 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 02:57:18 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 02:57:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000fffffff5aaff02"], 0x0) 02:57:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x342, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e22, @broadcast}, 0x24d, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='wg2\x00', 0x2, 0x2, 0xff}) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) dup2(r2, r1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/1561], 0x619) fallocate(r1, 0x3, 0x0, 0x30000000000) r3 = inotify_init() ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000007c0)={0xff, {0x22, 0x0, 0x100, 0x7, 0x5552}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, 0x0) r4 = open$dir(&(0x7f0000000800)='./file0\x00', 0x8040, 0x4) openat2(r1, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x202000, 0x208, 0x3}, 0x18) fcntl$setlease(r4, 0x400, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(0xffffffffffffffff) dup(r3) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x34000) 02:57:18 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 02:57:18 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 02:57:18 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x61b8, 0x0, 0x3, 0x0, 0x13, 0xfffffffd, 0xb419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x7, 0x800, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x20, 0x12, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x20}}, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0', [{}, {0x20, 'wlan1\x00'}, {0x20, '\x01\x01\x01\x01\x01\x01'}, {0x20, ')^,{'}, {0x20, '\x00'}, {0x20, ':%^'}, {0x20, '-'}, {0x20, '\x01\x01\x01\x01\x01\x01'}], 0xa, "a38fb0df8a709874a4b4574c39c343575b2d21060a1efd5187879c9db344b02ec6d611e801e18722a61538bcc1158eb97e1551a65d572f5e305f76c60be006ab608dad17c167b4b38ca915e1c26f19303a662f5d11761a79dee8b69818de484a69e44dfd0c1365065b7cb046284102fb4a266f8e95a9b4f5275f1f0be80430d2996f35dd2a5a751a08804ad572784a19cb3ff0fb2991f3f5811c3646582f67a69f1e96fa2762472160abf254db050be528e6b70546125e0ab0181194d872e860cd30607085b3c5a47347c317f726146988858855fa3222c20c8b5ea9c61ec85c"}, 0x10e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000100001000cf70000000000000000000008000000", @ANYRES32, @ANYBLOB="04000080"], 0x20}}, 0x0) r4 = dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0011cd"], 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x20000854) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2082.884451] FAULT_INJECTION: forcing a failure. [ 2082.884451] name failslab, interval 1, probability 0, space 0, times 0 [ 2082.885847] CPU: 1 PID: 10690 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2082.886598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2082.887497] Call Trace: [ 2082.887810] dump_stack+0x107/0x167 [ 2082.888223] should_fail.cold+0x5/0xa [ 2082.888657] ? create_object.isra.0+0x3a/0xa20 [ 2082.889176] should_failslab+0x5/0x20 [ 2082.889609] kmem_cache_alloc+0x5b/0x310 [ 2082.890074] create_object.isra.0+0x3a/0xa20 [ 2082.890591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2082.891174] kmem_cache_alloc_trace+0x151/0x320 [ 2082.891714] ? lock_downgrade+0x6d0/0x6d0 [ 2082.892207] __io_queue_sqe+0x666/0x9d0 [ 2082.892669] ? io_issue_sqe+0x77b0/0x77b0 [ 2082.893115] ? __fget_files+0x2f8/0x520 [ 2082.893572] ? __io_file_supports_nowait+0x22a/0x510 [ 2082.894130] ? io_prep_rw+0x7f5/0x1050 [ 2082.894579] io_submit_sqes+0x44aa/0x8610 [ 2082.895095] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2082.895667] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2082.896215] ? find_held_lock+0x2c/0x110 [ 2082.896680] ? io_submit_sqes+0x8610/0x8610 [ 2082.897172] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2082.897719] ? wait_for_completion_io+0x270/0x270 [ 2082.898245] ? rcu_read_lock_any_held+0x75/0xa0 [ 2082.898771] ? vfs_write+0x354/0xb10 [ 2082.899176] ? fput_many+0x2f/0x1a0 [ 2082.899594] ? ksys_write+0x1a9/0x260 [ 2082.900015] ? __ia32_sys_read+0xb0/0xb0 [ 2082.900478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2082.901076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2082.901637] do_syscall_64+0x33/0x40 [ 2082.902061] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2082.902619] RIP: 0033:0x7f175bb3ab19 [ 2082.903042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2082.905168] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2082.906030] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2082.906836] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2082.907655] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2082.908465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2082.909271] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2082.913471] FAULT_INJECTION: forcing a failure. [ 2082.913471] name failslab, interval 1, probability 0, space 0, times 0 [ 2082.914764] CPU: 1 PID: 10683 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2082.915551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2082.916502] Call Trace: [ 2082.916800] dump_stack+0x107/0x167 [ 2082.917213] should_fail.cold+0x5/0xa [ 2082.917645] ? create_object.isra.0+0x3a/0xa20 [ 2082.918161] should_failslab+0x5/0x20 [ 2082.918593] kmem_cache_alloc+0x5b/0x310 [ 2082.919057] create_object.isra.0+0x3a/0xa20 [ 2082.919559] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2082.920130] __kmalloc+0x16e/0x390 [ 2082.920541] io_setup_async_rw+0x180/0x580 [ 2082.921013] ? iov_iter_restore+0x195/0x3a0 [ 2082.921507] io_read+0x775/0x11e0 [ 2082.921885] ? __is_insn_slot_addr+0x14c/0x290 [ 2082.922418] ? kiocb_done+0xc90/0xc90 [ 2082.922829] ? mark_lock+0xf5/0x2df0 [ 2082.923090] FAULT_INJECTION: forcing a failure. [ 2082.923090] name failslab, interval 1, probability 0, space 0, times 0 [ 2082.923241] ? lock_chain_count+0x20/0x20 [ 2082.926125] ? __lock_acquire+0xbb1/0x5b00 [ 2082.926580] io_issue_sqe+0x2e8a/0x77b0 [ 2082.927059] ? find_held_lock+0x2c/0x110 [ 2082.927497] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2082.928070] ? SOFTIRQ_verbose+0x10/0x10 [ 2082.928548] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2082.929060] ? lock_downgrade+0x6d0/0x6d0 [ 2082.929542] ? io_connect+0x610/0x610 [ 2082.929957] ? lock_acquire+0x197/0x470 [ 2082.930424] ? find_held_lock+0x2c/0x110 [ 2082.930863] ? __fget_files+0x2cf/0x520 [ 2082.931326] ? lock_downgrade+0x6d0/0x6d0 [ 2082.931825] __io_queue_sqe+0x90/0x9d0 [ 2082.932285] ? io_issue_sqe+0x77b0/0x77b0 [ 2082.932766] ? __fget_files+0x2f8/0x520 [ 2082.933237] ? __io_file_supports_nowait+0x22a/0x510 [ 2082.933832] ? io_prep_rw+0x7f5/0x1050 [ 2082.934296] io_submit_sqes+0x44aa/0x8610 [ 2082.934803] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2082.935386] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2082.935966] ? find_held_lock+0x2c/0x110 [ 2082.936445] ? io_submit_sqes+0x8610/0x8610 [ 2082.936955] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2082.937518] ? wait_for_completion_io+0x270/0x270 [ 2082.938083] ? rcu_read_lock_any_held+0x75/0xa0 [ 2082.938628] ? vfs_write+0x354/0xb10 [ 2082.939066] ? fput_many+0x2f/0x1a0 [ 2082.939490] ? ksys_write+0x1a9/0x260 [ 2082.939936] ? __ia32_sys_read+0xb0/0xb0 [ 2082.940377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2082.940941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2082.941497] do_syscall_64+0x33/0x40 [ 2082.941898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2082.942449] RIP: 0033:0x7f8398de7b19 [ 2082.942857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2082.944965] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2082.945786] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 2082.946606] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2082.947379] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2082.948201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2082.949014] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 [ 2082.949866] CPU: 0 PID: 10689 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2082.951318] FAULT_INJECTION: forcing a failure. [ 2082.951318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2082.951372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2082.954434] Call Trace: [ 2082.955014] dump_stack+0x107/0x167 [ 2082.955812] should_fail.cold+0x5/0xa [ 2082.956629] ? create_object.isra.0+0x3a/0xa20 [ 2082.957602] should_failslab+0x5/0x20 [ 2082.958420] kmem_cache_alloc+0x5b/0x310 [ 2082.959295] ? mark_held_locks+0x9e/0xe0 [ 2082.960180] create_object.isra.0+0x3a/0xa20 [ 2082.961117] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2082.962211] kmem_cache_alloc_bulk+0x168/0x320 [ 2082.963194] io_submit_sqes+0x6fe6/0x8610 [ 2082.964101] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2082.965180] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2082.966247] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2082.967290] ? find_held_lock+0x2c/0x110 [ 2082.968183] ? io_submit_sqes+0x8610/0x8610 [ 2082.969121] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2082.970158] ? wait_for_completion_io+0x270/0x270 [ 2082.971200] ? rcu_read_lock_any_held+0x75/0xa0 [ 2082.972205] ? vfs_write+0x354/0xb10 [ 2082.973005] ? fput_many+0x2f/0x1a0 [ 2082.973788] ? ksys_write+0x1a9/0x260 [ 2082.974601] ? __ia32_sys_read+0xb0/0xb0 [ 2082.975476] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2082.976609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2082.977715] do_syscall_64+0x33/0x40 [ 2082.978508] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2082.979610] RIP: 0033:0x7f1e32d62b19 [ 2082.980421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2082.984353] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2082.985987] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2082.987508] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2082.989042] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2082.990564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2082.992095] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2082.993646] CPU: 1 PID: 10686 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2082.994446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2082.995390] Call Trace: [ 2082.995705] dump_stack+0x107/0x167 [ 2082.996128] should_fail.cold+0x5/0xa [ 2082.996567] _copy_from_user+0x2e/0x1b0 [ 2082.997030] iovec_from_user+0x141/0x400 [ 2082.997501] __import_iovec+0x67/0x590 [ 2082.997948] ? SOFTIRQ_verbose+0x10/0x10 [ 2082.998411] ? lock_downgrade+0x6d0/0x6d0 [ 2082.998914] io_import_iovec+0x581/0x1120 [ 2082.999421] ? io_complete_rw+0x230/0x230 [ 2082.999918] ? register_lock_class+0xbb/0x17b0 [ 2083.000441] ? lock_downgrade+0x6d0/0x6d0 [ 2083.000912] ? mark_lock+0xf5/0x2df0 [ 2083.001336] io_read+0xe14/0x11e0 [ 2083.001732] ? lock_chain_count+0x20/0x20 [ 2083.002203] ? __is_insn_slot_addr+0x14c/0x290 [ 2083.002721] ? register_lock_class+0xbb/0x17b0 [ 2083.003242] ? __lock_acquire+0x1657/0x5b00 [ 2083.003746] ? kiocb_done+0xc90/0xc90 [ 2083.004178] ? mark_lock+0xf5/0x2df0 [ 2083.004606] ? lock_chain_count+0x20/0x20 [ 2083.005081] ? __lock_acquire+0x1657/0x5b00 [ 2083.005583] ? __lock_acquire+0xbb1/0x5b00 [ 2083.006066] io_issue_sqe+0x2e8a/0x77b0 [ 2083.006517] ? find_held_lock+0x2c/0x110 [ 2083.006993] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2083.007587] ? SOFTIRQ_verbose+0x10/0x10 [ 2083.008058] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2083.008596] ? lock_downgrade+0x6d0/0x6d0 [ 2083.009066] ? io_connect+0x610/0x610 [ 2083.009506] ? lock_acquire+0x197/0x470 [ 2083.009969] ? find_held_lock+0x2c/0x110 [ 2083.010432] ? __fget_files+0x2cf/0x520 [ 2083.010888] ? lock_downgrade+0x6d0/0x6d0 [ 2083.011361] __io_queue_sqe+0x90/0x9d0 [ 2083.011842] ? io_issue_sqe+0x77b0/0x77b0 [ 2083.012314] ? __fget_files+0x2f8/0x520 [ 2083.012766] ? __io_file_supports_nowait+0x22a/0x510 [ 2083.013345] ? io_prep_rw+0x7f5/0x1050 [ 2083.013788] io_submit_sqes+0x44aa/0x8610 [ 2083.014278] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2083.014848] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2083.015397] ? find_held_lock+0x2c/0x110 [ 2083.015872] ? io_submit_sqes+0x8610/0x8610 [ 2083.016363] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2083.016916] ? wait_for_completion_io+0x270/0x270 [ 2083.017465] ? rcu_read_lock_any_held+0x75/0xa0 [ 2083.017997] ? vfs_write+0x354/0xb10 [ 2083.018420] ? fput_many+0x2f/0x1a0 [ 2083.018837] ? ksys_write+0x1a9/0x260 [ 2083.019272] ? __ia32_sys_read+0xb0/0xb0 [ 2083.019743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2083.020340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2083.020927] do_syscall_64+0x33/0x40 [ 2083.021348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2083.021933] RIP: 0033:0x7fa33f43fb19 [ 2083.022354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.024433] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2083.025290] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2083.026097] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2083.026899] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2083.027714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.028521] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2083.049332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:57:18 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 02:57:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000ffffffffaaff02"], 0x0) 02:57:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000003aaff"], 0x0) [ 2083.177431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.178374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.179383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2083.195198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:57:18 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 2083.259168] FAULT_INJECTION: forcing a failure. [ 2083.259168] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.260580] CPU: 1 PID: 10712 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2083.261387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.262334] Call Trace: [ 2083.262641] dump_stack+0x107/0x167 [ 2083.263058] should_fail.cold+0x5/0xa [ 2083.263500] ? create_object.isra.0+0x3a/0xa20 [ 2083.264066] should_failslab+0x5/0x20 [ 2083.264502] kmem_cache_alloc+0x5b/0x310 [ 2083.264970] create_object.isra.0+0x3a/0xa20 [ 2083.265485] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2083.266065] __kmalloc+0x16e/0x390 [ 2083.266482] io_setup_async_rw+0x180/0x580 [ 2083.266965] ? iov_iter_restore+0x195/0x3a0 [ 2083.267454] io_read+0x775/0x11e0 [ 2083.267865] ? __is_insn_slot_addr+0x14c/0x290 [ 2083.268390] ? register_lock_class+0xbb/0x17b0 [ 2083.268920] ? kiocb_done+0xc90/0xc90 [ 2083.269363] ? mark_lock+0xf5/0x2df0 [ 2083.269791] ? lock_chain_count+0x20/0x20 [ 2083.270284] ? __lock_acquire+0xbb1/0x5b00 [ 2083.270769] io_issue_sqe+0x2e8a/0x77b0 [ 2083.271225] ? find_held_lock+0x2c/0x110 [ 2083.271702] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2083.272300] ? SOFTIRQ_verbose+0x10/0x10 [ 2083.272766] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2083.273304] ? lock_downgrade+0x6d0/0x6d0 [ 2083.273773] ? io_connect+0x610/0x610 [ 2083.274210] ? lock_acquire+0x197/0x470 [ 2083.274660] ? find_held_lock+0x2c/0x110 [ 2083.275131] ? __fget_files+0x2cf/0x520 [ 2083.275584] ? lock_downgrade+0x6d0/0x6d0 [ 2083.276067] __io_queue_sqe+0x90/0x9d0 [ 2083.276572] ? io_issue_sqe+0x77b0/0x77b0 [ 2083.277040] ? __fget_files+0x2f8/0x520 [ 2083.277495] ? __io_file_supports_nowait+0x22a/0x510 [ 2083.278073] ? io_prep_rw+0x7f5/0x1050 [ 2083.278521] io_submit_sqes+0x44aa/0x8610 [ 2083.279012] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2083.279578] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2083.280141] ? find_held_lock+0x2c/0x110 [ 2083.280611] ? io_submit_sqes+0x8610/0x8610 [ 2083.281105] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2083.281652] ? wait_for_completion_io+0x270/0x270 [ 2083.282205] ? rcu_read_lock_any_held+0x75/0xa0 [ 2083.282736] ? vfs_write+0x354/0xb10 [ 2083.283160] ? fput_many+0x2f/0x1a0 [ 2083.283576] ? ksys_write+0x1a9/0x260 [ 2083.284021] ? __ia32_sys_read+0xb0/0xb0 [ 2083.284490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2083.285084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2083.285677] do_syscall_64+0x33/0x40 [ 2083.286103] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2083.286686] RIP: 0033:0x7f175bb3ab19 [ 2083.287109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.289213] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2083.290078] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2083.290893] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2083.291715] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2083.292527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.293342] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:57:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000ffffffffffffffffaaff02"], 0x0) 02:57:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000005aaff"], 0x0) 02:57:18 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 02:57:18 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) [ 2083.377700] FAULT_INJECTION: forcing a failure. [ 2083.377700] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.379097] CPU: 1 PID: 10720 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2083.379916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.380862] Call Trace: [ 2083.381172] dump_stack+0x107/0x167 [ 2083.381592] should_fail.cold+0x5/0xa [ 2083.382032] ? __io_queue_sqe+0x666/0x9d0 [ 2083.382505] should_failslab+0x5/0x20 [ 2083.382941] kmem_cache_alloc_trace+0x55/0x320 [ 2083.383465] ? lock_downgrade+0x6d0/0x6d0 [ 2083.383960] __io_queue_sqe+0x666/0x9d0 [ 2083.384421] ? io_issue_sqe+0x77b0/0x77b0 [ 2083.384895] ? __fget_files+0x2f8/0x520 [ 2083.385349] ? __io_file_supports_nowait+0x22a/0x510 [ 2083.385927] ? io_prep_rw+0x7f5/0x1050 [ 2083.386377] io_submit_sqes+0x44aa/0x8610 [ 2083.386869] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2083.387433] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2083.387996] ? find_held_lock+0x2c/0x110 [ 2083.388463] ? io_submit_sqes+0x8610/0x8610 [ 2083.388960] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2083.389513] ? wait_for_completion_io+0x270/0x270 [ 2083.390069] ? rcu_read_lock_any_held+0x75/0xa0 [ 2083.390600] ? vfs_write+0x354/0xb10 [ 2083.391027] ? fput_many+0x2f/0x1a0 [ 2083.391444] ? ksys_write+0x1a9/0x260 [ 2083.391887] ? __ia32_sys_read+0xb0/0xb0 [ 2083.392358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2083.392954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2083.393543] do_syscall_64+0x33/0x40 [ 2083.393971] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2083.394555] RIP: 0033:0x7f8398de7b19 [ 2083.394979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.397082] RSP: 002b:00007f839635d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2083.397954] RAX: ffffffffffffffda RBX: 00007f8398efaf60 RCX: 00007f8398de7b19 [ 2083.398763] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2083.399577] RBP: 00007f839635d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2083.400394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.401208] R13: 00007ffe60b7d6ff R14: 00007f839635d300 R15: 0000000000022000 02:57:32 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 02:57:32 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 02:57:32 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 02:57:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000003000000000000aaff02"], 0x0) [ 2096.642319] cgroup: Unknown subsys name 'noclone_children' 02:57:32 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000000000003caaff"], 0x0) 02:57:32 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 02:57:32 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='noclone_children']) syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000540)=0x0) r2 = syz_io_uring_complete(0x0) syz_io_uring_submit(r0, r1, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000440), &(0x7f0000000300)='./file0\x00', 0x8, 0x0, 0x1}, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r3, &(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x4, 0x5000, 0x0, {0x0, r4}}, 0x7) 02:57:32 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) [ 2096.649535] cgroup: Unknown subsys name 'noclone_children' [ 2096.652144] FAULT_INJECTION: forcing a failure. [ 2096.652144] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.653704] CPU: 1 PID: 10744 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2096.654641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.655776] Call Trace: [ 2096.656140] dump_stack+0x107/0x167 [ 2096.656640] should_fail.cold+0x5/0xa [ 2096.657160] ? create_object.isra.0+0x3a/0xa20 [ 2096.657770] should_failslab+0x5/0x20 [ 2096.658289] kmem_cache_alloc+0x5b/0x310 [ 2096.658841] ? mark_held_locks+0x9e/0xe0 [ 2096.659394] create_object.isra.0+0x3a/0xa20 [ 2096.659993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.660680] kmem_cache_alloc_bulk+0x168/0x320 [ 2096.661303] io_submit_sqes+0x6fe6/0x8610 [ 2096.661871] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2096.662544] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2096.663225] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2096.663898] ? find_held_lock+0x2c/0x110 [ 2096.664444] ? io_submit_sqes+0x8610/0x8610 [ 2096.665028] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2096.665678] ? wait_for_completion_io+0x270/0x270 [ 2096.666335] ? rcu_read_lock_any_held+0x75/0xa0 [ 2096.666970] ? vfs_write+0x354/0xb10 [ 2096.667474] ? fput_many+0x2f/0x1a0 [ 2096.667978] ? ksys_write+0x1a9/0x260 [ 2096.668498] ? __ia32_sys_read+0xb0/0xb0 [ 2096.669052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.669413] FAULT_INJECTION: forcing a failure. [ 2096.669413] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.669755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.669776] do_syscall_64+0x33/0x40 [ 2096.673808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.674503] RIP: 0033:0x7f1e32d62b19 [ 2096.675004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.677484] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2096.678510] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2096.679469] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2096.680432] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.681386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.682336] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2096.683316] CPU: 0 PID: 10736 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2096.684902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.687191] Call Trace: [ 2096.687970] dump_stack+0x107/0x167 [ 2096.689001] should_fail.cold+0x5/0xa [ 2096.690071] ? io_setup_async_rw+0x180/0x580 [ 2096.691299] should_failslab+0x5/0x20 [ 2096.692371] __kmalloc+0x72/0x390 [ 2096.693349] io_setup_async_rw+0x180/0x580 [ 2096.694512] ? iov_iter_restore+0x195/0x3a0 [ 2096.695705] io_read+0x775/0x11e0 [ 2096.696687] ? __is_insn_slot_addr+0x14c/0x290 [ 2096.697827] ? register_lock_class+0xbb/0x17b0 [ 2096.699030] ? kiocb_done+0xc90/0xc90 [ 2096.699978] ? mark_lock+0xf5/0x2df0 [ 2096.700895] ? lock_chain_count+0x20/0x20 [ 2096.701871] ? __lock_acquire+0xbb1/0x5b00 [ 2096.702996] io_issue_sqe+0x2e8a/0x77b0 [ 2096.703923] ? find_held_lock+0x2c/0x110 [ 2096.704841] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2096.706018] ? SOFTIRQ_verbose+0x10/0x10 02:57:32 executing program 3: r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000640)='net/hci\x00') perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x5, 0x92, 0x1, 0x0, 0x7, 0x82, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2, 0x400}, 0x18190, 0x80, 0x4, 0x1, 0xfff, 0x1fb, 0x3, 0x0, 0x13, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x49040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r1, 0x6109, 0x0, 0x2}) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x20, 0xcb, 0x4, 0x1, 0x0, 0xfffffffffffffff8, 0x10000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x2, @perf_config_ext={0x1ed400000000000, 0x1}, 0x14, 0x7de, 0x0, 0x1, 0x5, 0x7, 0x6493, 0x0, 0x4, 0x0, 0x6}, r0, 0x3, r2, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}]}, 0x78}}, 0x0) [ 2096.706930] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2096.708197] ? lock_downgrade+0x6d0/0x6d0 [ 2096.709156] ? io_connect+0x610/0x610 [ 2096.710025] ? lock_acquire+0x197/0x470 [ 2096.710919] ? find_held_lock+0x2c/0x110 [ 2096.711865] ? __fget_files+0x2cf/0x520 [ 2096.712760] ? lock_downgrade+0x6d0/0x6d0 [ 2096.713700] __io_queue_sqe+0x90/0x9d0 [ 2096.714583] ? io_issue_sqe+0x77b0/0x77b0 [ 2096.715514] ? __fget_files+0x2f8/0x520 [ 2096.716506] ? __io_file_supports_nowait+0x22a/0x510 [ 2096.717652] ? io_prep_rw+0x7f5/0x1050 [ 2096.718536] io_submit_sqes+0x44aa/0x8610 [ 2096.719506] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2096.720645] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2096.721733] ? find_held_lock+0x2c/0x110 [ 2096.722654] ? io_submit_sqes+0x8610/0x8610 [ 2096.723632] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2096.724730] ? wait_for_completion_io+0x270/0x270 [ 2096.725818] ? rcu_read_lock_any_held+0x75/0xa0 [ 2096.726863] ? vfs_write+0x354/0xb10 [ 2096.727701] ? fput_many+0x2f/0x1a0 [ 2096.728531] ? ksys_write+0x1a9/0x260 [ 2096.729388] ? __ia32_sys_read+0xb0/0xb0 [ 2096.730305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.731484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.732659] do_syscall_64+0x33/0x40 [ 2096.733496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.734648] RIP: 0033:0x7fa33f43fb19 [ 2096.735488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.736016] FAULT_INJECTION: forcing a failure. [ 2096.736016] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.740522] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2096.740561] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2096.745406] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2096.747075] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.748759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2096.750432] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2096.752150] CPU: 1 PID: 10753 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 2096.753065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.754099] Call Trace: [ 2096.754509] dump_stack+0x107/0x167 [ 2096.754980] should_fail.cold+0x5/0xa [ 2096.755466] ? xas_alloc+0x336/0x440 [ 2096.755948] should_failslab+0x5/0x20 [ 2096.756448] kmem_cache_alloc+0x5b/0x310 [ 2096.756986] xas_alloc+0x336/0x440 [ 2096.757436] xas_create+0x34a/0x10d0 [ 2096.757915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2096.758573] xas_store+0x8c/0x1c40 [ 2096.759037] __xa_store+0x164/0x2d0 [ 2096.759491] ? xa_delete_node+0x280/0x280 [ 2096.760018] ? trace_hardirqs_on+0x5b/0x180 [ 2096.760557] xa_store+0x31/0x50 [ 2096.760968] __io_uring_add_tctx_node+0x1cf/0x520 [ 2096.761566] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2096.762235] __do_sys_io_uring_enter+0x146f/0x1890 [ 2096.762848] ? find_held_lock+0x2c/0x110 [ 2096.763355] ? io_submit_sqes+0x8610/0x8610 [ 2096.763903] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2096.764147] FAULT_INJECTION: forcing a failure. [ 2096.764147] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.764506] ? wait_for_completion_io+0x270/0x270 [ 2096.764522] ? rcu_read_lock_any_held+0x75/0xa0 [ 2096.764543] ? vfs_write+0x354/0xb10 [ 2096.768752] ? fput_many+0x2f/0x1a0 [ 2096.769209] ? ksys_write+0x1a9/0x260 [ 2096.769682] ? __ia32_sys_read+0xb0/0xb0 [ 2096.770198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.770848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.771491] do_syscall_64+0x33/0x40 [ 2096.771969] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.772605] RIP: 0033:0x7f8398de7b19 [ 2096.773071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.775389] RSP: 002b:00007f839633c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2096.776347] RAX: ffffffffffffffda RBX: 00007f8398efb020 RCX: 00007f8398de7b19 [ 2096.777232] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2096.778112] RBP: 00007f839633c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.778995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2096.779880] R13: 00007ffe60b7d6ff R14: 00007f839633c300 R15: 0000000000022000 [ 2096.780802] CPU: 0 PID: 10743 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2096.782445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.784427] Call Trace: [ 2096.785079] dump_stack+0x107/0x167 [ 2096.785939] should_fail.cold+0x5/0xa [ 2096.786848] ? io_setup_async_rw+0x180/0x580 [ 2096.787907] should_failslab+0x5/0x20 [ 2096.788803] __kmalloc+0x72/0x390 [ 2096.789648] io_setup_async_rw+0x180/0x580 [ 2096.790691] ? iov_iter_restore+0x195/0x3a0 [ 2096.791884] io_read+0x775/0x11e0 [ 2096.792900] ? __is_insn_slot_addr+0x14c/0x290 [ 2096.794220] ? kiocb_done+0xc90/0xc90 [ 2096.795279] ? mark_lock+0xf5/0x2df0 [ 2096.796357] ? lock_chain_count+0x20/0x20 [ 2096.797599] ? __lock_acquire+0xbb1/0x5b00 [ 2096.798826] io_issue_sqe+0x2e8a/0x77b0 [ 2096.799970] ? find_held_lock+0x2c/0x110 [ 2096.801134] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2096.802614] ? SOFTIRQ_verbose+0x10/0x10 [ 2096.803784] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2096.805133] ? lock_downgrade+0x6d0/0x6d0 [ 2096.806324] ? io_connect+0x610/0x610 [ 2096.807430] ? lock_acquire+0x197/0x470 [ 2096.808563] ? find_held_lock+0x2c/0x110 [ 2096.809717] ? __fget_files+0x2cf/0x520 [ 2096.810860] ? lock_downgrade+0x6d0/0x6d0 [ 2096.812072] __io_queue_sqe+0x90/0x9d0 [ 2096.813211] ? io_issue_sqe+0x77b0/0x77b0 [ 2096.814400] ? __fget_files+0x2f8/0x520 [ 2096.815537] ? __io_file_supports_nowait+0x22a/0x510 [ 2096.816995] ? io_prep_rw+0x7f5/0x1050 [ 2096.818119] io_submit_sqes+0x44aa/0x8610 [ 2096.819350] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2096.820752] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2096.822127] ? find_held_lock+0x2c/0x110 [ 2096.823284] ? io_submit_sqes+0x8610/0x8610 [ 2096.824490] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2096.825859] ? wait_for_completion_io+0x270/0x270 [ 2096.827234] ? rcu_read_lock_any_held+0x75/0xa0 [ 2096.828556] ? vfs_write+0x354/0xb10 [ 2096.829609] ? fput_many+0x2f/0x1a0 [ 2096.830641] ? ksys_write+0x1a9/0x260 [ 2096.831703] ? __ia32_sys_read+0xb0/0xb0 [ 2096.832870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.834345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.835820] do_syscall_64+0x33/0x40 [ 2096.836859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.838292] RIP: 0033:0x7f175bb3ab19 [ 2096.839330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.844512] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2096.846668] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2096.848691] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2096.850662] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.852640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2096.854634] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:57:32 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 02:57:32 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000000000000000000000aaff00"/39], 0x0) 02:57:32 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, &(0x7f0000000040)=0x5, 0x8, 0x2) pipe2(&(0x7f0000000180), 0x4800) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 2096.943353] FAULT_INJECTION: forcing a failure. [ 2096.943353] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.944748] CPU: 1 PID: 10763 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2096.945547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.946504] Call Trace: [ 2096.946815] dump_stack+0x107/0x167 [ 2096.947247] should_fail.cold+0x5/0xa [ 2096.947689] ? create_object.isra.0+0x3a/0xa20 [ 2096.948230] should_failslab+0x5/0x20 [ 2096.948670] kmem_cache_alloc+0x5b/0x310 [ 2096.949141] ? mark_held_locks+0x9e/0xe0 [ 2096.949614] create_object.isra.0+0x3a/0xa20 [ 2096.950120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.950706] kmem_cache_alloc_bulk+0x168/0x320 [ 2096.951243] io_submit_sqes+0x6fe6/0x8610 [ 2096.951724] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2096.952306] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2096.952877] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2096.953433] ? find_held_lock+0x2c/0x110 [ 2096.953903] ? io_submit_sqes+0x8610/0x8610 [ 2096.954407] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2096.954959] ? wait_for_completion_io+0x270/0x270 [ 2096.955520] ? rcu_read_lock_any_held+0x75/0xa0 [ 2096.956061] ? vfs_write+0x354/0xb10 [ 2096.956490] ? fput_many+0x2f/0x1a0 [ 2096.956907] ? ksys_write+0x1a9/0x260 [ 2096.957343] ? __ia32_sys_read+0xb0/0xb0 [ 2096.957812] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.958409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2096.958999] do_syscall_64+0x33/0x40 [ 2096.959424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2096.960024] RIP: 0033:0x7f1e32d62b19 [ 2096.960450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.962547] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2096.963420] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2096.964249] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2096.965061] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.965867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.966673] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:57:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000005000000000000aaff02"], 0x0) 02:57:32 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 02:57:32 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 02:57:32 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 02:57:46 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:57:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000003c000000000000aaff02"], 0x0) 02:57:46 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 02:57:46 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xa028, @private0, 0xffff}}, 0x0, 0x0, 0x3, 0x0, "15bb6949bcc7dd7717453b9d29213db25261cdc0d33cd53d0200000066166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d002d8bdd069588783e32b71b00"}, 0xd8) tgkill(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r5, &(0x7f0000002040)=ANY=[@ANYBLOB="7f454c4600000007000000000000000003003e000000000000000000000000000800008aea00000000000000000000000000000000003800020000000000000003"], 0xaf2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x7, 0xe1, 0x3, 0x0, 0xbb, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xcd01, 0x1, @perf_config_ext={0x5, 0x7}, 0x40204, 0x0, 0x2, 0x6, 0x1f, 0x5, 0x0, 0x0, 0xfffff000, 0x0, 0x7fff}, 0x0, 0x4, r5, 0x1) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) pread64(r6, &(0x7f0000000040)=""/32, 0x20, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000900)={0x0, "72b65d47eda932bc407d3663234162a9"}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:57:46 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 02:57:46 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 02:57:46 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="60d0ff4707020600fe8000000000000000000000000000aa00"/39], 0x0) 02:57:46 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 2110.738788] FAULT_INJECTION: forcing a failure. [ 2110.738788] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.740398] CPU: 1 PID: 10792 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2110.741275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.742334] Call Trace: [ 2110.742685] dump_stack+0x107/0x167 [ 2110.743162] should_fail.cold+0x5/0xa [ 2110.743654] ? create_object.isra.0+0x3a/0xa20 [ 2110.744260] should_failslab+0x5/0x20 [ 2110.744758] kmem_cache_alloc+0x5b/0x310 [ 2110.745301] create_object.isra.0+0x3a/0xa20 [ 2110.745332] FAULT_INJECTION: forcing a failure. [ 2110.745332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2110.745874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2110.745892] __kmalloc+0x16e/0x390 [ 2110.745910] io_setup_async_rw+0x180/0x580 [ 2110.745921] ? iov_iter_restore+0x195/0x3a0 [ 2110.745939] io_read+0x775/0x11e0 [ 2110.745953] ? __is_insn_slot_addr+0x14c/0x290 [ 2110.745968] ? register_lock_class+0xbb/0x17b0 [ 2110.745985] ? kiocb_done+0xc90/0xc90 [ 2110.745995] ? mark_lock+0xf5/0x2df0 [ 2110.746012] ? lock_chain_count+0x20/0x20 [ 2110.746048] ? __lock_acquire+0xbb1/0x5b00 [ 2110.746071] io_issue_sqe+0x2e8a/0x77b0 [ 2110.754934] ? find_held_lock+0x2c/0x110 [ 2110.755474] ? perf_trace_lock+0xac/0x490 [ 2110.756029] ? SOFTIRQ_verbose+0x10/0x10 [ 2110.756567] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2110.757197] ? io_connect+0x610/0x610 [ 2110.757706] ? lock_acquire+0x197/0x470 [ 2110.758245] ? find_held_lock+0x2c/0x110 [ 2110.758785] ? __fget_files+0x2cf/0x520 [ 2110.759308] ? lock_downgrade+0x6d0/0x6d0 [ 2110.759858] __io_queue_sqe+0x90/0x9d0 [ 2110.760392] ? io_issue_sqe+0x77b0/0x77b0 [ 2110.760949] ? __fget_files+0x2f8/0x520 [ 2110.761484] ? __io_file_supports_nowait+0x22a/0x510 [ 2110.762160] ? io_prep_rw+0x7f5/0x1050 [ 2110.762671] io_submit_sqes+0x44aa/0x8610 [ 2110.763237] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2110.763889] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2110.764531] ? find_held_lock+0x2c/0x110 [ 2110.765085] ? io_submit_sqes+0x8610/0x8610 [ 2110.765642] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2110.766255] ? wait_for_completion_io+0x270/0x270 [ 2110.766894] ? rcu_read_lock_any_held+0x75/0xa0 [ 2110.767504] ? vfs_write+0x354/0xb10 [ 2110.768022] ? fput_many+0x2f/0x1a0 [ 2110.768512] ? ksys_write+0x1a9/0x260 [ 2110.769028] ? __ia32_sys_read+0xb0/0xb0 [ 2110.769570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.770249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.770934] do_syscall_64+0x33/0x40 [ 2110.771415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2110.772103] RIP: 0033:0x7fa33f43fb19 [ 2110.772578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2110.775003] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2110.776007] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2110.776952] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2110.777904] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2110.778849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2110.779773] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2110.780724] CPU: 0 PID: 10793 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2110.782298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.784137] Call Trace: [ 2110.784735] dump_stack+0x107/0x167 [ 2110.785564] should_fail.cold+0x5/0xa [ 2110.786409] _copy_from_user+0x2e/0x1b0 [ 2110.787291] iovec_from_user+0x141/0x400 [ 2110.788204] __import_iovec+0x67/0x590 [ 2110.789073] ? perf_trace_lock+0xac/0x490 [ 2110.790003] io_import_iovec+0x581/0x1120 [ 2110.790927] ? io_complete_rw+0x230/0x230 [ 2110.791841] ? lock_downgrade+0x6d0/0x6d0 [ 2110.792779] ? unwind_next_frame+0x13ef/0x1a90 [ 2110.793795] io_read+0xe14/0x11e0 [ 2110.794584] ? kiocb_done+0xc90/0xc90 [ 2110.795425] ? mark_lock+0xf5/0x2df0 [ 2110.796277] ? lock_chain_count+0x20/0x20 [ 2110.797202] ? lock_chain_count+0x20/0x20 [ 2110.798123] ? stack_trace_save+0x8c/0xc0 [ 2110.799036] ? __lockdep_reset_lock+0x180/0x180 [ 2110.800082] ? lock_acquire+0x197/0x470 [ 2110.800994] ? __lock_acquire+0xbb1/0x5b00 [ 2110.801933] io_issue_sqe+0x2e8a/0x77b0 [ 2110.802819] ? perf_trace_lock+0xac/0x490 [ 2110.803713] ? SOFTIRQ_verbose+0x10/0x10 [ 2110.804613] ? lock_chain_count+0x20/0x20 [ 2110.805534] ? io_connect+0x610/0x610 [ 2110.806383] ? lock_acquire+0x197/0x470 [ 2110.807251] ? find_held_lock+0x2c/0x110 [ 2110.808157] ? __fget_files+0x2cf/0x520 [ 2110.809038] ? lock_downgrade+0x6d0/0x6d0 [ 2110.809964] __io_queue_sqe+0x90/0x9d0 [ 2110.810827] ? io_issue_sqe+0x77b0/0x77b0 [ 2110.811743] ? __fget_files+0x2f8/0x520 [ 2110.812617] ? __io_file_supports_nowait+0x22a/0x510 [ 2110.813733] ? io_prep_rw+0x7f5/0x1050 [ 2110.814604] io_submit_sqes+0x44aa/0x8610 [ 2110.815555] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2110.816681] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2110.817747] ? find_held_lock+0x2c/0x110 [ 2110.818650] ? io_submit_sqes+0x8610/0x8610 [ 2110.819606] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2110.820670] ? wait_for_completion_io+0x270/0x270 [ 2110.821720] ? rcu_read_lock_any_held+0x75/0xa0 [ 2110.822763] ? vfs_write+0x354/0xb10 [ 2110.823635] ? fput_many+0x2f/0x1a0 [ 2110.824550] ? ksys_write+0x1a9/0x260 [ 2110.825400] ? __ia32_sys_read+0xb0/0xb0 [ 2110.826316] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.827481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.828633] do_syscall_64+0x33/0x40 [ 2110.829604] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2110.830735] RIP: 0033:0x7f1e32d62b19 [ 2110.831632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2110.835846] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2110.837599] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2110.839294] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2110.841025] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2110.842589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2110.844156] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2110.847530] FAULT_INJECTION: forcing a failure. [ 2110.847530] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.849000] CPU: 1 PID: 10798 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2110.849851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.850810] Call Trace: [ 2110.851143] dump_stack+0x107/0x167 [ 2110.851588] should_fail.cold+0x5/0xa [ 2110.852064] ? create_object.isra.0+0x3a/0xa20 [ 2110.852624] should_failslab+0x5/0x20 [ 2110.853089] kmem_cache_alloc+0x5b/0x310 [ 2110.853605] create_object.isra.0+0x3a/0xa20 [ 2110.854158] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2110.854791] __kmalloc+0x16e/0x390 [ 2110.855241] io_setup_async_rw+0x180/0x580 [ 2110.855725] ? iov_iter_restore+0x195/0x3a0 [ 2110.856235] io_read+0x775/0x11e0 [ 2110.856646] ? __is_insn_slot_addr+0x14c/0x290 [ 2110.857219] ? kiocb_done+0xc90/0xc90 [ 2110.857682] ? mark_lock+0xf5/0x2df0 [ 2110.858146] ? lock_chain_count+0x20/0x20 [ 2110.858680] ? __lock_acquire+0xbb1/0x5b00 [ 2110.859217] io_issue_sqe+0x2e8a/0x77b0 [ 2110.859708] ? find_held_lock+0x2c/0x110 [ 2110.860198] ? perf_trace_lock+0xac/0x490 [ 2110.860707] ? SOFTIRQ_verbose+0x10/0x10 [ 2110.861205] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2110.861761] ? io_connect+0x610/0x610 [ 2110.862209] ? lock_acquire+0x197/0x470 [ 2110.862663] ? find_held_lock+0x2c/0x110 [ 2110.863130] ? __fget_files+0x2cf/0x520 [ 2110.863586] ? lock_downgrade+0x6d0/0x6d0 [ 2110.864070] __io_queue_sqe+0x90/0x9d0 [ 2110.864525] ? io_issue_sqe+0x77b0/0x77b0 [ 2110.865001] ? __fget_files+0x2f8/0x520 [ 2110.865458] ? __io_file_supports_nowait+0x22a/0x510 [ 2110.866039] ? io_prep_rw+0x7f5/0x1050 [ 2110.866496] io_submit_sqes+0x44aa/0x8610 [ 2110.866994] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2110.867569] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2110.868137] ? find_held_lock+0x2c/0x110 [ 2110.868646] ? io_submit_sqes+0x8610/0x8610 [ 2110.869184] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2110.869772] ? wait_for_completion_io+0x270/0x270 [ 2110.870374] ? rcu_read_lock_any_held+0x75/0xa0 [ 2110.870944] ? vfs_write+0x354/0xb10 [ 2110.871408] ? fput_many+0x2f/0x1a0 [ 2110.871851] ? ksys_write+0x1a9/0x260 [ 2110.872322] ? __ia32_sys_read+0xb0/0xb0 [ 2110.872787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.873416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.874004] do_syscall_64+0x33/0x40 [ 2110.874457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2110.875048] RIP: 0033:0x7f175bb3ab19 [ 2110.875477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2110.877655] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2110.878539] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2110.879385] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2110.880271] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2110.881137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2110.882014] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:57:46 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 02:57:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000060000000000000aaff02"], 0x0) 02:57:46 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 02:57:46 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000030000000000aaff02"], 0x0) 02:57:46 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 02:57:46 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e, 0x0, 0x0, 0x0) 02:57:46 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) [ 2111.186578] FAULT_INJECTION: forcing a failure. [ 2111.186578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2111.188031] CPU: 1 PID: 10817 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2111.188796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.189768] Call Trace: [ 2111.190097] dump_stack+0x107/0x167 [ 2111.190526] should_fail.cold+0x5/0xa [ 2111.190981] _copy_from_user+0x2e/0x1b0 [ 2111.191458] iovec_from_user+0x141/0x400 [ 2111.191962] __import_iovec+0x67/0x590 [ 2111.192425] ? SOFTIRQ_verbose+0x10/0x10 [ 2111.192910] ? lock_downgrade+0x6d0/0x6d0 [ 2111.193404] io_import_iovec+0x581/0x1120 [ 2111.193908] ? io_complete_rw+0x230/0x230 [ 2111.194409] ? lock_downgrade+0x6d0/0x6d0 [ 2111.194900] ? mark_lock+0xf5/0x2df0 [ 2111.195345] io_read+0xe14/0x11e0 [ 2111.195763] ? lock_chain_count+0x20/0x20 [ 2111.196272] ? __is_insn_slot_addr+0x14c/0x290 [ 2111.196813] ? __lock_acquire+0x1657/0x5b00 [ 2111.197333] ? kiocb_done+0xc90/0xc90 [ 2111.197789] ? mark_lock+0xf5/0x2df0 [ 2111.198222] ? lock_chain_count+0x20/0x20 [ 2111.198693] ? __lock_acquire+0x1657/0x5b00 [ 2111.199220] ? __lock_acquire+0xbb1/0x5b00 [ 2111.199720] io_issue_sqe+0x2e8a/0x77b0 [ 2111.200189] ? find_held_lock+0x2c/0x110 [ 2111.200645] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.201262] ? SOFTIRQ_verbose+0x10/0x10 [ 2111.201713] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2111.202247] ? lock_downgrade+0x6d0/0x6d0 [ 2111.202724] ? io_connect+0x610/0x610 [ 2111.203150] ? lock_acquire+0x197/0x470 [ 2111.203590] ? find_held_lock+0x2c/0x110 [ 2111.204058] ? __fget_files+0x2cf/0x520 [ 2111.204494] ? lock_downgrade+0x6d0/0x6d0 [ 2111.204983] __io_queue_sqe+0x90/0x9d0 [ 2111.205424] ? io_issue_sqe+0x77b0/0x77b0 [ 2111.205914] ? __fget_files+0x2f8/0x520 [ 2111.206361] ? __io_file_supports_nowait+0x22a/0x510 [ 2111.206930] ? io_prep_rw+0x7f5/0x1050 [ 2111.207370] io_submit_sqes+0x44aa/0x8610 [ 2111.207872] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2111.208441] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2111.208978] ? find_held_lock+0x2c/0x110 [ 2111.209439] ? io_submit_sqes+0x8610/0x8610 [ 2111.209926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2111.210471] ? wait_for_completion_io+0x270/0x270 [ 2111.211023] ? rcu_read_lock_any_held+0x75/0xa0 [ 2111.211537] ? vfs_write+0x354/0xb10 [ 2111.211961] ? fput_many+0x2f/0x1a0 [ 2111.212365] ? ksys_write+0x1a9/0x260 [ 2111.212787] ? __ia32_sys_read+0xb0/0xb0 [ 2111.213249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.213830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.214408] do_syscall_64+0x33/0x40 [ 2111.214820] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.215398] RIP: 0033:0x7f175bb3ab19 [ 2111.215815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.217921] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2111.218819] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2111.219667] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2111.220521] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.221367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2111.222209] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:57:46 executing program 4: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x6) r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x4}, 0x404, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16, @ANYRES32=r1, @ANYRESDEC], 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@empty, @local, @val={@val={0x9100, 0x4, 0x1, 0x3}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x18, 0x4, 0x0, 0x0, 0x74, 0x68, 0x0, 0x80, 0x1, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0xc, 0xf9, 0x1, 0xe, [{@remote, 0x80000000}]}, @ssrr={0x89, 0x1b, 0xfa, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x17, 0x4c, [@multicast2, @rand_addr=0x64010102, @remote, @multicast1, @local]}, @lsrr={0x83, 0xb, 0x3d, [@remote, @local]}, @noop]}}, @timestamp={0xd, 0x0, 0x0, 0x1, 0xebc6, 0x3ff, 0xf4, 0x7}}}}}, &(0x7f0000000040)={0x0, 0x2, [0xe60, 0xb97, 0xf83, 0x624]}) [ 2111.312386] FAULT_INJECTION: forcing a failure. [ 2111.312386] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.315143] CPU: 0 PID: 10823 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2111.316782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.318730] Call Trace: [ 2111.319361] dump_stack+0x107/0x167 [ 2111.320246] should_fail.cold+0x5/0xa [ 2111.321142] ? __io_queue_sqe+0x666/0x9d0 [ 2111.322123] should_failslab+0x5/0x20 [ 2111.323025] kmem_cache_alloc_trace+0x55/0x320 [ 2111.324116] ? lock_downgrade+0x6d0/0x6d0 [ 2111.325100] __io_queue_sqe+0x666/0x9d0 [ 2111.326144] ? io_issue_sqe+0x77b0/0x77b0 [ 2111.327116] ? __fget_files+0x2f8/0x520 [ 2111.328072] ? __io_file_supports_nowait+0x22a/0x510 [ 2111.329288] ? io_prep_rw+0x7f5/0x1050 [ 2111.330245] io_submit_sqes+0x44aa/0x8610 [ 2111.331254] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2111.332448] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2111.333590] ? find_held_lock+0x2c/0x110 [ 2111.334570] ? io_submit_sqes+0x8610/0x8610 [ 2111.335620] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2111.336766] ? wait_for_completion_io+0x270/0x270 [ 2111.337903] ? rcu_read_lock_any_held+0x75/0xa0 [ 2111.338993] ? vfs_write+0x354/0xb10 [ 2111.339872] ? fput_many+0x2f/0x1a0 [ 2111.340746] ? ksys_write+0x1a9/0x260 [ 2111.341651] ? __ia32_sys_read+0xb0/0xb0 [ 2111.342784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.344010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.345350] do_syscall_64+0x33/0x40 [ 2111.346365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.347612] RIP: 0033:0x7fa33f43fb19 [ 2111.348509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.352763] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2111.354538] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2111.356296] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2111.357911] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.359717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2111.361345] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:58:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0) 02:58:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r1) 02:58:00 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 02:58:00 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 02:58:00 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:58:00 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 02:58:00 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000050000000000aaff02"], 0x0) 02:58:00 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) [ 2124.846294] FAULT_INJECTION: forcing a failure. [ 2124.846294] name failslab, interval 1, probability 0, space 0, times 0 [ 2124.847763] CPU: 1 PID: 10844 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2124.848643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2124.849663] Call Trace: [ 2124.849996] dump_stack+0x107/0x167 [ 2124.850448] should_fail.cold+0x5/0xa [ 2124.850920] ? io_setup_async_rw+0x180/0x580 [ 2124.851461] should_failslab+0x5/0x20 [ 2124.851937] __kmalloc+0x72/0x390 [ 2124.852379] io_setup_async_rw+0x180/0x580 [ 2124.852901] ? iov_iter_restore+0x195/0x3a0 [ 2124.853434] io_read+0x775/0x11e0 [ 2124.853872] ? kiocb_done+0xc90/0xc90 [ 2124.854341] ? mark_lock+0xf5/0x2df0 [ 2124.854806] ? lock_chain_count+0x20/0x20 [ 2124.855334] ? stack_trace_consume_entry+0x160/0x160 [ 2124.855985] ? lock_acquire+0x197/0x470 [ 2124.856491] ? __lock_acquire+0xbb1/0x5b00 [ 2124.857016] io_issue_sqe+0x2e8a/0x77b0 [ 2124.857512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2124.858157] ? SOFTIRQ_verbose+0x10/0x10 [ 2124.858657] ? lock_chain_count+0x20/0x20 [ 2124.859172] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2124.859820] ? io_connect+0x610/0x610 [ 2124.860305] ? lock_acquire+0x197/0x470 [ 2124.860572] FAULT_INJECTION: forcing a failure. [ 2124.860572] name failslab, interval 1, probability 0, space 0, times 0 [ 2124.860789] ? find_held_lock+0x2c/0x110 [ 2124.860807] ? __fget_files+0x2cf/0x520 [ 2124.860819] ? lock_downgrade+0x6d0/0x6d0 [ 2124.860849] __io_queue_sqe+0x90/0x9d0 [ 2124.865340] ? io_issue_sqe+0x77b0/0x77b0 [ 2124.865847] ? __fget_files+0x2f8/0x520 [ 2124.866336] ? __io_file_supports_nowait+0x22a/0x510 [ 2124.866959] ? io_prep_rw+0x7f5/0x1050 [ 2124.867441] io_submit_sqes+0x44aa/0x8610 [ 2124.867972] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2124.868595] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2124.869196] ? find_held_lock+0x2c/0x110 [ 2124.869701] ? io_submit_sqes+0x8610/0x8610 [ 2124.870238] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2124.870829] ? wait_for_completion_io+0x270/0x270 [ 2124.871424] ? rcu_read_lock_any_held+0x75/0xa0 [ 2124.871995] ? vfs_write+0x354/0xb10 [ 2124.872461] ? fput_many+0x2f/0x1a0 [ 2124.872908] ? ksys_write+0x1a9/0x260 [ 2124.873377] ? __ia32_sys_read+0xb0/0xb0 [ 2124.873876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2124.874521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2124.875159] do_syscall_64+0x33/0x40 [ 2124.875613] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2124.876253] RIP: 0033:0x7f1e32d62b19 [ 2124.876709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2124.878958] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2124.879900] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2124.880819] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2124.881686] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2124.882551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2124.883414] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2124.884325] CPU: 0 PID: 10843 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2124.885903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2124.887795] Call Trace: [ 2124.888432] dump_stack+0x107/0x167 [ 2124.889277] should_fail.cold+0x5/0xa [ 2124.890152] ? create_object.isra.0+0x3a/0xa20 [ 2124.891202] should_failslab+0x5/0x20 [ 2124.892071] kmem_cache_alloc+0x5b/0x310 [ 2124.893017] create_object.isra.0+0x3a/0xa20 [ 2124.894007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2124.895174] kmem_cache_alloc_trace+0x151/0x320 [ 2124.896254] __io_queue_sqe+0x666/0x9d0 [ 2124.897168] ? io_issue_sqe+0x77b0/0x77b0 [ 2124.898102] ? __fget_files+0x2f8/0x520 [ 2124.899011] ? __io_file_supports_nowait+0x22a/0x510 [ 2124.900177] ? io_prep_rw+0x7f5/0x1050 [ 2124.901075] io_submit_sqes+0x44aa/0x8610 [ 2124.902051] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2124.903190] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2124.904303] ? find_held_lock+0x2c/0x110 [ 2124.905239] ? io_submit_sqes+0x8610/0x8610 [ 2124.906234] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2124.907339] ? wait_for_completion_io+0x270/0x270 [ 2124.908468] ? rcu_read_lock_any_held+0x75/0xa0 [ 2124.909525] ? vfs_write+0x354/0xb10 [ 2124.910376] ? fput_many+0x2f/0x1a0 [ 2124.911205] ? ksys_write+0x1a9/0x260 [ 2124.912074] ? __ia32_sys_read+0xb0/0xb0 [ 2124.913011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2124.914201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2124.915374] do_syscall_64+0x33/0x40 [ 2124.916234] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2124.917388] RIP: 0033:0x7f175bb3ab19 [ 2124.918230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2124.922375] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2124.924102] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2124.925722] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2124.927321] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2124.928946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2124.930545] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:58:00 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) [ 2124.952101] FAULT_INJECTION: forcing a failure. [ 2124.952101] name failslab, interval 1, probability 0, space 0, times 0 [ 2124.954688] CPU: 0 PID: 10835 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2124.956250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2124.958094] Call Trace: [ 2124.958703] dump_stack+0x107/0x167 [ 2124.959524] should_fail.cold+0x5/0xa [ 2124.960394] ? create_object.isra.0+0x3a/0xa20 [ 2124.961416] should_failslab+0x5/0x20 [ 2124.962272] kmem_cache_alloc+0x5b/0x310 [ 2124.963194] create_object.isra.0+0x3a/0xa20 [ 2124.964193] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2124.965339] kmem_cache_alloc_trace+0x151/0x320 [ 2124.966391] __io_queue_sqe+0x666/0x9d0 [ 2124.967297] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2124.968526] ? io_issue_sqe+0x77b0/0x77b0 [ 2124.969464] ? __io_file_supports_nowait+0x22a/0x510 [ 2124.970599] ? io_prep_rw+0x7f5/0x1050 [ 2124.971475] io_submit_sqes+0x44aa/0x8610 [ 2124.972444] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2124.973545] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2124.974626] ? find_held_lock+0x2c/0x110 [ 2124.975528] ? io_submit_sqes+0x8610/0x8610 [ 2124.976509] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2124.977572] ? wait_for_completion_io+0x270/0x270 [ 2124.978645] ? rcu_read_lock_any_held+0x75/0xa0 [ 2124.979669] ? vfs_write+0x354/0xb10 [ 2124.980514] ? fput_many+0x2f/0x1a0 [ 2124.981324] ? ksys_write+0x1a9/0x260 [ 2124.982168] ? __ia32_sys_read+0xb0/0xb0 [ 2124.983073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2124.984242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2124.985389] do_syscall_64+0x33/0x40 [ 2124.986215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2124.987347] RIP: 0033:0x7fa33f43fb19 [ 2124.988190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2124.992256] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2124.993942] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2124.995510] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2124.997084] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2124.998640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2125.000219] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:58:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f00000008c0), 0x8}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="ff22eedaaf94808fc57c93d6d594d1f50091c67de89e8fb79941da000000004fa4009d154a57a5b0602ad2f2cc2691456a00000000000000e5e5f5b361d2dcd95f621a09056391769a4702272ef8913d29920d3100e6b97b4f80ab076020ff1e4559666a9eed1a16c71c9a00"/121]) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x404c008) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r3, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file0/../file0\x00', 0x200, 0x1) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x82, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x1, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/../file0\x00', 0x204) 02:58:00 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x4, 0x80, 0xc0, 0x60, 0x3b, 0x1, 0x0, 0x80000000, 0x20, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xffffffff, 0x4}, 0x40084, 0x4, 0x0, 0x8, 0x9, 0x8, 0x176, 0x0, 0x8, 0x0, 0x80000001}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 02:58:00 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 02:58:00 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000003c0000000000aaff02"], 0x0) [ 2125.087534] loop4: detected capacity change from 0 to 1073741312 02:58:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = accept$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) readahead(r2, 0x1, 0x4) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x1, 0x10000}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0xbf, 0x6, 0x4, 0x0, 0x3b9, 0x10010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0xfffffffffffff24e, 0x9}, 0x4000, 0xffff, 0x9, 0x8, 0x0, 0xffffffff, 0x1, 0x0, 0x8, 0x0, 0x4}, r0, 0xb, r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000e00000000aaff00008b987c7eb822"], 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x20, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) 02:58:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000400000000000aaff02"], 0x0) 02:58:15 executing program 4: syz_emit_ethernet(0x197, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@mpls_mc={0x8848, {[{0xffffc, 0x0, 0x1}, {0x1}, {0x4, 0x0, 0x1}, {0x71a}, {0xffe7, 0x0, 0x1}, {0xffff, 0x0, 0x1}], @ipv6=@tipc_packet={0xa, 0x6, "570cbd", 0x149, 0x6, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x32, 0x4, 0x4, 0x2, 0x0, 0x0, 0x7, [@rand_addr=' \x01\x00', @remote]}, @hopopts={0x1, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1]}, @srh={0x3c, 0x2, 0x4, 0x1, 0x6b, 0x70, 0x5, [@loopback]}, @hopopts={0x1d, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @generic={0x2, 0x43, "29463bb49079710c264b778612b11b2531f62f634fd6bfee4eb4c3f4d3cdbf55d3a260b7ef3f96b65beb1279ad81b9d27a1183973451049fbcaf4b080a1a82a59b21ae"}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x2, [0x4, 0x2, 0x9]}}]}, @routing={0x32, 0x2, 0x1, 0x9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x89, 0x4, 0x4, 0x2, 0x6, 0x18, 0x7ff, [@empty, @loopback]}], @payload_conn={{{0x19, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0xffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x8, 0x4, 0x4e23, 0x4e20}}, [0x0]}}}}}}}, &(0x7f0000000080)={0x1, 0x4, [0x668, 0x7bb, 0x587, 0x5]}) 02:58:15 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 02:58:15 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 02:58:15 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 02:58:15 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 02:58:15 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = accept$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) readahead(r2, 0x1, 0x4) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x1, 0x10000}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0xbf, 0x6, 0x4, 0x0, 0x3b9, 0x10010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_config_ext={0xfffffffffffff24e, 0x9}, 0x4000, 0xffff, 0x9, 0x8, 0x0, 0xffffffff, 0x1, 0x0, 0x8, 0x0, 0x4}, r0, 0xb, r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000e00000000aaff00008b987c7eb822"], 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x20, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) 02:58:15 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) [ 2140.234472] FAULT_INJECTION: forcing a failure. [ 2140.234472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2140.237524] CPU: 0 PID: 10884 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2140.237756] FAULT_INJECTION: forcing a failure. [ 2140.237756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2140.239132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2140.239141] Call Trace: [ 2140.239168] dump_stack+0x107/0x167 [ 2140.239194] should_fail.cold+0x5/0xa [ 2140.245201] _copy_from_user+0x2e/0x1b0 [ 2140.246122] iovec_from_user+0x141/0x400 [ 2140.247070] __import_iovec+0x67/0x590 [ 2140.247975] ? SOFTIRQ_verbose+0x10/0x10 [ 2140.248947] io_import_iovec+0x581/0x1120 [ 2140.249932] ? io_complete_rw+0x230/0x230 [ 2140.250907] ? lock_downgrade+0x6d0/0x6d0 [ 2140.251890] ? mark_lock+0xf5/0x2df0 [ 2140.252780] io_read+0xe14/0x11e0 [ 2140.253585] ? lock_chain_count+0x20/0x20 [ 2140.254557] ? __is_insn_slot_addr+0x14c/0x290 [ 2140.255640] ? __lock_acquire+0x1657/0x5b00 [ 2140.256660] ? kiocb_done+0xc90/0xc90 [ 2140.257547] ? mark_lock+0xf5/0x2df0 [ 2140.258423] ? lock_chain_count+0x20/0x20 [ 2140.259403] ? __lock_acquire+0x1657/0x5b00 [ 2140.260454] ? __lock_acquire+0xbb1/0x5b00 [ 2140.261458] io_issue_sqe+0x2e8a/0x77b0 [ 2140.262400] ? find_held_lock+0x2c/0x110 [ 2140.263352] ? perf_trace_lock+0xac/0x490 [ 2140.264328] ? SOFTIRQ_verbose+0x10/0x10 [ 2140.265281] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2140.266399] ? io_connect+0x610/0x610 [ 2140.267300] ? lock_acquire+0x197/0x470 [ 2140.268240] ? find_held_lock+0x2c/0x110 [ 2140.269205] ? __fget_files+0x2cf/0x520 [ 2140.270140] ? lock_downgrade+0x6d0/0x6d0 [ 2140.271121] __io_queue_sqe+0x90/0x9d0 [ 2140.272044] ? io_issue_sqe+0x77b0/0x77b0 [ 2140.273017] ? __fget_files+0x2f8/0x520 [ 2140.273951] ? __io_file_supports_nowait+0x22a/0x510 [ 2140.275141] ? io_prep_rw+0x7f5/0x1050 [ 2140.276048] io_submit_sqes+0x44aa/0x8610 [ 2140.277057] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2140.278229] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2140.279354] ? find_held_lock+0x2c/0x110 [ 2140.280318] ? io_submit_sqes+0x8610/0x8610 [ 2140.281334] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2140.282460] ? wait_for_completion_io+0x270/0x270 [ 2140.283593] ? rcu_read_lock_any_held+0x75/0xa0 [ 2140.284687] ? vfs_write+0x354/0xb10 [ 2140.285560] ? fput_many+0x2f/0x1a0 [ 2140.286414] ? ksys_write+0x1a9/0x260 [ 2140.287298] ? __ia32_sys_read+0xb0/0xb0 [ 2140.288250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2140.289485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2140.290685] do_syscall_64+0x33/0x40 [ 2140.291556] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2140.292778] RIP: 0033:0x7f175bb3ab19 [ 2140.293643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2140.297948] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2140.299716] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2140.301392] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2140.303070] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2140.304726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2140.306398] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2140.308095] CPU: 1 PID: 10887 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2140.309236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2140.310584] Call Trace: [ 2140.311017] dump_stack+0x107/0x167 [ 2140.311590] should_fail.cold+0x5/0xa [ 2140.312206] _copy_from_user+0x2e/0x1b0 [ 2140.312848] iovec_from_user+0x141/0x400 [ 2140.313507] __import_iovec+0x67/0x590 [ 2140.314117] ? SOFTIRQ_verbose+0x10/0x10 [ 2140.314807] io_import_iovec+0x581/0x1120 [ 2140.315665] ? io_complete_rw+0x230/0x230 [ 2140.316339] ? lock_downgrade+0x6d0/0x6d0 [ 2140.317005] ? mark_lock+0xf5/0x2df0 [ 2140.317600] io_read+0xe14/0x11e0 [ 2140.318155] ? lock_chain_count+0x20/0x20 [ 2140.318813] ? __is_insn_slot_addr+0x14c/0x290 [ 2140.319654] ? __lock_acquire+0x1657/0x5b00 [ 2140.320410] ? kiocb_done+0xc90/0xc90 [ 2140.321009] ? mark_lock+0xf5/0x2df0 [ 2140.321749] ? lock_chain_count+0x20/0x20 [ 2140.322555] ? __lock_acquire+0x1657/0x5b00 [ 2140.323285] ? __lock_acquire+0xbb1/0x5b00 [ 2140.323923] io_issue_sqe+0x2e8a/0x77b0 [ 2140.324573] ? find_held_lock+0x2c/0x110 [ 2140.325222] ? perf_trace_lock+0xac/0x490 [ 2140.325885] ? SOFTIRQ_verbose+0x10/0x10 [ 2140.326532] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2140.327302] ? io_connect+0x610/0x610 [ 2140.327914] ? lock_acquire+0x197/0x470 [ 2140.328557] ? find_held_lock+0x2c/0x110 [ 2140.329215] ? __fget_files+0x2cf/0x520 [ 2140.329849] ? lock_downgrade+0x6d0/0x6d0 [ 2140.330509] __io_queue_sqe+0x90/0x9d0 [ 2140.331272] ? io_issue_sqe+0x77b0/0x77b0 [ 2140.331958] ? __fget_files+0x2f8/0x520 [ 2140.332602] ? __io_file_supports_nowait+0x22a/0x510 [ 2140.333414] ? io_prep_rw+0x7f5/0x1050 [ 2140.334046] io_submit_sqes+0x44aa/0x8610 [ 2140.334727] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2140.335533] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2140.336263] ? find_held_lock+0x2c/0x110 [ 2140.337053] ? io_submit_sqes+0x8610/0x8610 [ 2140.337886] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2140.338840] ? wait_for_completion_io+0x270/0x270 [ 2140.339610] ? rcu_read_lock_any_held+0x75/0xa0 [ 2140.340363] ? vfs_write+0x354/0xb10 [ 2140.340960] ? fput_many+0x2f/0x1a0 [ 2140.341542] ? ksys_write+0x1a9/0x260 [ 2140.342151] ? __ia32_sys_read+0xb0/0xb0 [ 2140.342799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2140.343642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2140.344476] do_syscall_64+0x33/0x40 [ 2140.345074] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2140.345893] RIP: 0033:0x7fa33f43fb19 [ 2140.346490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2140.349431] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2140.350651] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2140.351787] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2140.352919] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2140.354052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2140.355199] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:58:15 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff30c35fb54b626d54266df73a5de3a3b7831ed17dfefb9744157bbd4e22f533c1ba633eff7ca2f68efef0"], 0x0) 02:58:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000600000000000aaff02"], 0x0) [ 2140.383694] FAULT_INJECTION: forcing a failure. [ 2140.383694] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.386750] CPU: 0 PID: 10890 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2140.388379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2140.390305] Call Trace: [ 2140.390920] dump_stack+0x107/0x167 [ 2140.391769] should_fail.cold+0x5/0xa [ 2140.392675] ? create_object.isra.0+0x3a/0xa20 [ 2140.393744] should_failslab+0x5/0x20 [ 2140.394636] kmem_cache_alloc+0x5b/0x310 [ 2140.395593] create_object.isra.0+0x3a/0xa20 [ 2140.396621] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2140.397820] __kmalloc+0x16e/0x390 [ 2140.398655] io_setup_async_rw+0x180/0x580 [ 2140.399639] ? iov_iter_restore+0x195/0x3a0 [ 2140.400649] io_read+0x775/0x11e0 [ 2140.401477] ? kiocb_done+0xc90/0xc90 [ 2140.402378] ? mark_lock+0xf5/0x2df0 [ 2140.403254] ? lock_chain_count+0x20/0x20 [ 2140.404254] ? lock_acquire+0x197/0x470 [ 2140.405200] ? __lock_acquire+0xbb1/0x5b00 [ 2140.406218] io_issue_sqe+0x2e8a/0x77b0 [ 2140.407145] ? perf_trace_lock+0xac/0x490 [ 2140.408111] ? SOFTIRQ_verbose+0x10/0x10 [ 2140.409058] ? lock_chain_count+0x20/0x20 [ 2140.410030] ? io_connect+0x610/0x610 [ 2140.410919] ? lock_acquire+0x197/0x470 [ 2140.411846] ? find_held_lock+0x2c/0x110 [ 2140.412815] ? __fget_files+0x2cf/0x520 [ 2140.413740] ? lock_downgrade+0x6d0/0x6d0 [ 2140.414710] __io_queue_sqe+0x90/0x9d0 [ 2140.415628] ? io_issue_sqe+0x77b0/0x77b0 [ 2140.416610] ? __fget_files+0x2f8/0x520 [ 2140.417534] ? __io_file_supports_nowait+0x22a/0x510 [ 2140.418720] ? io_prep_rw+0x7f5/0x1050 [ 2140.419633] io_submit_sqes+0x44aa/0x8610 [ 2140.420669] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2140.421832] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2140.422964] ? find_held_lock+0x2c/0x110 [ 2140.423908] ? io_submit_sqes+0x8610/0x8610 [ 2140.424930] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2140.426051] ? wait_for_completion_io+0x270/0x270 [ 2140.427191] ? rcu_read_lock_any_held+0x75/0xa0 [ 2140.428287] ? vfs_write+0x354/0xb10 [ 2140.429157] ? fput_many+0x2f/0x1a0 [ 2140.430002] ? ksys_write+0x1a9/0x260 [ 2140.430889] ? __ia32_sys_read+0xb0/0xb0 [ 2140.431835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2140.433077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2140.434281] do_syscall_64+0x33/0x40 [ 2140.435147] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2140.436348] RIP: 0033:0x7f1e32d62b19 [ 2140.437221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2140.441472] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2140.443240] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2140.444888] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2140.446531] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2140.448169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2140.449820] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:58:16 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 02:58:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000001000000aaff02"], 0x0) 02:58:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r1 = socket$inet6(0xa, 0x2, 0x1) close_range(r0, r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000009b1c7b39016a000000040000aaff"], 0x0) 02:58:16 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x200202, 0x1, 0xa}, 0x18) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c6531"], 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) fgetxattr(r3, &(0x7f0000000300)=@random={'security.', 'trans=fd,'}, &(0x7f00000004c0)=""/170, 0xaa) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@msize={'msize', 0x3d, 0x80000000}}, {@nodevmap}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@afid={'afid', 0x3d, 0x345}}]}}) 02:58:16 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 02:58:16 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 02:58:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000003000000aaff02"], 0x0) 02:58:16 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 02:58:16 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) [ 2140.998947] FAULT_INJECTION: forcing a failure. [ 2140.998947] name failslab, interval 1, probability 0, space 0, times 0 [ 2141.000710] CPU: 1 PID: 10938 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2141.001685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2141.002847] Call Trace: [ 2141.003227] dump_stack+0x107/0x167 [ 2141.003750] should_fail.cold+0x5/0xa [ 2141.004299] ? io_setup_async_rw+0x180/0x580 [ 2141.004926] should_failslab+0x5/0x20 [ 2141.005464] __kmalloc+0x72/0x390 [ 2141.005961] io_setup_async_rw+0x180/0x580 [ 2141.006553] ? iov_iter_restore+0x195/0x3a0 [ 2141.007156] io_read+0x775/0x11e0 [ 2141.007643] ? __is_insn_slot_addr+0x14c/0x290 [ 2141.008342] ? kiocb_done+0xc90/0xc90 [ 2141.008874] ? mark_lock+0xf5/0x2df0 [ 2141.009402] ? lock_chain_count+0x20/0x20 [ 2141.010007] ? __lock_acquire+0xbb1/0x5b00 [ 2141.010601] io_issue_sqe+0x2e8a/0x77b0 [ 2141.011161] ? find_held_lock+0x2c/0x110 [ 2141.011732] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2141.012477] ? SOFTIRQ_verbose+0x10/0x10 [ 2141.013044] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2141.013708] ? lock_downgrade+0x6d0/0x6d0 [ 2141.014292] ? io_connect+0x610/0x610 [ 2141.014861] ? lock_acquire+0x197/0x470 [ 2141.015421] ? find_held_lock+0x2c/0x110 [ 2141.016000] ? __fget_files+0x2cf/0x520 [ 2141.016569] ? lock_downgrade+0x6d0/0x6d0 [ 2141.017149] __io_queue_sqe+0x90/0x9d0 [ 2141.017700] ? io_issue_sqe+0x77b0/0x77b0 [ 2141.018275] ? __fget_files+0x2f8/0x520 [ 2141.018831] ? __io_file_supports_nowait+0x22a/0x510 [ 2141.019534] ? io_prep_rw+0x7f5/0x1050 [ 2141.020075] io_submit_sqes+0x44aa/0x8610 [ 2141.020722] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2141.021419] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2141.022088] ? find_held_lock+0x2c/0x110 [ 2141.022651] ? io_submit_sqes+0x8610/0x8610 [ 2141.023251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2141.023916] ? wait_for_completion_io+0x270/0x270 [ 2141.024599] ? rcu_read_lock_any_held+0x75/0xa0 [ 2141.025249] ? vfs_write+0x354/0xb10 [ 2141.025762] ? fput_many+0x2f/0x1a0 [ 2141.026271] ? ksys_write+0x1a9/0x260 [ 2141.026797] ? __ia32_sys_read+0xb0/0xb0 [ 2141.027368] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2141.028088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2141.028812] do_syscall_64+0x33/0x40 [ 2141.029325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2141.030060] RIP: 0033:0x7f175bb3ab19 [ 2141.030576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2141.033135] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2141.034176] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2141.035155] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2141.036126] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2141.037106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2141.038120] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:58:16 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 02:58:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000005000000aaff02"], 0x0) 02:58:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/187, 0xbb}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000080)=""/47, 0x2f}], 0x3, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x20000000) fcntl$lock(r0, 0x5, &(0x7f0000000340)={0x1, 0x0, 0x3, 0x5, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000aaff00000000000000"], 0x0) 02:58:16 executing program 3: r0 = syz_io_uring_setup(0x4d4d, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000540)=0x0) r6 = syz_io_uring_complete(0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r6, &(0x7f0000000440), &(0x7f0000000300)='./file0\x00', 0x8, 0x0, 0x1}, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r8 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, 0x10000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x10000) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r7, 0x0, 0x0, 0x0, 0x2061, 0x0, {0x1, r11}}, 0x10000) perf_event_open(&(0x7f0000000440)={0x2, 0xb9, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 02:58:16 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 02:58:16 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) [ 2141.242764] FAULT_INJECTION: forcing a failure. [ 2141.242764] name failslab, interval 1, probability 0, space 0, times 0 [ 2141.246028] CPU: 0 PID: 10947 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2141.247517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2141.249307] Call Trace: [ 2141.249881] dump_stack+0x107/0x167 [ 2141.250669] should_fail.cold+0x5/0xa [ 2141.251492] ? __io_queue_sqe+0x666/0x9d0 [ 2141.252407] should_failslab+0x5/0x20 [ 2141.253221] kmem_cache_alloc_trace+0x55/0x320 [ 2141.254204] ? lock_downgrade+0x6d0/0x6d0 [ 2141.255089] __io_queue_sqe+0x666/0x9d0 [ 2141.255948] ? io_issue_sqe+0x77b0/0x77b0 [ 2141.256844] ? __fget_files+0x2f8/0x520 [ 2141.257706] ? __io_file_supports_nowait+0x22a/0x510 [ 2141.258802] ? io_prep_rw+0x7f5/0x1050 [ 2141.259651] io_submit_sqes+0x44aa/0x8610 [ 2141.260578] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2141.261646] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2141.262684] ? find_held_lock+0x2c/0x110 [ 2141.263557] ? io_submit_sqes+0x8610/0x8610 [ 2141.264500] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2141.265538] ? wait_for_completion_io+0x270/0x270 [ 2141.266574] ? rcu_read_lock_any_held+0x75/0xa0 [ 2141.267572] ? vfs_write+0x354/0xb10 [ 2141.268381] ? fput_many+0x2f/0x1a0 [ 2141.269169] ? ksys_write+0x1a9/0x260 [ 2141.270002] ? __ia32_sys_read+0xb0/0xb0 [ 2141.270874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2141.271995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2141.273116] do_syscall_64+0x33/0x40 [ 2141.273912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2141.275019] RIP: 0033:0x7f1e32d62b19 [ 2141.275817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2141.279770] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2141.281405] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2141.282943] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2141.284488] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2141.286024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2141.287554] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:58:16 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 02:58:16 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x50, 0x80, 0x7, 0x9, 0x0, 0x3ff, 0x200, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x2}, 0x1000, 0x2, 0x7, 0x2, 0x7, 0x4, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffeff}, 0x0, 0xa, r0, 0x3) [ 2141.314340] FAULT_INJECTION: forcing a failure. [ 2141.314340] name failslab, interval 1, probability 0, space 0, times 0 [ 2141.317057] CPU: 0 PID: 10952 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2141.318554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2141.320347] Call Trace: [ 2141.320915] dump_stack+0x107/0x167 [ 2141.321703] should_fail.cold+0x5/0xa [ 2141.322527] ? io_setup_async_rw+0x180/0x580 [ 2141.323476] should_failslab+0x5/0x20 [ 2141.324303] __kmalloc+0x72/0x390 [ 2141.325054] io_setup_async_rw+0x180/0x580 [ 2141.325959] ? iov_iter_restore+0x195/0x3a0 [ 2141.326902] io_read+0x775/0x11e0 [ 2141.327651] ? __is_insn_slot_addr+0x14c/0x290 [ 2141.328653] ? kiocb_done+0xc90/0xc90 [ 2141.329475] ? mark_lock+0xf5/0x2df0 [ 2141.330286] ? lock_chain_count+0x20/0x20 [ 2141.331210] ? __lock_acquire+0xbb1/0x5b00 [ 2141.332125] io_issue_sqe+0x2e8a/0x77b0 [ 2141.332990] ? find_held_lock+0x2c/0x110 [ 2141.333867] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2141.334991] ? SOFTIRQ_verbose+0x10/0x10 [ 2141.335864] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2141.336893] ? lock_downgrade+0x6d0/0x6d0 [ 2141.337783] ? io_connect+0x610/0x610 [ 2141.338610] ? lock_acquire+0x197/0x470 [ 2141.339477] ? find_held_lock+0x2c/0x110 [ 2141.340362] ? __fget_files+0x2cf/0x520 [ 2141.341214] ? lock_downgrade+0x6d0/0x6d0 [ 2141.342108] __io_queue_sqe+0x90/0x9d0 [ 2141.342952] ? io_issue_sqe+0x77b0/0x77b0 [ 2141.343840] ? __fget_files+0x2f8/0x520 [ 2141.344706] ? __io_file_supports_nowait+0x22a/0x510 [ 2141.345791] ? io_prep_rw+0x7f5/0x1050 [ 2141.346550] FAULT_INJECTION: forcing a failure. [ 2141.346550] name failslab, interval 1, probability 0, space 0, times 0 [ 2141.346631] io_submit_sqes+0x44aa/0x8610 [ 2141.348814] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2141.349877] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2141.350917] ? find_held_lock+0x2c/0x110 [ 2141.351785] ? io_submit_sqes+0x8610/0x8610 [ 2141.352717] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2141.353745] ? wait_for_completion_io+0x270/0x270 [ 2141.354773] ? rcu_read_lock_any_held+0x75/0xa0 [ 2141.355766] ? vfs_write+0x354/0xb10 [ 2141.356571] ? fput_many+0x2f/0x1a0 [ 2141.357343] ? ksys_write+0x1a9/0x260 [ 2141.358155] ? __ia32_sys_read+0xb0/0xb0 [ 2141.359021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2141.360136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2141.361248] do_syscall_64+0x33/0x40 [ 2141.362038] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2141.363128] RIP: 0033:0x7fa33f43fb19 [ 2141.363916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2141.367817] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2141.369438] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2141.370950] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2141.372474] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2141.373988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2141.375495] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2141.377045] CPU: 1 PID: 10959 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2141.377802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2141.378683] Call Trace: [ 2141.378975] dump_stack+0x107/0x167 [ 2141.379365] should_fail.cold+0x5/0xa [ 2141.379776] ? create_object.isra.0+0x3a/0xa20 [ 2141.380264] should_failslab+0x5/0x20 [ 2141.380680] kmem_cache_alloc+0x5b/0x310 [ 2141.381117] create_object.isra.0+0x3a/0xa20 02:58:16 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) [ 2141.381586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2141.382304] __kmalloc+0x16e/0x390 [ 2141.382693] io_setup_async_rw+0x180/0x580 [ 2141.383146] ? iov_iter_restore+0x195/0x3a0 [ 2141.383609] io_read+0x775/0x11e0 [ 2141.383987] ? __is_insn_slot_addr+0x14c/0x290 [ 2141.384487] ? kiocb_done+0xc90/0xc90 [ 2141.384895] ? mark_lock+0xf5/0x2df0 [ 2141.385297] ? lock_chain_count+0x20/0x20 [ 2141.385784] ? __lock_acquire+0xbb1/0x5b00 [ 2141.386239] io_issue_sqe+0x2e8a/0x77b0 [ 2141.386667] ? find_held_lock+0x2c/0x110 [ 2141.387103] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2141.387659] ? SOFTIRQ_verbose+0x10/0x10 [ 2141.388090] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2141.388602] ? lock_downgrade+0x6d0/0x6d0 [ 2141.389043] ? io_connect+0x610/0x610 [ 2141.389454] ? lock_acquire+0x197/0x470 [ 2141.389877] ? find_held_lock+0x2c/0x110 [ 2141.390316] ? __fget_files+0x2cf/0x520 [ 2141.390740] ? lock_downgrade+0x6d0/0x6d0 [ 2141.391186] __io_queue_sqe+0x90/0x9d0 [ 2141.391606] ? io_issue_sqe+0x77b0/0x77b0 [ 2141.392046] ? __fget_files+0x2f8/0x520 [ 2141.392476] ? __io_file_supports_nowait+0x22a/0x510 [ 2141.393019] ? io_prep_rw+0x7f5/0x1050 [ 2141.393437] io_submit_sqes+0x44aa/0x8610 [ 2141.393899] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2141.394435] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2141.394952] ? find_held_lock+0x2c/0x110 [ 2141.395389] ? io_submit_sqes+0x8610/0x8610 [ 2141.395854] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2141.396374] ? wait_for_completion_io+0x270/0x270 [ 2141.396893] ? rcu_read_lock_any_held+0x75/0xa0 [ 2141.397387] ? vfs_write+0x354/0xb10 [ 2141.397786] ? fput_many+0x2f/0x1a0 [ 2141.398176] ? ksys_write+0x1a9/0x260 [ 2141.398584] ? __ia32_sys_read+0xb0/0xb0 [ 2141.399021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2141.399599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2141.400149] do_syscall_64+0x33/0x40 [ 2141.400554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2141.401107] RIP: 0033:0x7f175bb3ab19 [ 2141.401506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2141.403465] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2141.404283] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2141.405049] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2141.405809] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2141.406568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2141.407328] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:58:32 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 02:58:32 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 02:58:32 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0) 02:58:32 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 02:58:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000003c000000aaff02"], 0x0) 02:58:32 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa1c8d63cc98aaaaaaaa00000000000086dd60d0ff4700020600fe8000105363000000000000740b3957084b1067e4998e5fefdcb296160f34ac9993dba1b13440c3431935f07fce233643ac58946d7ca3218899c21a4afd78f661545d28b9ecf31fa5344ca25e0dfa7cfe6bf7408cef6f2921f486c708de95e73524d17371feb7df6bb8cca48aead071df2e6a95"], 0x0) 02:58:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x3}, 0x9) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x299) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x83004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x5883, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x400008000, 0x0, 0x0, 0x100000, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000300)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e4566697a4970bc"]) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000080)=0xc0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = dup2(r8, r8) flock(0xffffffffffffffff, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x6, @local, 0x9}, 0x1c) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdoo=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) 02:58:32 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) [ 2157.351480] FAULT_INJECTION: forcing a failure. [ 2157.351480] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.353128] CPU: 0 PID: 10987 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2157.354074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2157.355206] Call Trace: [ 2157.355572] dump_stack+0x107/0x167 [ 2157.356075] should_fail.cold+0x5/0xa [ 2157.356607] ? create_object.isra.0+0x3a/0xa20 [ 2157.357236] should_failslab+0x5/0x20 [ 2157.357756] kmem_cache_alloc+0x5b/0x310 [ 2157.358316] create_object.isra.0+0x3a/0xa20 [ 2157.358923] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2157.359620] kmem_cache_alloc_trace+0x151/0x320 [ 2157.360270] __io_queue_sqe+0x666/0x9d0 [ 2157.360837] ? io_issue_sqe+0x77b0/0x77b0 [ 2157.361403] ? __fget_files+0x2f8/0x520 [ 2157.361946] ? __io_file_supports_nowait+0x22a/0x510 [ 2157.362647] ? io_prep_rw+0x7f5/0x1050 [ 2157.363191] io_submit_sqes+0x44aa/0x8610 [ 2157.363778] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2157.364465] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2157.365133] ? find_held_lock+0x2c/0x110 [ 2157.365703] ? io_submit_sqes+0x8610/0x8610 [ 2157.366297] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2157.366955] ? wait_for_completion_io+0x270/0x270 [ 2157.367622] ? rcu_read_lock_any_held+0x75/0xa0 [ 2157.368255] ? vfs_write+0x354/0xb10 [ 2157.368774] ? fput_many+0x2f/0x1a0 [ 2157.369290] ? ksys_write+0x1a9/0x260 [ 2157.369817] ? __ia32_sys_read+0xb0/0xb0 [ 2157.370391] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2157.371110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.371825] do_syscall_64+0x33/0x40 [ 2157.372078] 9pnet: Insufficient options for proto=fd [ 2157.372333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2157.372350] RIP: 0033:0x7f1e32d62b19 [ 2157.374758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2157.377264] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2157.378299] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2157.379264] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2157.380234] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2157.381209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2157.382192] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:58:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000040000000aaff02"], 0x0) [ 2157.416212] FAULT_INJECTION: forcing a failure. [ 2157.416212] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.418875] CPU: 1 PID: 10992 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2157.420487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2157.422404] Call Trace: [ 2157.423017] dump_stack+0x107/0x167 [ 2157.423861] should_fail.cold+0x5/0xa [ 2157.424761] ? create_object.isra.0+0x3a/0xa20 [ 2157.425816] should_failslab+0x5/0x20 [ 2157.426695] kmem_cache_alloc+0x5b/0x310 [ 2157.427643] create_object.isra.0+0x3a/0xa20 [ 2157.428674] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2157.429849] __kmalloc+0x16e/0x390 [ 2157.430678] io_setup_async_rw+0x180/0x580 [ 2157.431649] ? iov_iter_restore+0x195/0x3a0 [ 2157.432662] io_read+0x775/0x11e0 [ 2157.433469] ? __is_insn_slot_addr+0x14c/0x290 [ 2157.434536] ? kiocb_done+0xc90/0xc90 [ 2157.435417] ? mark_lock+0xf5/0x2df0 [ 2157.436289] ? lock_chain_count+0x20/0x20 [ 2157.437306] ? __lock_acquire+0xbb1/0x5b00 [ 2157.438286] io_issue_sqe+0x2e8a/0x77b0 [ 2157.439208] ? find_held_lock+0x2c/0x110 [ 2157.440161] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2157.441377] ? SOFTIRQ_verbose+0x10/0x10 [ 2157.442308] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2157.443403] ? lock_downgrade+0x6d0/0x6d0 [ 2157.444362] ? io_connect+0x610/0x610 [ 2157.445250] ? lock_acquire+0x197/0x470 [ 2157.446165] ? find_held_lock+0x2c/0x110 [ 2157.447102] ? __fget_files+0x2cf/0x520 [ 2157.448012] ? lock_downgrade+0x6d0/0x6d0 [ 2157.448980] __io_queue_sqe+0x90/0x9d0 [ 2157.449887] ? io_issue_sqe+0x77b0/0x77b0 [ 2157.450832] ? __fget_files+0x2f8/0x520 [ 2157.451749] ? __io_file_supports_nowait+0x22a/0x510 [ 2157.452931] ? io_prep_rw+0x7f5/0x1050 [ 2157.453834] io_submit_sqes+0x44aa/0x8610 [ 2157.454820] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2157.455963] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2157.457081] ? find_held_lock+0x2c/0x110 [ 2157.458019] ? io_submit_sqes+0x8610/0x8610 [ 2157.459019] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2157.460134] ? wait_for_completion_io+0x270/0x270 [ 2157.461249] ? rcu_read_lock_any_held+0x75/0xa0 [ 2157.462318] ? vfs_write+0x354/0xb10 [ 2157.463166] ? fput_many+0x2f/0x1a0 [ 2157.464001] ? ksys_write+0x1a9/0x260 [ 2157.464871] ? __ia32_sys_read+0xb0/0xb0 [ 2157.465805] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2157.467009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.468193] do_syscall_64+0x33/0x40 [ 2157.469058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2157.470223] RIP: 0033:0x7fa33f43fb19 [ 2157.471072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2157.475296] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2157.477048] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2157.478664] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2157.480293] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2157.481912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2157.483514] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2157.496548] FAULT_INJECTION: forcing a failure. [ 2157.496548] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.498158] CPU: 0 PID: 10993 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2157.499072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2157.500155] Call Trace: [ 2157.500509] dump_stack+0x107/0x167 [ 2157.500986] should_fail.cold+0x5/0xa [ 2157.501484] ? __io_queue_sqe+0x666/0x9d0 [ 2157.502031] should_failslab+0x5/0x20 [ 2157.502540] kmem_cache_alloc_trace+0x55/0x320 [ 2157.503141] ? lock_downgrade+0x6d0/0x6d0 [ 2157.503696] __io_queue_sqe+0x666/0x9d0 [ 2157.504233] ? io_issue_sqe+0x77b0/0x77b0 [ 2157.504788] ? __fget_files+0x2f8/0x520 [ 2157.505310] ? __io_file_supports_nowait+0x22a/0x510 [ 2157.505969] ? io_prep_rw+0x7f5/0x1050 [ 2157.506484] io_submit_sqes+0x44aa/0x8610 [ 2157.507040] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2157.507685] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2157.508316] ? find_held_lock+0x2c/0x110 [ 2157.508867] ? io_submit_sqes+0x8610/0x8610 [ 2157.509431] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2157.510064] ? wait_for_completion_io+0x270/0x270 [ 2157.510700] ? rcu_read_lock_any_held+0x75/0xa0 [ 2157.511318] ? vfs_write+0x354/0xb10 [ 2157.511804] ? fput_many+0x2f/0x1a0 [ 2157.512289] ? ksys_write+0x1a9/0x260 [ 2157.512811] ? __ia32_sys_read+0xb0/0xb0 [ 2157.513345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2157.514039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.514724] do_syscall_64+0x33/0x40 [ 2157.515207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2157.515879] RIP: 0033:0x7f175bb3ab19 [ 2157.516363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2157.518775] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2157.519795] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2157.520736] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2157.521684] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2157.522608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2157.523538] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:58:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r0, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xd4, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_NAT_SRC={0x94, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20008004}, 0x20008004) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0xb, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xc, 0x1, '\'\']$\xd7#[\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ':^{\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x9, 0x1, '/$#\x9f\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 02:58:33 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x10000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@loose}, {@fscache}, {@cache_none}, {@noextend}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/seq\x00'}}, {@seclabel}, {@euid_lt={'euid<', r2}}, {@appraise_type}]}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) truncate(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r3, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x1, 0x10000}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 02:58:33 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 02:58:33 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="011900e5a9bf00020000c673", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00008115486a45ffd62e66696c653000"]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80080, 0x0) readlinkat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/137, 0x89) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000440), 0x2, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000004c0), 0x200100, 0x0) lseek(r3, 0x5f3, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484301, 0x0) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x4, "9755154351ac9a"}) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = fsmount(r6, 0x1, 0x89) writev(r8, &(0x7f0000000500)=[{&(0x7f00000005c0)="d872062161451d210c34a46db438b17dcedf18c877a8e8f6326a4b2db34d2370321ac36098ba82e6986210fc489764a095d8ae09156705418b56a41a471c9fe013d6c05adf7a86d6c74020007a8b4f467474884060bab1ecf7b5f607c59a7f4368d439039b4880340d2cd0aa34c1c2d0af0161137d2f442b50033dddaaf1e47e77ce8ab19689728bc58aaff5f195ebf17b43896607bc02318d0bf05ea4c8e6cbeedab5d7f4dd340ceb000165e9d22880ce48474bf997a67d46e9b5f35302e8bc9a38a5fd3ab74a74938120cc22e8115a1d11c94c", 0xd4}, {&(0x7f0000000240)="1623d43661d2028c3f01291ff5f8e290e774ea6587c9e868ae4bf3d9cd9bc08411a39c087ea69f67aeebfdef3e8b96ecc2fc7ad35cd8ec7df29c0d4f0b56471617c668e87160aef3be53e2c5c2321fd80d88a990a1927733300ce0a9fbcc0d24f51b3e67fbcce9f3fc5b63faa439b31c92aa0b94e5a5c3d627f4109d21044114c80ccaedf5e16b47da16bdbb58f74dbd", 0x90}, {&(0x7f00000006c0)="9a9db79677ac12336b17d6291905e70736cd0c9b94de2d8c7ae1b7c81eeab3ad3670ac6cc731f331012ec42bc4acec1553e53bc1d177aff25265e833947dabbe55eb71f812d9d0d19d1895088a4cb255c7c9c6c5ba37c7dc138ec7afee5f84a34626e86be3c9c7b982a5345ebaf70333ecd87e2ae9f0a94cdb494ff9183f1730f425bb76d49268f852c2087f5e573a66ee2e44edbde987b09533cde30f96d7344e78f5a86895e775838d93671af08022a5419715b84c20b26c863b6ccb84be75c8b54b619039588278c90d735cbdb557f1ef3a31f2ae3493d63c0ce78d0c1350a93f15b31788eddcfba4910d6012a4f6776a62ae98af9a", 0xf7}, {&(0x7f0000000980)="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", 0xff}], 0x4) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000540), 0x1000006, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@access_user}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@cache_none}, {@access_client}, {@debug={'debug', 0x3d, 0x6}}, {@version_L}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '}'}}, {@subj_role={'subj_role', 0x3d, '\x1c@'}}]}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000200)={0x4, 0x8, 0x20, 0x8, 0xe0a}) 02:58:33 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 02:58:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000060000000aaff02"], 0x0) [ 2157.739450] FAULT_INJECTION: forcing a failure. [ 2157.739450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.740923] CPU: 0 PID: 11017 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2157.741721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2157.742682] Call Trace: [ 2157.742994] dump_stack+0x107/0x167 [ 2157.743415] should_fail.cold+0x5/0xa [ 2157.743864] _copy_from_user+0x2e/0x1b0 [ 2157.744327] iovec_from_user+0x141/0x400 [ 2157.744809] __import_iovec+0x67/0x590 [ 2157.745266] ? SOFTIRQ_verbose+0x10/0x10 [ 2157.745736] ? lock_downgrade+0x6d0/0x6d0 [ 2157.746226] io_import_iovec+0x581/0x1120 [ 2157.746714] ? io_complete_rw+0x230/0x230 [ 2157.747194] ? register_lock_class+0xbb/0x17b0 [ 2157.747722] ? lock_downgrade+0x6d0/0x6d0 [ 2157.748210] ? mark_lock+0xf5/0x2df0 [ 2157.748650] io_read+0xe14/0x11e0 [ 2157.749053] ? lock_chain_count+0x20/0x20 [ 2157.749539] ? __is_insn_slot_addr+0x14c/0x290 [ 2157.750070] ? register_lock_class+0xbb/0x17b0 [ 2157.750601] ? __lock_acquire+0x1657/0x5b00 [ 2157.751099] ? kiocb_done+0xc90/0xc90 [ 2157.751540] ? mark_lock+0xf5/0x2df0 [ 2157.751976] ? lock_chain_count+0x20/0x20 [ 2157.752465] ? __lock_acquire+0x1657/0x5b00 [ 2157.752980] ? __lock_acquire+0xbb1/0x5b00 [ 2157.753479] io_issue_sqe+0x2e8a/0x77b0 [ 2157.753940] ? find_held_lock+0x2c/0x110 [ 2157.754411] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2157.755018] ? SOFTIRQ_verbose+0x10/0x10 [ 2157.755490] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2157.756035] ? lock_downgrade+0x6d0/0x6d0 [ 2157.756522] ? io_connect+0x610/0x610 [ 2157.756965] ? lock_acquire+0x197/0x470 [ 2157.757427] ? find_held_lock+0x2c/0x110 [ 2157.757900] ? __fget_files+0x2cf/0x520 [ 2157.758360] ? lock_downgrade+0x6d0/0x6d0 [ 2157.758845] __io_queue_sqe+0x90/0x9d0 [ 2157.759300] ? io_issue_sqe+0x77b0/0x77b0 [ 2157.759776] ? __fget_files+0x2f8/0x520 [ 2157.760241] ? __io_file_supports_nowait+0x22a/0x510 [ 2157.760884] ? io_prep_rw+0x7f5/0x1050 [ 2157.761342] io_submit_sqes+0x44aa/0x8610 [ 2157.761842] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2157.762415] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2157.762974] ? find_held_lock+0x2c/0x110 [ 2157.763448] ? io_submit_sqes+0x8610/0x8610 [ 2157.763950] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2157.764517] ? wait_for_completion_io+0x270/0x270 [ 2157.765073] ? rcu_read_lock_any_held+0x75/0xa0 [ 2157.765615] ? vfs_write+0x354/0xb10 [ 2157.766046] ? fput_many+0x2f/0x1a0 [ 2157.766469] ? ksys_write+0x1a9/0x260 [ 2157.766911] ? __ia32_sys_read+0xb0/0xb0 [ 2157.767384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2157.767990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.768591] do_syscall_64+0x33/0x40 [ 2157.769029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2157.769622] RIP: 0033:0x7f1e32d62b19 [ 2157.770056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2157.772188] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2157.773078] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2157.773904] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2157.774728] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2157.775558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2157.776384] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:58:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000fffffff5000000aaff02"], 0x0) 02:58:33 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x544, &(0x7f0000000000)={0x0, 0x7fff, 0x4, 0x2, 0x130}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000540)=0x0) r4 = syz_io_uring_complete(0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r4, &(0x7f0000000440), &(0x7f0000000300)='./file0\x00', 0x8, 0x0, 0x1}, 0x3) r5 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x10000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x4004, @fd=r0, 0x2, 0x0, 0x0, 0x7, 0x1, {0x3, r8}}, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 02:58:33 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 2158.007672] FAULT_INJECTION: forcing a failure. [ 2158.007672] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.009103] CPU: 0 PID: 11035 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2158.009912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2158.010873] Call Trace: [ 2158.011188] dump_stack+0x107/0x167 [ 2158.011618] should_fail.cold+0x5/0xa [ 2158.012068] ? __io_queue_sqe+0x666/0x9d0 [ 2158.012565] should_failslab+0x5/0x20 [ 2158.013013] kmem_cache_alloc_trace+0x55/0x320 [ 2158.013550] ? lock_downgrade+0x6d0/0x6d0 [ 2158.014039] __io_queue_sqe+0x666/0x9d0 [ 2158.014511] ? io_issue_sqe+0x77b0/0x77b0 [ 2158.014998] ? __fget_files+0x2f8/0x520 [ 2158.015465] ? __io_file_supports_nowait+0x22a/0x510 [ 2158.016059] ? io_prep_rw+0x7f5/0x1050 [ 2158.016531] io_submit_sqes+0x44aa/0x8610 [ 2158.017036] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2158.017619] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2158.018187] ? find_held_lock+0x2c/0x110 [ 2158.018667] ? io_submit_sqes+0x8610/0x8610 [ 2158.019180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2158.019750] ? wait_for_completion_io+0x270/0x270 [ 2158.020329] ? rcu_read_lock_any_held+0x75/0xa0 [ 2158.020880] ? vfs_write+0x354/0xb10 [ 2158.021319] ? fput_many+0x2f/0x1a0 [ 2158.021746] ? ksys_write+0x1a9/0x260 [ 2158.022195] ? __ia32_sys_read+0xb0/0xb0 [ 2158.022673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2158.023289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.023896] do_syscall_64+0x33/0x40 [ 2158.024338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2158.024942] RIP: 0033:0x7fa33f43fb19 [ 2158.025380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.027532] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2158.028427] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2158.029272] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2158.030109] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2158.030947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2158.031783] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:58:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000f5ffffff000000aaff02"], 0x0) 02:58:47 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e00, 0x0, 0x0, 0x0) 02:58:47 executing program 3: ioctl$VT_GETMODE(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)) 02:58:47 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x59, 0x80, 0x68, 0x6, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54fd, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x400, 0x2, 0x0, 0x5, 0x400, 0xb4b, 0x2, 0x0, 0x4, 0x0, 0x5}, r1, 0x1, r0, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 02:58:47 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 02:58:47 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 02:58:47 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 02:58:47 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) [ 2172.014580] FAULT_INJECTION: forcing a failure. [ 2172.014580] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.016142] CPU: 1 PID: 11048 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2172.017073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2172.018192] Call Trace: [ 2172.018552] dump_stack+0x107/0x167 [ 2172.019052] should_fail.cold+0x5/0xa [ 2172.019565] ? io_setup_async_rw+0x180/0x580 [ 2172.020158] should_failslab+0x5/0x20 [ 2172.020679] __kmalloc+0x72/0x390 [ 2172.021155] io_setup_async_rw+0x180/0x580 [ 2172.021727] ? iov_iter_restore+0x195/0x3a0 [ 2172.022305] io_read+0x775/0x11e0 [ 2172.022774] ? __is_insn_slot_addr+0x14c/0x290 [ 2172.023389] ? register_lock_class+0xbb/0x17b0 [ 2172.024000] ? kiocb_done+0xc90/0xc90 [ 2172.024503] ? mark_lock+0xf5/0x2df0 [ 2172.025017] ? lock_chain_count+0x20/0x20 [ 2172.025582] ? __lock_acquire+0xbb1/0x5b00 [ 2172.026155] io_issue_sqe+0x2e8a/0x77b0 [ 2172.026691] ? find_held_lock+0x2c/0x110 [ 2172.027249] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2172.027947] ? SOFTIRQ_verbose+0x10/0x10 [ 2172.028490] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2172.029139] ? lock_downgrade+0x6d0/0x6d0 [ 2172.029700] ? io_connect+0x610/0x610 [ 2172.030223] ? lock_acquire+0x197/0x470 [ 2172.030752] ? find_held_lock+0x2c/0x110 [ 2172.031300] ? __fget_files+0x2cf/0x520 [ 2172.031823] ? lock_downgrade+0x6d0/0x6d0 [ 2172.032389] __io_queue_sqe+0x90/0x9d0 [ 2172.032909] ? io_issue_sqe+0x77b0/0x77b0 [ 2172.033466] ? __fget_files+0x2f8/0x520 [ 2172.033988] ? __io_file_supports_nowait+0x22a/0x510 [ 2172.034665] ? io_prep_rw+0x7f5/0x1050 [ 2172.035188] io_submit_sqes+0x44aa/0x8610 [ 2172.035757] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2172.036402] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2172.037045] ? find_held_lock+0x2c/0x110 [ 2172.037594] ? io_submit_sqes+0x8610/0x8610 [ 2172.038180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2172.038829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2172.039526] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2172.040228] ? trace_hardirqs_on+0x5b/0x180 [ 2172.040809] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2172.041536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2172.042211] do_syscall_64+0x33/0x40 [ 2172.042695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2172.043359] RIP: 0033:0x7f1e32d62b19 [ 2172.043842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2172.046242] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2172.047224] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2172.048148] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2172.049086] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2172.050004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2172.050919] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2172.062947] FAULT_INJECTION: forcing a failure. [ 2172.062947] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.064503] CPU: 1 PID: 11052 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2172.065413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2172.066479] Call Trace: [ 2172.066820] dump_stack+0x107/0x167 [ 2172.067285] should_fail.cold+0x5/0xa [ 2172.067777] ? create_object.isra.0+0x3a/0xa20 [ 2172.068362] should_failslab+0x5/0x20 [ 2172.068859] kmem_cache_alloc+0x5b/0x310 [ 2172.069384] create_object.isra.0+0x3a/0xa20 [ 2172.069945] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2172.070603] kmem_cache_alloc_trace+0x151/0x320 [ 2172.071198] ? lock_downgrade+0x6d0/0x6d0 [ 2172.071740] __io_queue_sqe+0x666/0x9d0 [ 2172.072252] ? io_issue_sqe+0x77b0/0x77b0 [ 2172.072784] ? __fget_files+0x2f8/0x520 [ 2172.073292] ? __io_file_supports_nowait+0x22a/0x510 [ 2172.073937] ? io_prep_rw+0x7f5/0x1050 [ 2172.074436] io_submit_sqes+0x44aa/0x8610 [ 2172.074982] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2172.075616] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2172.076230] ? find_held_lock+0x2c/0x110 [ 2172.076760] ? io_submit_sqes+0x8610/0x8610 [ 2172.077314] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2172.077932] ? wait_for_completion_io+0x270/0x270 [ 2172.078548] ? rcu_read_lock_any_held+0x75/0xa0 [ 2172.079139] ? vfs_write+0x354/0xb10 [ 2172.079614] ? fput_many+0x2f/0x1a0 [ 2172.080080] ? ksys_write+0x1a9/0x260 02:58:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, 0x10000}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x27935e4a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4585, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x5, 0x0, 0x1, {0x0, r5}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x4000}}, 0x80000001) io_uring_enter(r2, 0x58a7, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='!!$.-]$:/\x00') write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 2172.080565] ? __ia32_sys_read+0xb0/0xb0 [ 2172.081312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2172.081980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2172.082634] do_syscall_64+0x33/0x40 [ 2172.083108] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2172.083754] RIP: 0033:0x7f175bb3ab19 [ 2172.084238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2172.086561] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2172.087522] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2172.088428] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2172.089342] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2172.090246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2172.091145] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2172.096257] FAULT_INJECTION: forcing a failure. [ 2172.096257] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.099164] CPU: 0 PID: 11046 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2172.100740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2172.102610] Call Trace: [ 2172.103204] dump_stack+0x107/0x167 [ 2172.104024] should_fail.cold+0x5/0xa [ 2172.104892] ? create_object.isra.0+0x3a/0xa20 [ 2172.105916] should_failslab+0x5/0x20 [ 2172.106772] kmem_cache_alloc+0x5b/0x310 [ 2172.107696] create_object.isra.0+0x3a/0xa20 [ 2172.108694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2172.109853] kmem_cache_alloc_trace+0x151/0x320 [ 2172.110895] ? lock_downgrade+0x6d0/0x6d0 [ 2172.111831] __io_queue_sqe+0x666/0x9d0 [ 2172.112731] ? io_issue_sqe+0x77b0/0x77b0 [ 2172.113654] ? __fget_files+0x2f8/0x520 [ 2172.114539] ? __io_file_supports_nowait+0x22a/0x510 [ 2172.115665] ? io_prep_rw+0x7f5/0x1050 [ 2172.116538] io_submit_sqes+0x44aa/0x8610 [ 2172.117508] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2172.118621] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2172.119693] ? find_held_lock+0x2c/0x110 [ 2172.120601] ? io_submit_sqes+0x8610/0x8610 [ 2172.121570] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2172.122650] ? wait_for_completion_io+0x270/0x270 [ 2172.123723] ? rcu_read_lock_any_held+0x75/0xa0 [ 2172.124761] ? vfs_write+0x354/0xb10 [ 2172.125596] ? fput_many+0x2f/0x1a0 [ 2172.126406] ? ksys_write+0x1a9/0x260 [ 2172.127249] ? __ia32_sys_read+0xb0/0xb0 [ 2172.128152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2172.129329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2172.130476] do_syscall_64+0x33/0x40 [ 2172.131335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2172.132519] RIP: 0033:0x7fa33f43fb19 [ 2172.133350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2172.137404] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2172.139078] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2172.140672] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2172.142255] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2172.143822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2172.145391] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2187.157472] FAULT_INJECTION: forcing a failure. [ 2187.157472] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.159136] CPU: 1 PID: 11079 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2187.160007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2187.161047] Call Trace: [ 2187.161377] dump_stack+0x107/0x167 [ 2187.161831] should_fail.cold+0x5/0xa [ 2187.162308] ? create_object.isra.0+0x3a/0xa20 [ 2187.162872] should_failslab+0x5/0x20 [ 2187.163345] kmem_cache_alloc+0x5b/0x310 [ 2187.163856] create_object.isra.0+0x3a/0xa20 [ 2187.164399] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2187.165041] __kmalloc+0x16e/0x390 [ 2187.165491] io_setup_async_rw+0x180/0x580 [ 2187.166016] ? iov_iter_restore+0x195/0x3a0 [ 2187.166551] io_read+0x775/0x11e0 [ 2187.166987] ? __is_insn_slot_addr+0x14c/0x290 [ 2187.167556] ? register_lock_class+0xbb/0x17b0 [ 2187.168124] ? kiocb_done+0xc90/0xc90 [ 2187.168595] ? mark_lock+0xf5/0x2df0 [ 2187.169069] ? lock_chain_count+0x20/0x20 [ 2187.169603] ? __lock_acquire+0xbb1/0x5b00 [ 2187.170131] io_issue_sqe+0x2e8a/0x77b0 [ 2187.170626] ? find_held_lock+0x2c/0x110 [ 2187.171130] ? perf_trace_lock+0xac/0x490 [ 2187.171657] ? SOFTIRQ_verbose+0x10/0x10 [ 2187.172160] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2187.172750] ? io_connect+0x610/0x610 [ 2187.173233] ? lock_acquire+0x197/0x470 [ 2187.173725] ? find_held_lock+0x2c/0x110 [ 2187.174233] ? __fget_files+0x2cf/0x520 [ 2187.174727] ? lock_downgrade+0x6d0/0x6d0 [ 2187.175250] __io_queue_sqe+0x90/0x9d0 [ 2187.175738] ? io_issue_sqe+0x77b0/0x77b0 [ 2187.176248] ? __fget_files+0x2f8/0x520 [ 2187.176742] ? __io_file_supports_nowait+0x22a/0x510 [ 2187.177379] ? io_prep_rw+0x7f5/0x1050 [ 2187.177866] io_submit_sqes+0x44aa/0x8610 [ 2187.178400] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2187.179018] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2187.179618] ? find_held_lock+0x2c/0x110 [ 2187.180126] ? io_submit_sqes+0x8610/0x8610 [ 2187.180665] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2187.181269] ? wait_for_completion_io+0x270/0x270 [ 2187.181869] ? rcu_read_lock_any_held+0x75/0xa0 [ 2187.182441] ? vfs_write+0x354/0xb10 [ 2187.182902] ? fput_many+0x2f/0x1a0 [ 2187.183353] ? ksys_write+0x1a9/0x260 [ 2187.183826] ? __ia32_sys_read+0xb0/0xb0 [ 2187.184332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2187.184992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2187.185631] do_syscall_64+0x33/0x40 [ 2187.186094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2187.186729] RIP: 0033:0x7f1e32d62b19 [ 2187.187191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2187.189475] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2187.190424] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2187.191303] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2187.192185] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2187.193077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2187.193963] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:59:02 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 02:59:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000030000000000aaff02"], 0x0) 02:59:02 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 02:59:02 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 02:59:02 executing program 4: getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000000)=""/77, &(0x7f0000000080)=0x4d) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 02:59:02 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) 02:59:02 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 02:59:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x10000}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "825c00dc7baed74043a8c10eeac673f0"}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xb0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e0}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x349}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x61}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x882]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf402}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xed}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0xc800) [ 2187.220073] FAULT_INJECTION: forcing a failure. [ 2187.220073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2187.223074] CPU: 0 PID: 11076 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2187.224593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2187.226417] Call Trace: [ 2187.226996] dump_stack+0x107/0x167 [ 2187.227800] should_fail.cold+0x5/0xa [ 2187.228650] _copy_from_user+0x2e/0x1b0 [ 2187.229531] iovec_from_user+0x141/0x400 [ 2187.230428] __import_iovec+0x67/0x590 [ 2187.231273] ? SOFTIRQ_verbose+0x10/0x10 [ 2187.232155] ? lock_downgrade+0x6d0/0x6d0 [ 2187.233077] io_import_iovec+0x581/0x1120 [ 2187.233995] ? io_complete_rw+0x230/0x230 [ 2187.234892] ? lock_downgrade+0x6d0/0x6d0 [ 2187.235801] ? mark_lock+0xf5/0x2df0 [ 2187.236609] io_read+0xe14/0x11e0 [ 2187.237379] ? lock_chain_count+0x20/0x20 [ 2187.238285] ? __is_insn_slot_addr+0x14c/0x290 [ 2187.239277] ? __lock_acquire+0x1657/0x5b00 [ 2187.240217] ? kiocb_done+0xc90/0xc90 [ 2187.241060] ? mark_lock+0xf5/0x2df0 [ 2187.241886] ? lock_chain_count+0x20/0x20 [ 2187.242791] ? __lock_acquire+0x1657/0x5b00 [ 2187.243761] ? __lock_acquire+0xbb1/0x5b00 [ 2187.244685] io_issue_sqe+0x2e8a/0x77b0 [ 2187.245559] ? find_held_lock+0x2c/0x110 [ 2187.246447] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2187.247579] ? SOFTIRQ_verbose+0x10/0x10 [ 2187.248467] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2187.249509] ? lock_downgrade+0x6d0/0x6d0 [ 2187.250412] ? io_connect+0x610/0x610 [ 2187.251253] ? lock_acquire+0x197/0x470 [ 2187.252108] ? find_held_lock+0x2c/0x110 [ 2187.253005] ? __fget_files+0x2cf/0x520 [ 2187.253869] ? lock_downgrade+0x6d0/0x6d0 [ 2187.254777] __io_queue_sqe+0x90/0x9d0 [ 2187.255634] ? io_issue_sqe+0x77b0/0x77b0 [ 2187.256542] ? __fget_files+0x2f8/0x520 [ 2187.257428] ? __io_file_supports_nowait+0x22a/0x510 [ 2187.258531] ? io_prep_rw+0x7f5/0x1050 [ 2187.259382] io_submit_sqes+0x44aa/0x8610 [ 2187.260312] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2187.261400] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2187.262468] ? find_held_lock+0x2c/0x110 [ 2187.263362] ? io_submit_sqes+0x8610/0x8610 [ 2187.264308] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2187.265368] ? wait_for_completion_io+0x270/0x270 [ 2187.266433] ? rcu_read_lock_any_held+0x75/0xa0 [ 2187.267443] ? vfs_write+0x354/0xb10 [ 2187.268258] ? fput_many+0x2f/0x1a0 [ 2187.269062] ? ksys_write+0x1a9/0x260 [ 2187.269906] ? __ia32_sys_read+0xb0/0xb0 [ 2187.270794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2187.271941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2187.273077] do_syscall_64+0x33/0x40 [ 2187.273900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2187.275020] RIP: 0033:0x7fa33f43fb19 [ 2187.275834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2187.279877] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2187.281551] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2187.283109] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2187.284663] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2187.286216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2187.287763] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2187.301606] FAULT_INJECTION: forcing a failure. [ 2187.301606] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.303033] CPU: 1 PID: 11088 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2187.303871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2187.304875] Call Trace: [ 2187.305208] dump_stack+0x107/0x167 [ 2187.305663] should_fail.cold+0x5/0xa [ 2187.306132] ? create_object.isra.0+0x3a/0xa20 [ 2187.306682] should_failslab+0x5/0x20 [ 2187.307135] kmem_cache_alloc+0x5b/0x310 [ 2187.307622] create_object.isra.0+0x3a/0xa20 [ 2187.308143] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2187.308748] kmem_cache_alloc_trace+0x151/0x320 [ 2187.309305] ? lock_downgrade+0x6d0/0x6d0 [ 2187.309811] __io_queue_sqe+0x666/0x9d0 [ 2187.310283] ? io_issue_sqe+0x77b0/0x77b0 [ 2187.310781] ? __fget_files+0x2f8/0x520 [ 2187.311251] ? __io_file_supports_nowait+0x22a/0x510 [ 2187.311845] ? io_prep_rw+0x7f5/0x1050 [ 2187.312309] io_submit_sqes+0x44aa/0x8610 [ 2187.312830] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2187.313417] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2187.313987] ? find_held_lock+0x2c/0x110 [ 2187.314466] ? io_submit_sqes+0x8610/0x8610 [ 2187.314981] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2187.315552] ? wait_for_completion_io+0x270/0x270 [ 2187.316121] ? rcu_read_lock_any_held+0x75/0xa0 [ 2187.316664] ? vfs_write+0x354/0xb10 [ 2187.317114] ? fput_many+0x2f/0x1a0 [ 2187.317546] ? ksys_write+0x1a9/0x260 [ 2187.317991] ? __ia32_sys_read+0xb0/0xb0 [ 2187.318473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2187.319092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2187.319701] do_syscall_64+0x33/0x40 [ 2187.320138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2187.320740] RIP: 0033:0x7f175bb3ab19 [ 2187.321188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2187.323362] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2187.324252] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2187.325135] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2187.325966] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2187.326804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2187.327637] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:59:18 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 02:59:18 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 02:59:18 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 02:59:18 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) 02:59:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000050000000000aaff02"], 0x0) 02:59:18 executing program 3: syz_io_uring_setup(0x51a6, &(0x7f0000000140)={0x0, 0xf568, 0x10, 0x3, 0x93}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x286869, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') 02:59:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 02:59:18 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) [ 2202.476362] FAULT_INJECTION: forcing a failure. [ 2202.476362] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.477915] CPU: 1 PID: 11108 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2202.478808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.479883] Call Trace: [ 2202.480226] dump_stack+0x107/0x167 [ 2202.480707] should_fail.cold+0x5/0xa [ 2202.481216] ? __io_queue_sqe+0x666/0x9d0 [ 2202.481749] should_failslab+0x5/0x20 [ 2202.482237] kmem_cache_alloc_trace+0x55/0x320 [ 2202.482824] ? lock_downgrade+0x6d0/0x6d0 [ 2202.483369] __io_queue_sqe+0x666/0x9d0 [ 2202.483515] FAULT_INJECTION: forcing a failure. [ 2202.483515] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.483885] ? io_issue_sqe+0x77b0/0x77b0 [ 2202.483897] ? __fget_files+0x2f8/0x520 [ 2202.483910] ? __io_file_supports_nowait+0x22a/0x510 [ 2202.483933] ? io_prep_rw+0x7f5/0x1050 [ 2202.488643] io_submit_sqes+0x44aa/0x8610 [ 2202.489202] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.489836] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.490453] ? find_held_lock+0x2c/0x110 [ 2202.490972] ? io_submit_sqes+0x8610/0x8610 [ 2202.491526] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2202.492155] ? wait_for_completion_io+0x270/0x270 [ 2202.492769] ? rcu_read_lock_any_held+0x75/0xa0 [ 2202.493365] ? vfs_write+0x354/0xb10 [ 2202.493845] ? fput_many+0x2f/0x1a0 [ 2202.494316] ? ksys_write+0x1a9/0x260 [ 2202.494811] ? __ia32_sys_read+0xb0/0xb0 [ 2202.495333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2202.495997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2202.496663] do_syscall_64+0x33/0x40 [ 2202.497150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2202.497802] RIP: 0033:0x7f1e32d62b19 [ 2202.498276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2202.500621] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2202.501623] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2202.502527] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2202.503450] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2202.504357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2202.505277] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2202.506218] CPU: 0 PID: 11111 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2202.507825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.509730] Call Trace: [ 2202.510346] dump_stack+0x107/0x167 [ 2202.511194] should_fail.cold+0x5/0xa [ 2202.512068] ? io_setup_async_rw+0x180/0x580 [ 2202.513087] should_failslab+0x5/0x20 [ 2202.513959] __kmalloc+0x72/0x390 [ 2202.514762] io_setup_async_rw+0x180/0x580 [ 2202.515736] ? iov_iter_restore+0x195/0x3a0 [ 2202.516723] io_read+0x775/0x11e0 [ 2202.517543] ? __is_insn_slot_addr+0x14c/0x290 [ 2202.518606] ? kiocb_done+0xc90/0xc90 [ 2202.519466] ? mark_lock+0xf5/0x2df0 [ 2202.520330] ? lock_chain_count+0x20/0x20 [ 2202.521322] ? __lock_acquire+0xbb1/0x5b00 [ 2202.522297] io_issue_sqe+0x2e8a/0x77b0 [ 2202.523212] ? find_held_lock+0x2c/0x110 [ 2202.524143] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2202.525352] ? SOFTIRQ_verbose+0x10/0x10 [ 2202.526280] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2202.527362] ? lock_downgrade+0x6d0/0x6d0 [ 2202.528307] ? io_connect+0x610/0x610 [ 2202.529394] ? lock_acquire+0x197/0x470 [ 2202.530436] ? find_held_lock+0x2c/0x110 [ 2202.531500] ? __fget_files+0x2cf/0x520 [ 2202.532540] ? lock_downgrade+0x6d0/0x6d0 [ 2202.533655] __io_queue_sqe+0x90/0x9d0 [ 2202.534581] ? io_issue_sqe+0x77b0/0x77b0 [ 2202.535473] ? __fget_files+0x2f8/0x520 [ 2202.536327] ? __io_file_supports_nowait+0x22a/0x510 [ 2202.537424] ? io_prep_rw+0x7f5/0x1050 [ 2202.538264] io_submit_sqes+0x44aa/0x8610 [ 2202.539187] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.540251] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.541296] ? find_held_lock+0x2c/0x110 [ 2202.542172] ? io_submit_sqes+0x8610/0x8610 [ 2202.543105] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2202.544148] ? wait_for_completion_io+0x270/0x270 [ 2202.545192] ? rcu_read_lock_any_held+0x75/0xa0 [ 2202.546195] ? vfs_write+0x354/0xb10 [ 2202.546992] ? fput_many+0x2f/0x1a0 [ 2202.547776] ? ksys_write+0x1a9/0x260 [ 2202.548592] ? __ia32_sys_read+0xb0/0xb0 [ 2202.549477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2202.550609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2202.551725] do_syscall_64+0x33/0x40 [ 2202.552528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2202.553636] RIP: 0033:0x7fa33f43fb19 [ 2202.554436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2202.558391] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2202.560017] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2202.561547] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2202.563074] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2202.564602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2202.566140] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2202.570406] FAULT_INJECTION: forcing a failure. [ 2202.570406] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.571837] CPU: 1 PID: 11118 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2202.572688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.573723] Call Trace: [ 2202.574051] dump_stack+0x107/0x167 [ 2202.574503] should_fail.cold+0x5/0xa [ 2202.574972] ? io_setup_async_rw+0x180/0x580 [ 2202.575526] should_failslab+0x5/0x20 [ 2202.575997] __kmalloc+0x72/0x390 [ 2202.576432] io_setup_async_rw+0x180/0x580 [ 2202.576960] ? iov_iter_restore+0x195/0x3a0 [ 2202.577519] io_read+0x775/0x11e0 [ 2202.577955] ? __is_insn_slot_addr+0x14c/0x290 [ 2202.578526] ? kiocb_done+0xc90/0xc90 [ 2202.578997] ? mark_lock+0xf5/0x2df0 [ 2202.579463] ? lock_chain_count+0x20/0x20 [ 2202.580008] ? __lock_acquire+0xbb1/0x5b00 [ 2202.580538] io_issue_sqe+0x2e8a/0x77b0 [ 2202.581035] ? find_held_lock+0x2c/0x110 [ 2202.581542] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2202.582195] ? SOFTIRQ_verbose+0x10/0x10 [ 2202.582703] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2202.583296] ? lock_downgrade+0x6d0/0x6d0 [ 2202.583815] ? io_connect+0x610/0x610 [ 2202.584296] ? lock_acquire+0x197/0x470 [ 2202.584787] ? find_held_lock+0x2c/0x110 [ 2202.585299] ? __fget_files+0x2cf/0x520 [ 2202.585792] ? lock_downgrade+0x6d0/0x6d0 [ 2202.586308] __io_queue_sqe+0x90/0x9d0 [ 2202.586792] ? io_issue_sqe+0x77b0/0x77b0 [ 2202.587303] ? __fget_files+0x2f8/0x520 [ 2202.587790] ? __io_file_supports_nowait+0x22a/0x510 [ 2202.588420] ? io_prep_rw+0x7f5/0x1050 [ 2202.588906] io_submit_sqes+0x44aa/0x8610 [ 2202.589445] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.590061] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.590667] ? find_held_lock+0x2c/0x110 [ 2202.591177] ? io_submit_sqes+0x8610/0x8610 [ 2202.591717] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2202.592313] ? wait_for_completion_io+0x270/0x270 [ 2202.592907] ? rcu_read_lock_any_held+0x75/0xa0 [ 2202.593496] ? vfs_write+0x354/0xb10 [ 2202.593962] ? fput_many+0x2f/0x1a0 [ 2202.594411] ? ksys_write+0x1a9/0x260 [ 2202.594882] ? __ia32_sys_read+0xb0/0xb0 [ 2202.595389] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2202.596045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2202.596688] do_syscall_64+0x33/0x40 [ 2202.597159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2202.597796] RIP: 0033:0x7f175bb3ab19 [ 2202.598261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2202.600536] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2202.601486] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2202.602383] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2202.603261] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2202.604142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2202.605028] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 02:59:18 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 02:59:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000157b00aaffe4e1d6655703db9df49c802bd5b3984102124d1ecb5e11ded0526b682f912fb00ca4817687814691dbcbf23573ff7fd9ec515f07b65695c9ee5f"], 0x0) 02:59:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000003c0000000000aaff02"], 0x0) 02:59:18 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 02:59:18 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 02:59:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) syz_io_uring_setup(0x48a8, &(0x7f0000000000)={0x0, 0x5b7b, 0x10, 0x0, 0x95, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) [ 2202.801683] FAULT_INJECTION: forcing a failure. [ 2202.801683] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.803073] CPU: 1 PID: 11135 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2202.803866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.804817] Call Trace: [ 2202.805133] dump_stack+0x107/0x167 [ 2202.805553] should_fail.cold+0x5/0xa [ 2202.805996] ? io_setup_async_rw+0x180/0x580 [ 2202.806500] should_failslab+0x5/0x20 [ 2202.806938] __kmalloc+0x72/0x390 [ 2202.807336] io_setup_async_rw+0x180/0x580 [ 2202.807838] ? iov_iter_restore+0x195/0x3a0 [ 2202.808339] io_read+0x775/0x11e0 [ 2202.808741] ? __is_insn_slot_addr+0x14c/0x290 02:59:18 executing program 3: clone3(&(0x7f0000000200)={0x44124100, 0x0, 0x0, &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000007e0200000000000001000000080000000500000000000000070000000000000039050000000000000200000000000000000000000000000000000000000000000002000000000000000000000000000050b9fa3d00000000090000000000000001000000000000000000000000000000000000000000000088040000000000000500000000000000b19b000000000000faffffffffffffff0000000000000000000000000000000000000000000000000c200000000000000000000000000000010000000000000001040000000000000900000000000000000000000000000000000000000000000420000000000000000000000000000001000000000000000500000000000000010000000000000000000000000000000000000000000000000c00007b1c00"/312]) r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000640)='net/hci\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c46f906080201000080000000000700030000000000ac01000000000000400000000000000083030000000000000008000075063800020006000100030000000060fc0000000700000000000000d05d0000000000000400000000000000e403000000000000ffffffff000000003bffffffffffffff05000000080000000400000000000000000000000000000003000000000000006cf9ffffffffffffd0090000000000000600000000000000dc04a6b394bb2111050f1143a2e160c104b04a9b9078bd69eeba03f89e1dbd9c6641ada00651e5fb24ca955b211d9c00"/1245], 0x4df) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0x1, 0x3, 0x6, 0x1e1600000000, 0x80000001, r0}) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='\'\x00', &(0x7f0000000500)='\x00'], &(0x7f0000000440)=[&(0x7f0000000540)=']{..\'\x00\xd6\xd5|\xfe\x12\xd9\x19\xf6\xfa{S%\x81.;\xe9;\xbfX\xf7o\xd3o8\x1f\x04\x12`\xf0KV\xf9$\xab\x8d;\x16E\xeb\xcd\xa9\xc4\xd9\xefB[x\xa4\x8c`\xc6\x92\xf0N*\xc2x\xb6pxT?+j&N\xa0[\xe1\xbf\x85?$\xa1a\xb3\xfcS>\r\x9dq\xe0\xa3%cP\xd3\xe2p)\xce\xac\xd6\xd2>?s0QV\x9e\x97\x1b\x11\xa4b\x05\xa4g\xcdoFm\xb3h\xdb4R$p;\x94\x18\x8a\xb4^\x80\xbe\xa7{\xe4v0\x81\x10d\xdb\xac\xc06\xcd\x94\x95Kb\xe2\x8d\x8f~^\xc3\x91\xde^\x11\x0e\xaa=\x0fe%\xa7\x14\x9b\xb8\x976(f\xe0\x177nr', &(0x7f00000003c0)='!\xca.)\'\'\x00', &(0x7f0000000400)='\x19'], 0x100) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0xc, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r2, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x1, 0x10000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0xc715}}, './file0\x00'}) [ 2202.809282] ? register_lock_class+0xbb/0x17b0 [ 2202.810027] ? kiocb_done+0xc90/0xc90 [ 2202.810468] ? mark_lock+0xf5/0x2df0 [ 2202.810903] ? lock_chain_count+0x20/0x20 [ 2202.811409] ? __lock_acquire+0xbb1/0x5b00 [ 2202.811904] io_issue_sqe+0x2e8a/0x77b0 [ 2202.812368] ? find_held_lock+0x2c/0x110 [ 2202.812836] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2202.813451] ? SOFTIRQ_verbose+0x10/0x10 [ 2202.813922] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2202.814470] ? lock_downgrade+0x6d0/0x6d0 [ 2202.814957] ? io_connect+0x610/0x610 [ 2202.815404] ? lock_acquire+0x197/0x470 [ 2202.815859] ? find_held_lock+0x2c/0x110 [ 2202.816336] ? __fget_files+0x2cf/0x520 [ 2202.816799] ? lock_downgrade+0x6d0/0x6d0 [ 2202.817294] __io_queue_sqe+0x90/0x9d0 [ 2202.817745] ? io_issue_sqe+0x77b0/0x77b0 [ 2202.818225] ? __fget_files+0x2f8/0x520 [ 2202.818695] ? __io_file_supports_nowait+0x22a/0x510 [ 2202.819279] ? io_prep_rw+0x7f5/0x1050 [ 2202.819731] io_submit_sqes+0x44aa/0x8610 [ 2202.820228] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.820811] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.821374] ? find_held_lock+0x2c/0x110 [ 2202.821845] ? io_submit_sqes+0x8610/0x8610 [ 2202.822351] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2202.822909] ? wait_for_completion_io+0x270/0x270 [ 2202.823461] ? rcu_read_lock_any_held+0x75/0xa0 [ 2202.823999] ? vfs_write+0x354/0xb10 [ 2202.824426] ? fput_many+0x2f/0x1a0 [ 2202.824847] ? ksys_write+0x1a9/0x260 [ 2202.825300] ? __ia32_sys_read+0xb0/0xb0 [ 2202.825774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2202.826388] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2202.826987] do_syscall_64+0x33/0x40 [ 2202.827421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2202.828007] RIP: 0033:0x7f1e32d62b19 [ 2202.828434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2202.830572] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2202.831458] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2202.832281] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2202.833148] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2202.833969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2202.834788] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:59:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000600000000000aaff02"], 0x0) 02:59:18 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) [ 2202.960547] FAULT_INJECTION: forcing a failure. [ 2202.960547] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.961960] CPU: 1 PID: 11145 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2202.962760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.963727] Call Trace: [ 2202.964041] dump_stack+0x107/0x167 [ 2202.964464] should_fail.cold+0x5/0xa [ 2202.964913] ? create_object.isra.0+0x3a/0xa20 [ 2202.965446] should_failslab+0x5/0x20 [ 2202.965885] kmem_cache_alloc+0x5b/0x310 [ 2202.966356] create_object.isra.0+0x3a/0xa20 [ 2202.966870] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2202.967454] kmem_cache_alloc_trace+0x151/0x320 [ 2202.968004] ? lock_downgrade+0x6d0/0x6d0 [ 2202.968478] __io_queue_sqe+0x666/0x9d0 [ 2202.968941] ? io_issue_sqe+0x77b0/0x77b0 [ 2202.969429] ? __fget_files+0x2f8/0x520 [ 2202.969887] ? __io_file_supports_nowait+0x22a/0x510 [ 2202.970485] ? io_prep_rw+0x7f5/0x1050 [ 2202.970936] io_submit_sqes+0x44aa/0x8610 [ 2202.971440] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.972013] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2202.972568] ? find_held_lock+0x2c/0x110 [ 2202.973054] ? io_submit_sqes+0x8610/0x8610 [ 2202.973575] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2202.974136] ? wait_for_completion_io+0x270/0x270 [ 2202.974698] ? rcu_read_lock_any_held+0x75/0xa0 [ 2202.975236] ? vfs_write+0x354/0xb10 [ 2202.975670] ? fput_many+0x2f/0x1a0 [ 2202.976092] ? ksys_write+0x1a9/0x260 [ 2202.976527] ? __ia32_sys_read+0xb0/0xb0 [ 2202.977011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2202.977664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2202.978335] do_syscall_64+0x33/0x40 [ 2202.978774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2202.979366] RIP: 0033:0x7fa33f43fb19 [ 2202.979798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2202.981965] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2202.982841] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2202.983663] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2202.984479] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2202.985323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2202.986143] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:59:32 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 02:59:32 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 02:59:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000300000000aaff02"], 0x0) 02:59:32 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 02:59:32 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10000000, 0x0, 0x0, 0x0) 02:59:32 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x80000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) fallocate(r2, 0x22, 0x395, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) 02:59:32 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000100001004000000005000000000000000a000080487fec864b24040000000000001e9800"], 0x28}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @empty, 0x6}, 0x1c) r2 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="40edc8e3bbb4000000000000002e2f66696c65302f668d2d5289832d0a14bf9f9aec1339d5e9d940953f2ed5e2cf6cad9c2e36a0ebbeec62df28880de214ec0c6e59f0701010aea29b71772f1366bd94b75d9c0779dca06c170844535b6f9532924e6d57344c0f6231879a64fcd36ef10a91153b3e0a5f682b8a1af0d200f475de0fc981767d21818d7ac06d48b1adf339d05e7773c6b068386922ff7570ad1432416ee464bf87d52557633c81771acea842be8a2b48293111f3c3d5b7b2bb43000000000000"]) fcntl$setflags(r3, 0x2, 0x1) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f00000015c0)=0x1000000, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f00000005c0)={{r5}, "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"}) 02:59:32 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 2216.917332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2216.920622] FAULT_INJECTION: forcing a failure. [ 2216.920622] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.922923] CPU: 1 PID: 11161 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2216.924303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2216.925962] Call Trace: [ 2216.926494] dump_stack+0x107/0x167 [ 2216.927225] should_fail.cold+0x5/0xa [ 2216.928001] ? __io_queue_sqe+0x666/0x9d0 [ 2216.928832] should_failslab+0x5/0x20 [ 2216.929604] kmem_cache_alloc_trace+0x55/0x320 [ 2216.930513] ? lock_downgrade+0x6d0/0x6d0 [ 2216.931342] __io_queue_sqe+0x666/0x9d0 [ 2216.932141] ? io_issue_sqe+0x77b0/0x77b0 [ 2216.932970] ? __fget_files+0x2f8/0x520 [ 2216.933773] ? __io_file_supports_nowait+0x22a/0x510 [ 2216.934796] ? io_prep_rw+0x7f5/0x1050 [ 2216.935584] io_submit_sqes+0x44aa/0x8610 [ 2216.936452] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2216.937463] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2216.938428] ? find_held_lock+0x2c/0x110 [ 2216.939254] ? io_submit_sqes+0x8610/0x8610 [ 2216.940123] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2216.941080] ? wait_for_completion_io+0x270/0x270 [ 2216.942058] ? rcu_read_lock_any_held+0x75/0xa0 [ 2216.942998] ? vfs_write+0x354/0xb10 [ 2216.943742] ? fput_many+0x2f/0x1a0 [ 2216.944473] ? ksys_write+0x1a9/0x260 [ 2216.945250] ? __ia32_sys_read+0xb0/0xb0 [ 2216.946075] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2216.947125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2216.948167] do_syscall_64+0x33/0x40 [ 2216.948912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2216.949947] RIP: 0033:0x7fa33f43fb19 [ 2216.950701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2216.954387] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2216.955919] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2216.957355] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2216.958792] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2216.960211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2216.961646] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2216.974194] FAULT_INJECTION: forcing a failure. [ 2216.974194] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.976503] CPU: 1 PID: 11165 Comm: syz-executor.0 Not tainted 5.10.240 #1 02:59:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000500000000aaff02"], 0x0) [ 2216.977902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2216.979827] Call Trace: [ 2216.980359] dump_stack+0x107/0x167 [ 2216.981092] should_fail.cold+0x5/0xa [ 2216.981867] ? create_object.isra.0+0x3a/0xa20 [ 2216.982775] should_failslab+0x5/0x20 [ 2216.983536] kmem_cache_alloc+0x5b/0x310 [ 2216.984352] create_object.isra.0+0x3a/0xa20 [ 2216.985236] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2216.986254] kmem_cache_alloc_trace+0x151/0x320 [ 2216.987176] ? lock_downgrade+0x6d0/0x6d0 [ 2216.988013] __io_queue_sqe+0x666/0x9d0 [ 2216.988811] ? io_issue_sqe+0x77b0/0x77b0 [ 2216.989639] ? __fget_files+0x2f8/0x520 [ 2216.990441] ? __io_file_supports_nowait+0x22a/0x510 [ 2216.990603] FAULT_INJECTION: forcing a failure. [ 2216.990603] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.991452] ? io_prep_rw+0x7f5/0x1050 [ 2216.991482] io_submit_sqes+0x44aa/0x8610 [ 2216.991539] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2216.995452] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2216.996404] ? find_held_lock+0x2c/0x110 [ 2216.997227] ? io_submit_sqes+0x8610/0x8610 [ 2216.998097] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2216.999055] ? wait_for_completion_io+0x270/0x270 [ 2217.000019] ? rcu_read_lock_any_held+0x75/0xa0 [ 2217.000939] ? vfs_write+0x354/0xb10 [ 2217.001696] ? fput_many+0x2f/0x1a0 [ 2217.002423] ? ksys_write+0x1a9/0x260 [ 2217.003187] ? __ia32_sys_read+0xb0/0xb0 [ 2217.004004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.005046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2217.006088] do_syscall_64+0x33/0x40 [ 2217.006827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2217.007848] RIP: 0033:0x7f175bb3ab19 [ 2217.008592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2217.012269] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2217.013793] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2217.015206] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2217.016619] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2217.018043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2217.019466] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2217.020933] CPU: 0 PID: 11174 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2217.021825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2217.022872] Call Trace: [ 2217.023213] dump_stack+0x107/0x167 [ 2217.023683] should_fail.cold+0x5/0xa [ 2217.024178] ? create_object.isra.0+0x3a/0xa20 [ 2217.024759] should_failslab+0x5/0x20 [ 2217.025244] kmem_cache_alloc+0x5b/0x310 [ 2217.025770] create_object.isra.0+0x3a/0xa20 [ 2217.026326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2217.026965] __kmalloc+0x16e/0x390 [ 2217.027426] io_setup_async_rw+0x180/0x580 [ 2217.027959] ? iov_iter_restore+0x195/0x3a0 [ 2217.028500] io_read+0x775/0x11e0 [ 2217.028938] ? __is_insn_slot_addr+0x14c/0x290 [ 2217.029523] ? register_lock_class+0xbb/0x17b0 [ 2217.030099] ? kiocb_done+0xc90/0xc90 [ 2217.030576] ? mark_lock+0xf5/0x2df0 [ 2217.031053] ? lock_chain_count+0x20/0x20 [ 2217.031603] ? __lock_acquire+0xbb1/0x5b00 [ 2217.032143] io_issue_sqe+0x2e8a/0x77b0 [ 2217.032640] ? find_held_lock+0x2c/0x110 [ 2217.033152] ? perf_trace_lock+0xac/0x490 [ 2217.033683] ? SOFTIRQ_verbose+0x10/0x10 [ 2217.034190] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2217.034798] ? io_connect+0x610/0x610 [ 2217.035287] ? lock_acquire+0x197/0x470 [ 2217.035788] ? find_held_lock+0x2c/0x110 [ 2217.036309] ? __fget_files+0x2cf/0x520 [ 2217.036806] ? lock_downgrade+0x6d0/0x6d0 [ 2217.037335] __io_queue_sqe+0x90/0x9d0 [ 2217.037835] ? io_issue_sqe+0x77b0/0x77b0 [ 2217.038352] ? __fget_files+0x2f8/0x520 [ 2217.038848] ? __io_file_supports_nowait+0x22a/0x510 [ 2217.039484] ? io_prep_rw+0x7f5/0x1050 [ 2217.039978] io_submit_sqes+0x44aa/0x8610 [ 2217.040517] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2217.041145] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2217.041750] ? find_held_lock+0x2c/0x110 [ 2217.042260] ? io_submit_sqes+0x8610/0x8610 [ 2217.042807] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2217.043407] ? wait_for_completion_io+0x270/0x270 [ 2217.044010] ? rcu_read_lock_any_held+0x75/0xa0 [ 2217.044585] ? vfs_write+0x354/0xb10 [ 2217.045047] ? fput_many+0x2f/0x1a0 [ 2217.045510] ? ksys_write+0x1a9/0x260 [ 2217.045985] ? __ia32_sys_read+0xb0/0xb0 [ 2217.046490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.047140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2217.047783] do_syscall_64+0x33/0x40 [ 2217.048246] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2217.048878] RIP: 0033:0x7f1e32d62b19 [ 2217.049348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2217.051612] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2217.052553] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2217.053439] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2217.054317] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2217.055199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2217.056076] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 02:59:32 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) lseek(r0, 0x100000000, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff4b380b9b75fec0569ac7ccd8a78f5a0e57e7283cd76a7945e997d8653b28f376b341c479"], 0x0) 02:59:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000003c00000000aaff02"], 0x0) 02:59:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000004000000000aaff02"], 0x0) 02:59:32 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_setup(0x2, &(0x7f0000000500)=0x0) io_pgetevents(r1, 0x7d0, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x1ff, 0x6, 0xff, 0x8}, {0x3, 0x22, 0x1f, 0xf4}, {0xfff, 0x1, 0x3, 0x20}]}) io_submit(r1, 0x0, 0x0) 02:59:32 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 02:59:32 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000709a836c87ea72c4397fa2e5ebbae7d60000020600fe8054d07ee00000feff00ca2fcce5ba5edccb3b87b8de7121b6c2178a45bdad446b36b1f39c8d8114389fd5bec3009e0944339635556008e572f9d1dea283a0c6ebb67768045728f5feda8446f35e8af3c8d3aff9fa7afac1b95341bcf1d3ff19773acd47abf4931d"], 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) syz_emit_ethernet(0x68, &(0x7f0000000180)={@multicast, @empty, @void, {@llc={0x4, {@llc={0x1, 0xe2, '\x00\x00', "57fa7fb911eb27ff8415d7cedd5cdee0b8a33935a0aff5caac132579f2be1b572ef2c1cc5daf022ea98056f7fc5793afdb107c4970eabf071a908589f18a361874cf43beef0f86224ad2ea789c21e26f261f29ffedcc"}}}}}, &(0x7f0000000140)={0x0, 0x1, [0x7f, 0x780, 0xc88, 0xa3c]}) 02:59:32 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000006000000000aaff02"], 0x0) 02:59:32 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) [ 2217.480266] audit: type=1326 audit(1755658773.076:147): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11195 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc736a7b19 code=0x7ffc0000 [ 2217.488370] audit: type=1326 audit(1755658773.084:148): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11195 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efc736a7b19 code=0x7ffc0000 [ 2217.506948] audit: type=1326 audit(1755658773.084:149): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11195 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc736a7b19 code=0x7ffc0000 [ 2217.523789] audit: type=1326 audit(1755658773.085:150): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11195 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc736a7b19 code=0x7ffc0000 [ 2217.536630] audit: type=1326 audit(1755658773.085:151): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11195 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc736a7b19 code=0x7ffc0000 [ 2217.546081] audit: type=1326 audit(1755658773.085:152): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11195 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc736a7b19 code=0x7ffc0000 [ 2217.557222] audit: type=1326 audit(1755658773.087:153): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11195 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7efc736a7b19 code=0x7ffc0000 [ 2217.565287] audit: type=1326 audit(1755658773.087:154): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11195 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc736a7b19 code=0x7ffc0000 [ 2217.576558] audit: type=1326 audit(1755658773.087:155): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11195 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc736a7b19 code=0x7ffc0000 02:59:47 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000002c0)) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) dup2(0xffffffffffffffff, r2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0xaa5, 0x9, 0x9, 0xfffffffd, 0x11b2}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private0, r1}, 0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/class/devlink', 0x103000, 0x19) timer_delete(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000880)={0x100, &(0x7f0000000640), &(0x7f0000000440), &(0x7f0000000600), {0x80041}, &(0x7f0000001e00)=""/102400, 0x19000, &(0x7f0000000980)=""/231, &(0x7f0000000840)}, 0x58) timer_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) clone3(&(0x7f00000001c0)={0xc8182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:59:47 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 02:59:47 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000010000aaff02"], 0x0) 02:59:47 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 02:59:47 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 02:59:47 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 02:59:47 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 02:59:47 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7f, 0x9, 0x4, 0x0, 0x0, 0x40, 0x1104, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x50000, 0x0, 0x9, 0x3, 0x7b8e, 0x6, 0x400, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x7, r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) [ 2232.315404] FAULT_INJECTION: forcing a failure. [ 2232.315404] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.317175] CPU: 1 PID: 11223 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2232.318227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2232.319453] Call Trace: [ 2232.319854] dump_stack+0x107/0x167 [ 2232.320400] should_fail.cold+0x5/0xa [ 2232.320988] ? __io_queue_sqe+0x666/0x9d0 [ 2232.321623] should_failslab+0x5/0x20 [ 2232.322195] kmem_cache_alloc_trace+0x55/0x320 [ 2232.322884] ? lock_downgrade+0x6d0/0x6d0 [ 2232.323503] __io_queue_sqe+0x666/0x9d0 [ 2232.324102] ? io_issue_sqe+0x77b0/0x77b0 [ 2232.324719] ? __fget_files+0x2f8/0x520 [ 2232.325348] ? __io_file_supports_nowait+0x22a/0x510 [ 2232.326101] ? io_prep_rw+0x7f5/0x1050 [ 2232.326691] io_submit_sqes+0x44aa/0x8610 [ 2232.327332] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2232.328074] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2232.328798] ? find_held_lock+0x2c/0x110 [ 2232.329413] ? io_submit_sqes+0x8610/0x8610 [ 2232.330060] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2232.330779] ? wait_for_completion_io+0x270/0x270 [ 2232.331501] ? rcu_read_lock_any_held+0x75/0xa0 [ 2232.332192] ? vfs_write+0x354/0xb10 [ 2232.332749] ? fput_many+0x2f/0x1a0 [ 2232.333305] ? ksys_write+0x1a9/0x260 [ 2232.333881] ? __ia32_sys_read+0xb0/0xb0 [ 2232.334486] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.335266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2232.336031] do_syscall_64+0x33/0x40 [ 2232.336584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2232.337355] RIP: 0033:0x7f175bb3ab19 [ 2232.337912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.340650] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2232.341801] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2232.342857] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2232.343902] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2232.344962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.346032] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 [ 2232.365033] FAULT_INJECTION: forcing a failure. [ 2232.365033] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.366760] CPU: 1 PID: 11232 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2232.367789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2232.369013] Call Trace: [ 2232.369416] dump_stack+0x107/0x167 [ 2232.369951] should_fail.cold+0x5/0xa [ 2232.370514] ? io_setup_async_rw+0x180/0x580 [ 2232.371168] should_failslab+0x5/0x20 [ 2232.371727] __kmalloc+0x72/0x390 [ 2232.372245] io_setup_async_rw+0x180/0x580 [ 2232.372866] ? iov_iter_restore+0x195/0x3a0 [ 2232.373507] io_read+0x775/0x11e0 [ 2232.374022] ? __is_insn_slot_addr+0x14c/0x290 [ 2232.374699] ? kiocb_done+0xc90/0xc90 [ 2232.375259] ? mark_lock+0xf5/0x2df0 [ 2232.375819] ? lock_chain_count+0x20/0x20 [ 2232.376460] ? __lock_acquire+0xbb1/0x5b00 [ 2232.377089] io_issue_sqe+0x2e8a/0x77b0 [ 2232.377683] ? find_held_lock+0x2c/0x110 [ 2232.378284] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2232.379054] ? SOFTIRQ_verbose+0x10/0x10 [ 2232.379647] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2232.380339] ? lock_downgrade+0x6d0/0x6d0 [ 2232.380956] ? io_connect+0x610/0x610 [ 2232.381523] ? lock_acquire+0x197/0x470 [ 2232.382112] ? find_held_lock+0x2c/0x110 [ 2232.382712] ? __fget_files+0x2cf/0x520 [ 2232.383298] ? lock_downgrade+0x6d0/0x6d0 [ 2232.383913] __io_queue_sqe+0x90/0x9d0 [ 2232.384489] ? io_issue_sqe+0x77b0/0x77b0 [ 2232.385091] ? __fget_files+0x2f8/0x520 [ 2232.385681] ? __io_file_supports_nowait+0x22a/0x510 [ 2232.386431] ? io_prep_rw+0x7f5/0x1050 [ 2232.387008] io_submit_sqes+0x44aa/0x8610 [ 2232.387642] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2232.388372] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2232.389099] ? find_held_lock+0x2c/0x110 [ 2232.389716] ? io_submit_sqes+0x8610/0x8610 [ 2232.390358] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2232.391087] ? wait_for_completion_io+0x270/0x270 [ 2232.391800] ? rcu_read_lock_any_held+0x75/0xa0 [ 2232.392482] ? vfs_write+0x354/0xb10 [ 2232.393026] ? fput_many+0x2f/0x1a0 [ 2232.393563] ? ksys_write+0x1a9/0x260 [ 2232.394120] ? __ia32_sys_read+0xb0/0xb0 [ 2232.394725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.395502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2232.396272] do_syscall_64+0x33/0x40 [ 2232.396812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2232.397238] FAULT_INJECTION: forcing a failure. [ 2232.397238] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.397564] RIP: 0033:0x7f1e32d62b19 [ 2232.397589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.403453] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2232.404557] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2232.405606] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2232.406647] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2232.407683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.408721] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2232.409834] CPU: 0 PID: 11233 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2232.411636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2232.413744] Call Trace: [ 2232.414438] dump_stack+0x107/0x167 [ 2232.415389] should_fail.cold+0x5/0xa [ 2232.416388] ? create_object.isra.0+0x3a/0xa20 [ 2232.417399] should_failslab+0x5/0x20 [ 2232.418364] kmem_cache_alloc+0x5b/0x310 [ 2232.419414] create_object.isra.0+0x3a/0xa20 [ 2232.420375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2232.421716] kmem_cache_alloc_trace+0x151/0x320 [ 2232.422901] ? lock_downgrade+0x6d0/0x6d0 [ 2232.423868] __io_queue_sqe+0x666/0x9d0 [ 2232.424748] ? io_issue_sqe+0x77b0/0x77b0 [ 2232.425667] ? __fget_files+0x2f8/0x520 [ 2232.426539] ? __io_file_supports_nowait+0x22a/0x510 [ 2232.427663] ? io_prep_rw+0x7f5/0x1050 [ 2232.428539] io_submit_sqes+0x44aa/0x8610 [ 2232.429577] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2232.430676] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2232.431734] ? find_held_lock+0x2c/0x110 [ 2232.432647] ? io_submit_sqes+0x8610/0x8610 [ 2232.433748] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2232.434804] ? wait_for_completion_io+0x270/0x270 [ 2232.436089] ? rcu_read_lock_any_held+0x75/0xa0 [ 2232.437102] ? vfs_write+0x354/0xb10 [ 2232.437923] ? fput_many+0x2f/0x1a0 [ 2232.438722] ? ksys_write+0x1a9/0x260 [ 2232.439544] ? __ia32_sys_read+0xb0/0xb0 [ 2232.440424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.441576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2232.442715] do_syscall_64+0x33/0x40 [ 2232.443542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2232.444652] RIP: 0033:0x7fa33f43fb19 [ 2232.445480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.449480] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2232.451159] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2232.452686] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2232.454246] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2232.455807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.457376] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 02:59:48 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x4) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x4815, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x10000) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r5}}, 0x101) umount2(&(0x7f00000000c0)='./file0\x00', 0xd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r2, 0x0) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) fcntl$setlease(r0, 0x400, 0x3) r6 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r6, &(0x7f0000000200)='./file0\x00', 0x86) 02:59:48 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x0, 0x0, 0x0) 02:59:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000030000aaff02"], 0x0) 02:59:48 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ftruncate(r1, 0x800) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xd4, 0x46, 0x9, 0x81, 0x0, 0x1ff, 0x2000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x9, 0x8}, 0x8001, 0x20, 0x9, 0x6, 0xdf5, 0x400, 0x4, 0x0, 0x7, 0x0, 0x2e}, 0xffffffffffffffff, 0x5, r0, 0x3) 02:59:48 executing program 3: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)={'U+', 0x5}, 0x16, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000300)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') chown(&(0x7f0000000240)='./file2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file3\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) 02:59:48 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000050000aaff02"], 0x0) [ 2232.695615] loop3: detected capacity change from 0 to 41948160 02:59:48 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000640)='net/hci\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x81, 0x8, 0x9, 0x0, 0x7940, 0x82080, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x4, 0x5b9a, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000072dd60d0ff4700020600fe8000000000000000000000000000aaff1363c4323e99f55d0a5cfecdc83ee6751ca5de417509d110fe2ba86ecfafeb46e66401b78404e8d299f5970f62439208f1c0f470e21f28c37a3bf004a296bb982f396b8be0a039dd6d319957a4a29f396afcb9284bcb88850b3b0c3aea00fe18057464b74afb6d46f3264691831ed97ce7ca89c0306d3c94942d665eff87357fb129898896c876ef9681d4e5eac22528c7dc0877348d3ba0aef849a19acca0"], 0x0) 02:59:48 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 02:59:48 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) [ 2232.857644] FAULT_INJECTION: forcing a failure. [ 2232.857644] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.859064] CPU: 1 PID: 11261 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2232.859854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2232.860810] Call Trace: [ 2232.861123] dump_stack+0x107/0x167 [ 2232.861551] should_fail.cold+0x5/0xa [ 2232.862008] ? create_object.isra.0+0x3a/0xa20 [ 2232.862535] should_failslab+0x5/0x20 [ 2232.862972] kmem_cache_alloc+0x5b/0x310 [ 2232.863451] create_object.isra.0+0x3a/0xa20 [ 2232.863970] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2232.864568] kmem_cache_alloc_trace+0x151/0x320 [ 2232.865105] ? lock_downgrade+0x6d0/0x6d0 [ 2232.865603] __io_queue_sqe+0x666/0x9d0 [ 2232.866059] ? io_issue_sqe+0x77b0/0x77b0 [ 2232.866538] ? __fget_files+0x2f8/0x520 [ 2232.866997] ? __io_file_supports_nowait+0x22a/0x510 [ 2232.867577] ? io_prep_rw+0x7f5/0x1050 [ 2232.868028] io_submit_sqes+0x44aa/0x8610 [ 2232.868525] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2232.869093] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2232.869656] ? find_held_lock+0x2c/0x110 [ 2232.870153] ? io_submit_sqes+0x8610/0x8610 [ 2232.870657] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2232.871213] ? wait_for_completion_io+0x270/0x270 [ 2232.871768] ? rcu_read_lock_any_held+0x75/0xa0 [ 2232.872299] ? vfs_write+0x354/0xb10 [ 2232.872731] ? fput_many+0x2f/0x1a0 [ 2232.873145] ? ksys_write+0x1a9/0x260 [ 2232.873589] ? __ia32_sys_read+0xb0/0xb0 [ 2232.874054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.874653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2232.875243] do_syscall_64+0x33/0x40 [ 2232.875670] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2232.876258] RIP: 0033:0x7f175bb3ab19 [ 2232.876685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.878815] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2232.879693] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2232.880523] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2232.881341] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2232.882162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.882987] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 03:00:01 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 03:00:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000003c0000aaff02"], 0x0) 03:00:01 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 03:00:01 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 03:00:01 executing program 3: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000001b000000000000"], 0x18}}], 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000540)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfec4) r5 = perf_event_open(&(0x7f0000002340)={0x0, 0x80, 0x8, 0x0, 0x80, 0x8, 0x0, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0x7}, 0x40020, 0x9, 0x401, 0x7, 0x2, 0x72b90d92, 0xb1, 0x0, 0x5, 0x0, 0xfffffffffffffffb}, 0x0, 0xd, r4, 0x2) perf_event_open(&(0x7f00000022c0)={0x1, 0x80, 0x9f, 0x7, 0x4, 0x40, 0x0, 0x2, 0x4002, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x49, 0xc2c}, 0x8200, 0x0, 0x1, 0x7, 0xff, 0xce9, 0x3ff, 0x0, 0x3, 0x0, 0x8000}, 0x0, 0x1, r5, 0x2) fallocate(r3, 0x0, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000b00)={'ip6_vti0\x00', 0x0, 0x4, 0xaf, 0x0, 0x5, 0x10, @private2, @mcast1, 0x10, 0x10, 0x8}}) sendmmsg$inet6(r4, &(0x7f0000002200)=[{{&(0x7f00000009c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, 0x3}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="e8df0b05c512e82252a9db38ab6235b897ff475b2954c36855936964c41856b13c5133e00a7efcd9cd8b7e9ec481187ff0b0dd50afc98bf8578d7e28fca8fa643712b970139e5f77c0c2b63ebfd7c4b47cf6c17d4dd61199de7a7466aedf0e24cb06f6b74a4a573af33e9f7b1bb4edbf32b3a1735e85c0b4d2f2f834dc05d7eb09be908f9e61ae659829948ce73f3aeb", 0x90}], 0x1, &(0x7f0000003400)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000000}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x8, 0x8, '\x00', [@ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x100}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x40}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x60, 0x29, 0x32, {@private0}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r6}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x1, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x400}}, @dstopts={{0x88, 0x29, 0x37, {0x2c, 0xd, '\x00', [@ra={0x5, 0x2, 0x1f}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @generic={0x5, 0x48, "d95ebe106af8e26b7b9f73c25a5e28c6b10ae6c182912d033f62cbe389c323b2f4546d6db06fb1035a45d142674ea8301a53494b57e2c7bffafb8df07841067d844c5b9cfc814762"}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x101}}], 0x1d8}}, {{&(0x7f0000000dc0)={0xa, 0x4e24, 0x4, @local, 0x1}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000e00)="02affb2eaf95759f2ec3720c28fa91bf08e41f3a0fd05de17ac280c6aa9407af764917e5ce3cff4bc057b5f8e16c60b18a7005f735ccabc18e65143171aceed1ac1b9a5152b64b9cec2d33a426448243e19e65652017fda897b09817bf70cd11990d82e9559455efdfc66995f49970accc1b74532b39f53e7f8d4ee4a3dc39eec3ad25885ea7443aef93833fe7b4064e5893f18f348713d3d34d76d5e0638b180c9a79f9911565be5c5eb881de274dfb09b4d38f440437f9a8c73e818341793ccc85bbe98a66e8abcea28a7638bb65b52c", 0xd1}], 0x1, &(0x7f0000000f40)}}, {{&(0x7f00000010c0)={0xa, 0x4e24, 0x7, @private2, 0x5}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000001140)="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", 0x1000}], 0x1, &(0x7f00000023c0)=[@dstopts_2292={{0x1020, 0x29, 0x4, {0x3a, 0x200, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0x3, 0x1000, "79a2d35008bfa8637fd0eae156244e9464103e092309b993808371fbe05b0b00e446e457fcb5fef176bfc18884f1bd9c5d2f187a7af62b6dc43255d526669b80c6606aa64c67e9cc5e1eab78d20a9c327a6ae87f8e6cd31693ab7b5abd99c4fd25653e237e7132ee700948bce0a221e772bf31338125e19f790de552d8a442b50d5c3bd550db23ee3846c3a19125691b738b9e9d565bccf84f458470b7c04eb1459f73e057c618f639f30a3dc7f1229d5bdf297a521901ff399c520f35a1d04964d660f113414dbbb2121ddbab53111adb021e517b48e0a27d128e05460f05957d410ff05c5b778793c4f71781afa3b8f1336190d6d4f1239b4abc10a599546aace848a6274fae08c1e3837f721bf37812089b4f99454e8813cad18231727e74a01aced1bfcf049006c15aa627f9aff7e98b6c365c98b967db9bd8288386eedb5665f6230ec4cf3a84edd151de88b7be258fc1ddb42a19bfcd1ad54ea2810700837323b8fd9433ee53694b5f3a5a3ef99a581b171f3d3eb4c8c00e7765dae256aef92f37d71c175c03432ced3e398b2d75a295967132458e900198e3943f4ea7b874f294966bb10ee43518b5a69074dec42ad231b9a56ed89b086162db735e3ed970f97eda7c4bc192707e1b5713091e1af8d760376d91790669cab3f9d65079d340ba22d0df80883e94cb8d21e56be52cd994632fa2f8ec5f31b2f0f38f84944152be3fc544d3a99129c0fca32d02b6cb13240b10b99873c1c56bf8f5e66ebcff9b8940f1ed8533c0e874a894b52ca3f9ef96cfef6cde1432a4173163ede8fa0e490389b421ea666dbbd980c20b6285b0fdab0cd2514a86032a8ae2ae64b73161f8e0ca9d5d8d988fb7fc2b73f1156c10c27d47c2b727b471c5652bbb455b23407faf18cc1d2eb5738948926823764086c773a92d0389dc8f59195353daba528de049e1fe5affa4ad3b7a6bee3072c912a1f48101698144ba5f8fd64f6b8e9a43034d51a2ec93dee1e3c44105fd5ad1fe0ba47aa4bc1cc5ce78c357bf9ac9167a56cd273b5b5ccabfc90b5cd862f2c40471de117d9cd8cfcec204834d7097b0859fb9eb2a479932df6a6f7ae2152ce0746acc1059c6440c46e338f59d7377668d2c05384c5e754a86dea0174b060049bf1eec0489d28f03454feebbb89a4baae508dff22b66f371d929bb99e007a6d92e70d9d95ea54485b129cb7f1916750e6df9a3d35b815a0b6987aafdfda1dcca3afd487a0fece6a16361392d9ef265b586de943d17c6482e76cc6b8c246a3c45aeacb50bb086850a514cb2cc1857ffcca67ceb816dfc3d0eca61aaf7db0b98dfe24fbefd0c181accbe828a1dedf630f63d3659f2153558d5ae05bfc9318d6428f35f1b6d8ee1a05c9ff05a2a1be75309ca2d427b96bb181f08fb6501904bc73fb90fed3f5a81e9eccc58ac9f9c270aab38f706747c2eabbc05e778aa13c24e5bdb57d173909920343a41cd4aed415406506de8a78da488d77dc4ff9009a691925e648c3ca5ded77bb4519299ee9c7fd3897940bde40a5acd9711dc0fa123807884796c0e95245253a38c1aae28659ce72becaf9f1e314fd5ae72266ead1bcd41229104b48cf3f51bd1d57f9fe36c5edb65c33d3a67951fa689d809cee2cb955ea51cae83a9f5db7ad28efecf7a0c654b8eb236692c9aedf2c52bcc74d77adcb0ca5189bed3b88241385543585b923cfad8c2195b5a9ab1a984baaefe0e026241b9ba7d1ba93ce9c99a13317a0f8cb0a5a8a277e78abd9714e6e782c34e9128d9d03dd7707e2098a878214eb9db4a9d552002f1ec9a5a25962846c49bd00ff11d4d2c7908defe73651c94bdc715a25c925f29a9745f24780218ff82d24848135212f4e78d63a96a564f411cbf2ad3bd0ce82c8cc89802a89744bfad6bfce1608445678abe59bcda298f9b942a7f38d405183d6597562e5632bd1206fdc455451051f8fd0865623e96b9e768c4e224825a6d27c95113013e7bf971edcba6e4b51dfa52c7c70cf69864f67794c1682e757a67850fd9e99d67b4a38d27dfd720e693bb678b940f711f9e1c90aae58a4d894aaa6e24e53f2dc3ecc8e35341fa385c76f7203c2947413b140abde84cf074b8e8204df795e2f26a5f9606a055e54bd15f515dae276e0fc7e86098b39a1a4d5ece56bbbf456cbc2e6309231929c4742a7fa4de00fe04b427e419b363b19100052e53a61e8e3d36d3216bdb5eee557acb4ff17a963855008017f273299eba9b51de8055707e487cc87252b543ad0af212771cd66ce74a81ee74f0f15e4992078d987c4cdc07ec0578df100746a8ecce94af5de9b1f530776391738b5cf43e185c967e3aa08aadee3abb5ab977716a74b7e1befa646f2fea7cf2cd8b0bdc6726b73f973b0facd167c33075d38635e4e8a7f9f4d493a4fe3cf10a40be3c4f44740712806b06aac65f47ce1042ff5701588eacdcae22b0d8354894c2478337ad5814c239355ba3be67e7c5ed148ccb1785d25e05ced1a18bbe6c3dee94d61a624b975f1188c7dbc15b028d132c0c8b15f7fe2820e07992fdeffd67b84d7b75bc016e0242be3a5b98b65dab9fc8b172b4f442bee8d1c2c8ca27006e359c566d7b051f73f2686220f5ed1466fe74377730e275221b57c5ef9fe1254194a06e1ef7a847337a0dc206416f1817bbb48c2e598324dac5f554ba055f6b9573cece5c4a4960f3d9065d111aa8797c90f65da53d526b6e8b65c70333174589fd7778a24528809f0d4bc2fc71d782c1b17af608bdc8aafda721f96968ab9052cb0afd066db9eebf37596bead3556faf1c47bb01a58a84580a7e736c0d04f501b57806e27c83b2fcd4a60035b217b14206af122a1b63760e1401fc679957cbde3c81d5f5f98d003ae314a8bb3ff37210cb1573ad3a49de52c79c1dd74de1fa1f1dbe1297d99e42a89644c5b9c0c1dbc54b0b8f76ad187766237ee8829cd4ca68698714a1e66ddc620ce066a5bb35879675d5f23cb94c6471d1a190d030bdd574ffb20f52c58eb0ccdddb9d32abce442e64adc933932228ec127a0cc7ba685432ca1e661e2f5eb17880e48392f0d981d670d1bd23d71698526d6f3fb3119abf6bf0ba9417418f30ecc3fce41080fc8a973e40248395589f9c7679320c7e604c72b210c4890f4a6027498329e56fe18ba05a12b3ead401694ba9e94f9b6136e6e23a793cfa1901210393aa08215a47c050ba2dea7156336471f639152f202e097ece118b7a50d3a30d4924adcece5c8741b1c3b6badda187f40f77b9a6f730fdb3ce0765b821415b5fbdce47e33694b00a621d1513ef684b1e57b9f59eee09559d0dcf423dcfc2dbb19b7e21a7e98499b77cf5532c27b9cce230de81f2632773752a4bf0558750ab75fa997d522c334ae9a00b3e2449c3b7d0ac576e9a21a936fd7ce023863402246aab4dd5a47d1813f3fa7c911b13711d9a4943ad4ebaf048b673c73f3829f7898bbad08f34a02501bee02731c4f9b6b14c4489eb83f2a53e1e37ad5e1c2cdc8b19aa3880737c977807273f3f1d0d3424261c9d3e2f45da76fe6e286ffd3335f5425206fa6944dbb377d9971f794c856fac685bae3c399fd1bdc733d0309ad7d372bcb9368707a3efbbf8c5194942fbd04a2f428e167a5faf534cafca2473cc60be4e7a628cfb66df1afb8a090a43a69a66dd313b54e82c95658369ff9296a1641fc457efa7b59f4b5c4d1ff95da145d0f0b398e5bbfeb562d63851ea4cb927f3aff6d999c1e5d6373e8a9ef92a9f66a373121770ca33265268a7b2a217c38c6b4e1571102e5bfd6f81080c57d19eac6847e893cf727848817d7b0f1e7788f0d32a7ab0e868844187bd8c6604f8848e695a2c4ba0c0f1769a0071ef79f753aa838f27e1bb975237d4a3cc01e0f23e54c99e94b7003bdcd1c943268e5e6e7cbfada50aa0302e08c7b1e7d02b4c4614cc8763b191ba0b040347a3316dae60087d7133a84d6b2f39c33710fdebb665883a7449ecefc6b4e75316a2ccbd4f2993a32219ce5828fdf805ff0966ff999e26dc1709a79e16c4c2e2491a943784220b64a92e10e553969ca97c50936eda56c6fb135b58da8610d6bf1d1a6dd99a4a3044531a146166b41786f71399ef0cc8ee401c0327af7f90f1e38a0646f0571b6cfac560415afba75fe431b485bdc6927f0eaac2070b0fff37b19b7c504b4926937a5d04c50a3ab9f61200fd72ce3b453054d20408fca24b8ff7b6b1097dbc8c48300464f3aa9dccf33b5f3a0cb014c3ba0b7b30e6957bdc4088345183ef8714f562bf74eb6a5b7e53f0c5c4bfb7a971e09a5af6e8b7efea1f517d25af0f64763e9d57423341c65b3106c227ca6332a817b9c9b5bc94d15ed477e26ebd5c08e34214531f826c62434c605b3de20bda5c5eb8c93fb70c876ed86f046e32d5fdcdd31b1f6910a2075a9f765922b1b3b1d1a87b111289bf228c356d664383649e752e996ecf148e628eb3c67b16df8722dc45018f825da377e113c7d943c363137f944eff6b7d893b7bf7d1fe85904ffa9ac20760a2927caee4d3f549b51d854f5d34e42e6f19f7b3c59f820de89c4aa9ea6c636a109cabc5396f58e8394f5c1bf56d2404c8dda1bd8821c735415002a85bf2eba3177c6474d1f346a407edafc7d750265990a1f7c3d7d9af0a3c5ddbc126c05eaaa808badcd4c7d46d41d3dd2f3162b3c4d5a7d120732ca60f0a8bb308e804a8f8848dd401b7d1cb073416445a86539a49f096782b2395a91aaf6f9e4f46380bb2e8d683a73f1416a382cb407a571c0b5dd4e0e73b90358a57d59a7f1c11995b7fd0fbcbad0c5ee6198b906013ba4e19aeb95ff5ee5b4f6d7e642f3ac927afa2e35abedb4349e2c96947d42eb1b580681a5ddb86a170e613d13f435d02395cac58a709944dfe5e40ec92bd147206fe6c367188e6124a8d4f45dd23f8dc1658473f864aa0078984bd9c7bc13694d92ec07e7f710360ddbf666c81295b2509368a272b785d32af6babcd7b32a71e1455b84ce471770bd4b524fb29c4b34147e5fae8619bb1f6fa88742b5b88a60154a01e6270b24274d3e6c8d2e00f0f23608634b8cdd14a1caf6be358188748405018090cec2e2ba1f5f3310513e42a081592ceca2f8512546bacc9fa9e9ff7b244a9f7809d523102fb30d9da623a74b25af17602468ccfd25ae1b3b006e5fef55baff19db211c126de13210de4eec3092b7317cf6b4d3153c3d332db3bc0371d0c3b03c166c7211e8fa93d074b53af8b106e4aa8d16a62f47adfeb810315402ad6557c15694911eeec74b8639d466ee61a810f7ec030ab7248b8f493c841c26d0ab0c7175415ac2ebb50ffd37c02e313dadbbd42dc22e9e474a598aa2fe53cdbb95836f5a5b4b4d9298169315ecb2c42e01cb65adf601f5cdfc9ffd918af1411752b136a02584e76967d955dc8a531916eb80a2eff1c787be32bcf01213d2b0591848bfd956f8fd23e77a125a81b30a3323cbb208850a3fc943c9739f3c3ac02583beb5f6c2749e92e1bb6065779601d73a2539f88582f06c9d09d1aae406aa6140eb64ba917ac42fe00f1be3cbaede6fa03a7752b871379f8a91b552429494a5cc5bc0766e37954e86dede14bda0f7e5517eeeb97ea6f6133a54dc0d38ccd06a71bcb1e88b8a5f2290437c01c823152c431d44c1134f71d4dd38e44f3fe5a2834342fc9deb51f07c2b53658c3020bea1cac9321d62f59f61184ba47a8abb4999342f51b1d62c45acb8776d8ee8de7763865b1defe3902b3386a6dfcee723d32414c5327e3"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000000}}], 0x1038}}], 0x3, 0x8034) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x1, 0x10000}) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2877929153905d3415abbf844fb38f62a35375a6651e47e7879bf6ce98bd4c492efd3b24d8e662cde9e58516319c45eb56b34042da9a112e12f5ae0c48bab9d62a9445e5d990ed9351e974fc15511e76f80421ff9d978e", 0x57}], 0x1, &(0x7f00000001c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xa954}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000000}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}], 0x48}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x4, @loopback, 0x1ff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000240)="e23dcc570f832fe84176bc52bf947653af251334cb7e68cf74a9ca4bec3b1a9334b10a3ad7b4ec144484891bd6b777224805bdf257eaa00c902ad230b54d30d2ff9601f0dc0663db4e1a6bca5b8b03959f654709c39611347ea49be34bdd82648e853c4b4d19ee8822b5a952f0a770", 0x6f}, {&(0x7f0000000580)="aca8c2c6c5d9be49a219fdbb8d46dfad126aa74917cc6d88805675f93eb8fc2efd6f53f57884abdc50dfdfedfb8a0e948a1d99538f6f97ba41e14313a8b5822ad42a2f83bda863fe65958a1384ecb2ba1de45d8f931123a88aa89d42b1a513aa48a912fdbb6cd4041d05ff65a72b1d6b7c57b4654b1abad5bb31328f06c2582992c63827387a45cc6ed4bf58cb94f3e3f5980769b02eee4866745bd773d2b4fec1572f4b33c297c89f", 0xa9}, {&(0x7f00000002c0)="be3791f9068f", 0x6}, {&(0x7f0000000640)="b5b5529f54b011e27be98e0efe91a66d9c2fa0a8d0ecd9ee41735e7ee5a4be3faa5cdcedde6023792a2f3c0d9ea1e95bae4209ece9a34e36dedcd56cc76df9d87a621c81d21b5f8df0c1c07a36033a43ce4ef1b4905a23c88efbc96196784cd1a72633dbb59bbf41a9367ed37c68560ea88aa07b09248542793ce07d84b107e0f546ee14c8407c", 0x87}, {&(0x7f0000000400)="702d7535222073ca2bd79abf70fe931e8e56", 0x12}], 0x5, &(0x7f0000000780)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts={{0x138, 0x29, 0x37, {0x29, 0x23, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x13, 0x20, [0x1f, 0x7fff, 0xffffffffffffff1a, 0xd5a]}}, @jumbo={0xc2, 0x4, 0xfffffff8}, @generic={0x9, 0xe7, "b507d8dcad9ccbc39caf95087f36f9c5454c6fe7061d3850346d325f2e56b8a6000cd763652db7fe298028a960edbcc94c3d887ba95ad3452453bff0f383371c4b1822cf79e1b9a17aecef45eedae0242d935c67fc931d21d1d29c25ff5cab7e19a1e604ef0a3746d5c84c242c686e0e35f3c1a1cbfa51eaf04e8853d80d8a48d1451194b9bbb981185962d2f9649102cb92413f386fb082cb315cc2f66ad694271ae1de83e9411bc33c5f9ae2d260a5c2e0b2e44fbc7a8e23aa4228747dc7413094c63ccb3618c6816d580b899f2b0163ecae788213dabe24a18face60a7bb7fd01fd63f2368d"}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3d, 0x6, 0x1, 0x80, 0x0, [@empty, @loopback, @private0]}}}], 0x198}}], 0x2, 0x24004000) r7 = syz_io_uring_complete(0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r7, &(0x7f0000000440), &(0x7f0000000300)='./file0\x00', 0x8, 0x0, 0x1}, 0x3) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2007, @fd_index=0x9, 0x6, 0x0, 0x8, 0x1, 0x1, {0x1}}, 0x9f) 03:00:01 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 03:00:01 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff40fcce236ce16cfea5f7c5455164ea665a671ee7b3a04aec8e913b82875e42c7ff99454fb93132fe7cff4c4ff0c9bebdc327ff54b466cd3392d8f5253a98655bcfdfe492acb0702e06e4b81bdd74adc42bb7e043fdeee3d583baacb9566d2e092730867e243b022b39e09d36e8650b5eaaf57a04ea38e279af13b2c03ad72e4c25556859a49f435557376f664b47477934"], 0x0) 03:00:01 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24000000, 0x0, 0x0, 0x0) [ 2246.354310] FAULT_INJECTION: forcing a failure. [ 2246.354310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2246.355376] FAULT_INJECTION: forcing a failure. [ 2246.355376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2246.357168] CPU: 0 PID: 11280 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2246.360840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.362643] Call Trace: [ 2246.363231] dump_stack+0x107/0x167 [ 2246.364043] should_fail.cold+0x5/0xa [ 2246.364891] _copy_from_user+0x2e/0x1b0 [ 2246.365777] iovec_from_user+0x141/0x400 [ 2246.366680] __import_iovec+0x67/0x590 [ 2246.367541] ? SOFTIRQ_verbose+0x10/0x10 [ 2246.368455] io_import_iovec+0x581/0x1120 [ 2246.369357] ? io_complete_rw+0x230/0x230 [ 2246.370265] ? lock_downgrade+0x6d0/0x6d0 [ 2246.371162] ? mark_lock+0xf5/0x2df0 [ 2246.371978] io_read+0xe14/0x11e0 [ 2246.372730] ? lock_chain_count+0x20/0x20 [ 2246.373622] ? __is_insn_slot_addr+0x14c/0x290 [ 2246.374635] ? __lock_acquire+0x1657/0x5b00 [ 2246.375596] ? kiocb_done+0xc90/0xc90 [ 2246.376434] ? mark_lock+0xf5/0x2df0 [ 2246.377267] ? lock_chain_count+0x20/0x20 [ 2246.378201] ? __lock_acquire+0x1657/0x5b00 [ 2246.379181] ? __lock_acquire+0xbb1/0x5b00 [ 2246.380119] io_issue_sqe+0x2e8a/0x77b0 [ 2246.380985] ? find_held_lock+0x2c/0x110 [ 2246.381891] ? perf_trace_lock+0xac/0x490 [ 2246.382799] ? SOFTIRQ_verbose+0x10/0x10 [ 2246.383707] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2246.384751] ? io_connect+0x610/0x610 [ 2246.385610] ? lock_acquire+0x197/0x470 [ 2246.386487] ? find_held_lock+0x2c/0x110 [ 2246.387381] ? __fget_files+0x2cf/0x520 [ 2246.388251] ? lock_downgrade+0x6d0/0x6d0 [ 2246.389173] __io_queue_sqe+0x90/0x9d0 [ 2246.390044] ? io_issue_sqe+0x77b0/0x77b0 [ 2246.390946] ? __fget_files+0x2f8/0x520 [ 2246.391808] ? __io_file_supports_nowait+0x22a/0x510 [ 2246.392908] ? io_prep_rw+0x7f5/0x1050 [ 2246.393760] io_submit_sqes+0x44aa/0x8610 [ 2246.394712] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2246.395813] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2246.396885] ? find_held_lock+0x2c/0x110 [ 2246.397796] ? io_submit_sqes+0x8610/0x8610 [ 2246.398754] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.399825] ? wait_for_completion_io+0x270/0x270 [ 2246.400900] ? rcu_read_lock_any_held+0x75/0xa0 [ 2246.401933] ? vfs_write+0x354/0xb10 [ 2246.402730] ? fput_many+0x2f/0x1a0 [ 2246.403520] ? ksys_write+0x1a9/0x260 [ 2246.404330] ? __ia32_sys_read+0xb0/0xb0 [ 2246.405234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.406371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.407490] do_syscall_64+0x33/0x40 [ 2246.408288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2246.409368] RIP: 0033:0x7fa33f43fb19 [ 2246.410201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.414193] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2246.415823] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2246.417364] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2246.418906] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.420447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.421992] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2246.423584] CPU: 1 PID: 11277 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2246.425183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.427078] Call Trace: [ 2246.427682] dump_stack+0x107/0x167 [ 2246.428524] should_fail.cold+0x5/0xa [ 2246.429408] _copy_from_user+0x2e/0x1b0 [ 2246.430325] iovec_from_user+0x141/0x400 [ 2246.431272] __import_iovec+0x67/0x590 [ 2246.432152] ? SOFTIRQ_verbose+0x10/0x10 [ 2246.433096] io_import_iovec+0x581/0x1120 [ 2246.434068] ? io_complete_rw+0x230/0x230 [ 2246.435022] ? lock_downgrade+0x6d0/0x6d0 [ 2246.435980] ? mark_lock+0xf5/0x2df0 [ 2246.436859] io_read+0xe14/0x11e0 [ 2246.437664] ? lock_chain_count+0x20/0x20 [ 2246.438614] ? __is_insn_slot_addr+0x14c/0x290 [ 2246.439691] ? __lock_acquire+0x1657/0x5b00 [ 2246.440705] ? kiocb_done+0xc90/0xc90 [ 2246.441585] ? mark_lock+0xf5/0x2df0 [ 2246.442453] ? lock_chain_count+0x20/0x20 [ 2246.443421] ? __lock_acquire+0x1657/0x5b00 [ 2246.444451] ? __lock_acquire+0xbb1/0x5b00 [ 2246.445443] io_issue_sqe+0x2e8a/0x77b0 [ 2246.446383] ? find_held_lock+0x2c/0x110 [ 2246.447324] ? perf_trace_lock+0xac/0x490 [ 2246.448283] ? SOFTIRQ_verbose+0x10/0x10 [ 2246.449236] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2246.450357] ? io_connect+0x610/0x610 [ 2246.451247] ? lock_acquire+0x197/0x470 [ 2246.452186] ? find_held_lock+0x2c/0x110 [ 2246.453140] ? __fget_files+0x2cf/0x520 [ 2246.454082] ? lock_downgrade+0x6d0/0x6d0 [ 2246.455059] __io_queue_sqe+0x90/0x9d0 [ 2246.455974] ? io_issue_sqe+0x77b0/0x77b0 [ 2246.456938] ? __fget_files+0x2f8/0x520 [ 2246.457892] ? __io_file_supports_nowait+0x22a/0x510 [ 2246.459087] ? io_prep_rw+0x7f5/0x1050 [ 2246.460021] io_submit_sqes+0x44aa/0x8610 [ 2246.461053] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2246.462265] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2246.463377] ? find_held_lock+0x2c/0x110 [ 2246.464301] ? io_submit_sqes+0x8610/0x8610 [ 2246.465357] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.466532] ? wait_for_completion_io+0x270/0x270 [ 2246.467632] ? rcu_read_lock_any_held+0x75/0xa0 [ 2246.468718] ? vfs_write+0x354/0xb10 [ 2246.469613] ? fput_many+0x2f/0x1a0 [ 2246.470491] ? ksys_write+0x1a9/0x260 [ 2246.471371] ? __ia32_sys_read+0xb0/0xb0 [ 2246.472300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.473588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.474856] do_syscall_64+0x33/0x40 [ 2246.475760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2246.477002] RIP: 0033:0x7f175bb3ab19 [ 2246.477914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.482006] RSP: 002b:00007f17590b0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2246.483612] RAX: ffffffffffffffda RBX: 00007f175bc4df60 RCX: 00007f175bb3ab19 [ 2246.485135] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2246.486653] RBP: 00007f17590b01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.488177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.489698] R13: 00007ffe6763adcf R14: 00007f17590b0300 R15: 0000000000022000 03:00:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000400000aaff02"], 0x0) [ 2246.501417] FAULT_INJECTION: forcing a failure. [ 2246.501417] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.503874] CPU: 1 PID: 11285 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2246.505342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.507110] Call Trace: [ 2246.507706] dump_stack+0x107/0x167 [ 2246.508478] should_fail.cold+0x5/0xa [ 2246.509290] ? create_object.isra.0+0x3a/0xa20 [ 2246.510282] should_failslab+0x5/0x20 [ 2246.511091] kmem_cache_alloc+0x5b/0x310 [ 2246.511966] create_object.isra.0+0x3a/0xa20 [ 2246.512888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.513983] __kmalloc+0x16e/0x390 [ 2246.514742] io_setup_async_rw+0x180/0x580 [ 2246.515627] ? iov_iter_restore+0x195/0x3a0 [ 2246.516529] io_read+0x775/0x11e0 [ 2246.517264] ? __is_insn_slot_addr+0x14c/0x290 [ 2246.518229] ? kiocb_done+0xc90/0xc90 [ 2246.519017] ? mark_lock+0xf5/0x2df0 [ 2246.519804] ? lock_chain_count+0x20/0x20 [ 2246.520707] ? __lock_acquire+0xbb1/0x5b00 [ 2246.521621] io_issue_sqe+0x2e8a/0x77b0 [ 2246.522464] ? find_held_lock+0x2c/0x110 [ 2246.523319] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2246.524415] ? SOFTIRQ_verbose+0x10/0x10 [ 2246.525277] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2246.526291] ? lock_downgrade+0x6d0/0x6d0 [ 2246.527158] ? io_connect+0x610/0x610 [ 2246.527975] ? lock_acquire+0x197/0x470 [ 2246.528811] ? find_held_lock+0x2c/0x110 [ 2246.529682] ? __fget_files+0x2cf/0x520 [ 2246.530524] ? lock_downgrade+0x6d0/0x6d0 [ 2246.531407] __io_queue_sqe+0x90/0x9d0 [ 2246.532241] ? io_issue_sqe+0x77b0/0x77b0 [ 2246.533116] ? __fget_files+0x2f8/0x520 [ 2246.533964] ? __io_file_supports_nowait+0x22a/0x510 [ 2246.535034] ? io_prep_rw+0x7f5/0x1050 [ 2246.535880] io_submit_sqes+0x44aa/0x8610 [ 2246.536794] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2246.537846] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2246.538868] ? find_held_lock+0x2c/0x110 [ 2246.539785] ? io_submit_sqes+0x8610/0x8610 [ 2246.540801] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.541961] ? wait_for_completion_io+0x270/0x270 [ 2246.543111] ? rcu_read_lock_any_held+0x75/0xa0 [ 2246.544089] ? vfs_write+0x354/0xb10 [ 2246.544883] ? fput_many+0x2f/0x1a0 [ 2246.545668] ? ksys_write+0x1a9/0x260 [ 2246.546529] ? __ia32_sys_read+0xb0/0xb0 [ 2246.547503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.548684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.549787] do_syscall_64+0x33/0x40 [ 2246.550615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2246.551741] RIP: 0033:0x7f1e32d62b19 [ 2246.552535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.556472] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2246.558096] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2246.559606] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2246.561102] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.562621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.564147] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:00:02 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 03:00:02 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff47000206002aaa40d217e432d1c5885dfe80395820980800a71ab93ca3"], 0x0) 03:00:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000600000aaff02"], 0x0) 03:00:02 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB=')\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r2, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x8054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 03:00:02 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x49, 0xf9, 0x2, 0x4, 0x0, 0x10000, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x20, 0xffffffffffffffff, 0x80000000, 0x9, 0x100000001, 0x5, 0x3ff, 0x0, 0x20, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0xa) creat(&(0x7f0000000100)='./file0\x00', 0x34) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:00:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000fffffff50000aaff02"], 0x0) [ 2246.865116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:00:02 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) [ 2246.925783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2246.927890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2246.929978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2246.963308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2247.018327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2247.020056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2247.022267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 03:00:02 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 03:00:02 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 2247.128223] FAULT_INJECTION: forcing a failure. [ 2247.128223] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.130998] CPU: 0 PID: 11325 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2247.132483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.134260] Call Trace: [ 2247.134828] dump_stack+0x107/0x167 [ 2247.135610] should_fail.cold+0x5/0xa [ 2247.136436] ? __io_queue_sqe+0x666/0x9d0 [ 2247.137318] should_failslab+0x5/0x20 [ 2247.138144] kmem_cache_alloc_trace+0x55/0x320 [ 2247.139124] ? lock_downgrade+0x6d0/0x6d0 [ 2247.140024] __io_queue_sqe+0x666/0x9d0 [ 2247.140887] ? io_issue_sqe+0x77b0/0x77b0 [ 2247.141767] ? __fget_files+0x2f8/0x520 [ 2247.142603] ? __io_file_supports_nowait+0x22a/0x510 [ 2247.143680] ? io_prep_rw+0x7f5/0x1050 [ 2247.144514] io_submit_sqes+0x44aa/0x8610 [ 2247.145421] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2247.146483] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2247.147523] ? find_held_lock+0x2c/0x110 [ 2247.148379] ? io_submit_sqes+0x8610/0x8610 [ 2247.149297] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2247.150307] ? wait_for_completion_io+0x270/0x270 [ 2247.151314] ? rcu_read_lock_any_held+0x75/0xa0 [ 2247.152299] ? vfs_write+0x354/0xb10 [ 2247.153104] ? fput_many+0x2f/0x1a0 [ 2247.153904] ? ksys_write+0x1a9/0x260 [ 2247.154711] ? __ia32_sys_read+0xb0/0xb0 [ 2247.155571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2247.156679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.157780] do_syscall_64+0x33/0x40 [ 2247.158570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2247.159648] RIP: 0033:0x7f1e32d62b19 [ 2247.160431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.164280] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2247.165896] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2247.167392] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2247.168893] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2247.170402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2247.171919] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:00:17 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 03:00:17 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x30e0, 0x0, 0x0, 0x313}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = signalfd4(r0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x8, 0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x13, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r4}}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r6, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x1, 0x10000}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000140)='./file0\x00', 0x128, 0x20040, 0x12345, {0x0, r8}}, 0xffffffff) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r9, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r10, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:00:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000f5ffffff0000aaff02"], 0x0) 03:00:17 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0xee00, r0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x42a08}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000d2d100000000000000"], 0x0) syz_emit_ethernet(0x47, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x1b, "3fb9e0813119b4df53cbee72398161a29f70a96dde6d1b864c1d1499185464ce2d48a93cffffea345bf011021dbc4b4194ae29491b"}}}, &(0x7f0000000080)={0x0, 0x4, [0xa86, 0xb9a, 0xd63, 0x8bb]}) 03:00:17 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 03:00:17 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 03:00:17 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e, 0x0, 0x0, 0x0) 03:00:17 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2261.816104] FAULT_INJECTION: forcing a failure. [ 2261.816104] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.818687] CPU: 1 PID: 11346 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2261.820187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.821996] Call Trace: [ 2261.822568] dump_stack+0x107/0x167 [ 2261.823349] should_fail.cold+0x5/0xa [ 2261.824187] ? io_setup_async_rw+0x180/0x580 [ 2261.825140] should_failslab+0x5/0x20 [ 2261.825990] __kmalloc+0x72/0x390 [ 2261.826747] io_setup_async_rw+0x180/0x580 [ 2261.827658] ? iov_iter_restore+0x195/0x3a0 [ 2261.828582] io_read+0x775/0x11e0 [ 2261.829338] ? __is_insn_slot_addr+0x14c/0x290 [ 2261.830352] ? kiocb_done+0xc90/0xc90 [ 2261.831196] ? mark_lock+0xf5/0x2df0 [ 2261.832028] ? lock_chain_count+0x20/0x20 [ 2261.832964] ? __lock_acquire+0xbb1/0x5b00 [ 2261.833958] io_issue_sqe+0x2e8a/0x77b0 [ 2261.834874] ? find_held_lock+0x2c/0x110 [ 2261.835839] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2261.837023] ? SOFTIRQ_verbose+0x10/0x10 [ 2261.837915] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2261.838949] ? lock_downgrade+0x6d0/0x6d0 [ 2261.839843] ? io_connect+0x610/0x610 [ 2261.840674] ? lock_acquire+0x197/0x470 [ 2261.841515] ? find_held_lock+0x2c/0x110 [ 2261.842422] ? __fget_files+0x2cf/0x520 [ 2261.843289] ? lock_downgrade+0x6d0/0x6d0 [ 2261.844189] __io_queue_sqe+0x90/0x9d0 [ 2261.845041] ? io_issue_sqe+0x77b0/0x77b0 [ 2261.845947] ? __fget_files+0x2f8/0x520 [ 2261.846814] ? __io_file_supports_nowait+0x22a/0x510 [ 2261.847900] ? io_prep_rw+0x7f5/0x1050 [ 2261.848739] io_submit_sqes+0x44aa/0x8610 [ 2261.849686] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2261.850792] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2261.851842] ? find_held_lock+0x2c/0x110 [ 2261.852717] ? io_submit_sqes+0x8610/0x8610 [ 2261.853666] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2261.854711] ? wait_for_completion_io+0x270/0x270 [ 2261.855751] ? rcu_read_lock_any_held+0x75/0xa0 [ 2261.856755] ? vfs_write+0x354/0xb10 [ 2261.857558] ? fput_many+0x2f/0x1a0 [ 2261.858371] ? ksys_write+0x1a9/0x260 [ 2261.859206] ? __ia32_sys_read+0xb0/0xb0 [ 2261.860107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.861225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.862352] do_syscall_64+0x33/0x40 [ 2261.863155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2261.864257] RIP: 0033:0x7fa33f43fb19 [ 2261.865063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.869005] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2261.870663] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2261.872212] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2261.873761] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.875276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2261.876836] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 [ 2261.901319] FAULT_INJECTION: forcing a failure. [ 2261.901319] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.903906] CPU: 0 PID: 11352 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2261.905442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.907244] Call Trace: [ 2261.907813] dump_stack+0x107/0x167 [ 2261.908612] should_fail.cold+0x5/0xa [ 2261.909428] ? create_object.isra.0+0x3a/0xa20 [ 2261.910422] should_failslab+0x5/0x20 [ 2261.911241] kmem_cache_alloc+0x5b/0x310 [ 2261.912125] create_object.isra.0+0x3a/0xa20 [ 2261.913087] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2261.914218] kmem_cache_alloc_trace+0x151/0x320 [ 2261.915238] ? lock_downgrade+0x6d0/0x6d0 [ 2261.916156] __io_queue_sqe+0x666/0x9d0 [ 2261.917039] ? io_issue_sqe+0x77b0/0x77b0 [ 2261.917982] ? __fget_files+0x2f8/0x520 [ 2261.918857] ? __io_file_supports_nowait+0x22a/0x510 [ 2261.919967] ? io_prep_rw+0x7f5/0x1050 [ 2261.920832] io_submit_sqes+0x44aa/0x8610 [ 2261.921769] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2261.922864] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2261.923927] ? find_held_lock+0x2c/0x110 [ 2261.924821] ? io_submit_sqes+0x8610/0x8610 [ 2261.925776] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2261.926832] ? wait_for_completion_io+0x270/0x270 [ 2261.927869] ? rcu_read_lock_any_held+0x75/0xa0 [ 2261.928886] ? vfs_write+0x354/0xb10 [ 2261.929706] ? fput_many+0x2f/0x1a0 [ 2261.930500] ? ksys_write+0x1a9/0x260 [ 2261.931335] ? __ia32_sys_read+0xb0/0xb0 [ 2261.932229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.933375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.934512] do_syscall_64+0x33/0x40 [ 2261.935360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2261.936720] RIP: 0033:0x7f1e32d62b19 [ 2261.937513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.941474] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2261.943135] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2261.944687] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2261.946258] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.947814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2261.949373] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:00:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0xfe, 0x80, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffe}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd5d, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x4a1a, 0x3, 0x7ff, 0x9, 0x0, 0x401, 0x6, 0x0, 0x95f, 0x0, 0x25eb}, 0xffffffffffffffff, 0x3, r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000fffffffffffffff500000002aa0e"], 0x0) syz_emit_ethernet(0x51, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@mpls_mc={0x8848, {[{0x5}, {0x7, 0x0, 0x1}, {0x7}, {0x81, 0x0, 0x1}, {0xff}, {0x3ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x80}], @llc={@llc={0x6, 0xd4, '~', "24c6ca05f5da61554e2f0c8be0897230b2441e44bed9d332539390949197cbc2"}}}}}}, &(0x7f00000001c0)={0x1, 0x2, [0x933, 0x6a0, 0x2db, 0xb10]}) syz_emit_ethernet(0x21, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@snap={0xff, 0xaa, "bae5", "d10de1", 0x6000, "8271ab2f9a0657ad5058"}}}}}, &(0x7f0000000240)={0x0, 0x2, [0xd06, 0x755, 0x1a1, 0x541]}) 03:00:17 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) syz_emit_ethernet(0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200ea028100190000ee50a76444c7021c9dcb80f4ab99f864f2f8127963297bac77db334d0631"], &(0x7f0000000080)={0x0, 0x4, [0x2cc, 0x919, 0xeb, 0x1db]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x2b, 0x1, 0x8, 0x0, 0x0, 0x511, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x55d1f55b, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x4204, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xf, r0, 0x2) 03:00:17 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) 03:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001400)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newae={0x70, 0x1e, 0x400, 0x70bd2c, 0x25dfdbff, {{@in6=@mcast1, 0x4d6, 0x2, 0xff}, @in6=@mcast2, 0x7, 0x3502}, [@proto={0x5}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2c, 0x70bd25, 0x70bd25, 0x70bd26, 0x112a, [0x1a, 0x7, 0x870]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) 03:00:17 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f00000015c0)={0x204020000, &(0x7f0000000400), &(0x7f00000004c0), &(0x7f0000000500), {0x8}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/21, &(0x7f0000001580)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x1f, 0x4, 0x0, 0x9, 0x40, 0xe, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x1000, 0x7f, 0xe0b, 0x3, 0xdb82, 0xfff, 0x1, 0x0, 0x5, 0x0, 0x7f}, r1, 0x0, r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_emit_ethernet(0xb8, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@llc={0xfe, 0x4, "b213", "09f93b1deb4645ccae56d618c71c03e85c1f89ca7625b62cefedc1759d9288d0021f93d1482638744b922c005a59e64fafe7075df03bc01fe6e51038ce61f0ea4866572b9923f4e49c156d779574f5ba86cee036b198eb0b588b08a9123df146d32e65ad3463059882819e8b79e359cb67eb397f20e84cb8fbfb6f92a6d57556993b3c2dfb85d31f1013ccc8f36341ea42a431d982812870807279192a214136c2ee76a60651"}}}}}, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r2, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x1, 0x10000}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x110, 0x30, 0x100, 0x70bd26, 0x25dfdbfd, {0x7}, [@nested={0xc, 0x75, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @uid=r4}]}, @nested={0xee, 0x56, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@remote}, @typed={0xb, 0x62, 0x0, 0x0, @str='{+@}(#\x00'}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="1cf72d6002a92d5335c5207259220336f2867d32ff214d0724fcae8685d9b38e6bcb589b0ddfb88b29836a2dcfab24ae47f8cdc3e853398c0b62d7a61cd245a95c5b263411cdeec06294fb387923e1bd478a88420b5cd0765644c25e1a98f389206ce859baa3db3a05ce349a100a95e37e5ac566746b7e0513d8645e2ca30fd62815709ea30e4aae6bdc37a111e2b47da3777c81b9288a9e463cbb88971c32da83d2e527de4d73ac1ee7de925e390139582c", @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x7c, 0x0, 0x0, @uid}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 03:00:17 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000300000000aaff02"], 0x0) [ 2262.234954] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2262.254662] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 03:00:31 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 03:00:31 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e000000, 0x0, 0x0, 0x0) 03:00:31 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 03:00:31 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:00:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000500000000aaff02"], 0x0) 03:00:31 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 03:00:31 executing program 3: unshare(0x22000c80) unshare(0x8010000) r0 = semget$private(0x0, 0x0, 0x10) semop(r0, &(0x7f00000000c0)=[{0x4, 0x4, 0x1000}, {0x3, 0xdc, 0x1000}, {0x4, 0x9, 0x1800}, {0x1, 0x8}, {0x2, 0x200}, {0x0, 0x8, 0x1000}, {0x1, 0x7, 0x1000}], 0x7) r1 = semget$private(0x0, 0x6, 0x20) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000180)=""/4096) semctl$IPC_SET(r0, 0x0, 0x1, 0x0) r2 = semget(0x1, 0x2, 0x60) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000000)=""/140) clock_gettime(0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x4010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x48020200) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x80500, 0x8) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfec4) unshare(0x8040200) fallocate(r3, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x1, 0x10000}) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x82, 0x0, 0x5, 0x80, 0x0, 0x1, 0x4, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000100), 0x6}, 0x40048, 0x80, 0x3, 0x0, 0x1, 0x1, 0x1fc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, r4, 0x0) unshare(0x20010000) 03:00:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) [ 2275.768523] FAULT_INJECTION: forcing a failure. [ 2275.768523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2275.771129] CPU: 1 PID: 11393 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2275.772592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.774341] Call Trace: [ 2275.774903] dump_stack+0x107/0x167 [ 2275.775675] should_fail.cold+0x5/0xa [ 2275.776484] _copy_from_user+0x2e/0x1b0 [ 2275.777325] iovec_from_user+0x141/0x400 [ 2275.778199] __import_iovec+0x67/0x590 [ 2275.779022] ? SOFTIRQ_verbose+0x10/0x10 [ 2275.779896] io_import_iovec+0x581/0x1120 [ 2275.780782] ? io_complete_rw+0x230/0x230 [ 2275.781656] ? lock_downgrade+0x6d0/0x6d0 [ 2275.782545] ? mark_lock+0xf5/0x2df0 [ 2275.783335] io_read+0xe14/0x11e0 [ 2275.784068] ? lock_chain_count+0x20/0x20 [ 2275.784948] ? __is_insn_slot_addr+0x14c/0x290 [ 2275.785934] ? __lock_acquire+0x1657/0x5b00 [ 2275.786843] ? kiocb_done+0xc90/0xc90 [ 2275.787657] ? mark_lock+0xf5/0x2df0 [ 2275.788450] ? lock_chain_count+0x20/0x20 [ 2275.789331] ? __lock_acquire+0x1657/0x5b00 [ 2275.790338] ? __lock_acquire+0xbb1/0x5b00 [ 2275.791239] io_issue_sqe+0x2e8a/0x77b0 [ 2275.792078] ? find_held_lock+0x2c/0x110 [ 2275.792932] ? perf_trace_lock+0xac/0x490 [ 2275.793808] ? SOFTIRQ_verbose+0x10/0x10 [ 2275.794673] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2275.795671] ? io_connect+0x610/0x610 [ 2275.796485] ? lock_acquire+0x197/0x470 [ 2275.797318] ? find_held_lock+0x2c/0x110 [ 2275.798190] ? __fget_files+0x2cf/0x520 [ 2275.799032] ? lock_downgrade+0x6d0/0x6d0 [ 2275.799910] __io_queue_sqe+0x90/0x9d0 [ 2275.800749] ? io_issue_sqe+0x77b0/0x77b0 [ 2275.801616] ? __fget_files+0x2f8/0x520 [ 2275.802473] ? __io_file_supports_nowait+0x22a/0x510 [ 2275.803539] ? io_prep_rw+0x7f5/0x1050 [ 2275.804367] io_submit_sqes+0x44aa/0x8610 [ 2275.805282] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2275.806346] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2275.807367] ? find_held_lock+0x2c/0x110 [ 2275.808233] ? io_submit_sqes+0x8610/0x8610 [ 2275.809153] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2275.810182] ? wait_for_completion_io+0x270/0x270 [ 2275.811199] ? rcu_read_lock_any_held+0x75/0xa0 [ 2275.812177] ? vfs_write+0x354/0xb10 [ 2275.812968] ? fput_many+0x2f/0x1a0 [ 2275.813744] ? ksys_write+0x1a9/0x260 [ 2275.814560] ? __ia32_sys_read+0xb0/0xb0 [ 2275.815436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2275.816552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2275.817650] do_syscall_64+0x33/0x40 [ 2275.818444] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2275.819534] RIP: 0033:0x7f1e32d62b19 [ 2275.820321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.824212] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2275.825827] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2275.827324] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2275.828835] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2275.830355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.831855] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2275.859304] FAULT_INJECTION: forcing a failure. [ 2275.859304] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.862280] CPU: 0 PID: 11399 Comm: syz-executor.6 Not tainted 5.10.240 #1 [ 2275.863877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.865770] Call Trace: [ 2275.866387] dump_stack+0x107/0x167 [ 2275.867219] should_fail.cold+0x5/0xa [ 2275.868091] ? create_object.isra.0+0x3a/0xa20 [ 2275.869119] should_failslab+0x5/0x20 [ 2275.870006] kmem_cache_alloc+0x5b/0x310 [ 2275.870950] create_object.isra.0+0x3a/0xa20 [ 2275.871967] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2275.873135] __kmalloc+0x16e/0x390 [ 2275.873947] io_setup_async_rw+0x180/0x580 [ 2275.874890] ? iov_iter_restore+0x195/0x3a0 [ 2275.875889] io_read+0x775/0x11e0 [ 2275.876693] ? __is_insn_slot_addr+0x14c/0x290 [ 2275.877740] ? kiocb_done+0xc90/0xc90 [ 2275.878602] ? mark_lock+0xf5/0x2df0 [ 2275.879476] ? lock_chain_count+0x20/0x20 [ 2275.880479] ? __lock_acquire+0xbb1/0x5b00 [ 2275.881466] io_issue_sqe+0x2e8a/0x77b0 [ 2275.882403] ? find_held_lock+0x2c/0x110 [ 2275.883354] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2275.884568] ? SOFTIRQ_verbose+0x10/0x10 [ 2275.885513] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2275.886624] ? lock_downgrade+0x6d0/0x6d0 [ 2275.887600] ? io_connect+0x610/0x610 [ 2275.888498] ? lock_acquire+0x197/0x470 [ 2275.889437] ? find_held_lock+0x2c/0x110 [ 2275.890453] ? __fget_files+0x2cf/0x520 [ 2275.891380] ? lock_downgrade+0x6d0/0x6d0 [ 2275.892354] __io_queue_sqe+0x90/0x9d0 [ 2275.893270] ? io_issue_sqe+0x77b0/0x77b0 [ 2275.894241] ? __fget_files+0x2f8/0x520 [ 2275.895168] ? __io_file_supports_nowait+0x22a/0x510 [ 2275.896345] ? io_prep_rw+0x7f5/0x1050 [ 2275.897263] io_submit_sqes+0x44aa/0x8610 [ 2275.898270] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2275.899423] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2275.900571] ? find_held_lock+0x2c/0x110 [ 2275.901526] ? io_submit_sqes+0x8610/0x8610 [ 2275.902542] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2275.903665] ? wait_for_completion_io+0x270/0x270 [ 2275.904798] ? rcu_read_lock_any_held+0x75/0xa0 [ 2275.905880] ? vfs_write+0x354/0xb10 [ 2275.906766] ? fput_many+0x2f/0x1a0 [ 2275.907616] ? ksys_write+0x1a9/0x260 [ 2275.908516] ? __ia32_sys_read+0xb0/0xb0 [ 2275.909463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2275.910695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2275.911921] do_syscall_64+0x33/0x40 [ 2275.912787] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2275.914003] RIP: 0033:0x7fa33f43fb19 [ 2275.914868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.919220] RSP: 002b:00007fa33c9b5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2275.921003] RAX: ffffffffffffffda RBX: 00007fa33f552f60 RCX: 00007fa33f43fb19 [ 2275.922686] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2275.924293] RBP: 00007fa33c9b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2275.925968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.927654] R13: 00007ffc747de33f R14: 00007fa33c9b5300 R15: 0000000000022000 03:00:31 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 03:00:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000003c00000000aaff02"], 0x0) 03:00:31 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0xed, &(0x7f0000000100)={@random="c64335c772f2", @random="70a39851bebe", @void, {@generic={0x2, "9cec52e6a569b15c37fcf84656908709a76860df1f35bafa9d28f7cab873ee9df9faed432e0030c7c56d43f5644e65653508e0bcf257772c4fe6c3d9b0370a7cb3d2106da0c7df82adc495c1a05373ca61d6974529a3e7d434f17b27404720a9033a5b7fb48a330628195971a518b67ff4d8a7529665f28df96aa3225d7d80f953279a6cb35ffddfd954df1dcc513c2da78d676ee0fa365bdc8eedc73aa5e6b216c792a7437ff42fe20317f6a8c58d605cfd0e971caf3cd586ffd8313bfe64093bf627234f3b8f0a4ec1c4769ab294d54ecb40236578f1d79fbeff7b09d395"}}}, 0x0) fcntl$dupfd(r1, 0x0, r0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00000051000000ff010000ff7f0f2000000000"], 0x4040) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000640)='net/hci\x00') perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x80, 0x2c, 0x81, 0x3f, 0x0, 0xfffffffffffffff8, 0x9002, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1000, 0x8, 0x8bf6, 0x6, 0x1, 0x7fff, 0x3f, 0x0, 0x7, 0x0, 0x3}, r2, 0x9, r0, 0x8) 03:00:31 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 03:00:31 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000006000000000aaff02"], 0x0) 03:00:31 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 03:00:31 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x6, 0x0, 0x0) 03:00:31 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa19dff7cd1f0cf815fd1ccb87b636000078ab3d1a36082bde5dbfe442e6bb0000000086dd60d0fffb00020600fe800000001000a0e48947000000000000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_io_uring_setup(0x1e98, &(0x7f0000000200)={0x0, 0xacdb, 0x8, 0x2, 0x36f, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_emit_ethernet(0x3b4, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d6ce51", 0x37e, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[@dstopts={0x67, 0x29, '\x00', [@generic={0xb3, 0x85, "bf698a362088126e7df3b61d012436a53fc2db9c07d79fa3c2f2ee089fa99f3910f6c307d7ead528dc4b56fb99973d4a6ddb3f8960285b6e94adb5c7f81847e04b055b6e1b0b698dc7768ea8e59bf500624948a928f5e0b977c14bd08ad3d6824e02efa6d3f6ea934df58051933cccd30671112c83e6c1afbb2768de948f1adc6060550b35"}, @generic={0xf7, 0xa2, "177178105e19aa8e63fe78b16c99f302381107ab75b2be68f33bdb341bd598e852d8a6f689c875ce4c0e601db379c35401f32ce4655c040b9110723bf0c10fa799c886d37b301b3b81ab6a9a1d32efc549361ae284028f4aec3e89e59c26188a6eb7513168b008f5a691720146344f90cb2e13572c2a797e94322db8675a501e725652e2938dea845dedabf8600968a5db94c6cc300d38b6f97ee6523ef8f8364031"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0xd2c, [0x81, 0x10001]}}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x6}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0xa, 0x6, "52be1a", 0xff80, 0x87, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @remote, [@srh={0x29, 0x2, 0x4, 0x1, 0x1, 0x0, 0x80, [@private2]}, @srh={0x2c, 0x4, 0x4, 0x2, 0xfb, 0x0, 0x5, [@loopback, @empty]}, @hopopts={0x2, 0x0, '\x00', [@pad1]}, @fragment={0xa5, 0x0, 0xa5, 0x0, 0x0, 0x7, 0x67}, @routing={0x32, 0xc, 0x0, 0x0, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x84, 0x3, '\x00', [@ra={0x5, 0x2, 0xc8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}}, @ra={0x5, 0x2, 0x3cb}]}, @hopopts={0x6c, 0x4, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x5, [0xffffffffffffffc0, 0x800]}}, @jumbo={0xc2, 0x4, 0x1}]}, @routing={0x33, 0x2, 0x0, 0x2, 0x0, [@rand_addr=' \x01\x00']}, @fragment={0x2b, 0x0, 0x2, 0x1, 0x0, 0x9, 0x68}, @routing={0x32, 0x2, 0x2, 0x4, 0x0, [@loopback]}], "82d385546ed62b44a98a2cf17d92d0ce0fcc4ff75b1dceba38521ca2c1257eadcc0f3657cbdd9401dfa7d175721c5a4cffbc9bb8e8c73011815269a5af31737b82a2bf6a3b598a52d3dafd8612ca2a5003368cd46f5635a39d69c74994919a28620648562a0aa94070334d5a679d919baeb10325372919becdfb48bc677fff2ebea461c46b9fcb1e837edff88494536b407167689f4c8b6dfa37e7c4a73924894398cf9c6b1386d43b09daa69f35"}}}}}}}, &(0x7f00000001c0)={0x1, 0x3, [0x175, 0x36, 0x995, 0x425]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2, 0x6, 0x9, 0xff, 0x0, 0x7, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x81, 0x6, 0x2, 0x0, 0x100, 0xff, 0x8000, 0x0, 0x9, 0x0, 0x79ac}, 0x0, 0x6, r1, 0x1) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x3f, 0x1, 0xa6, 0x0, 0xfffffffffffffffe, 0x2000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x7fff}, 0x10004, 0x6, 0x4, 0x2, 0x10001, 0x0, 0x101, 0x0, 0x5, 0x0, 0x76}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1b) 03:00:45 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000003000000aaff02"], 0x0) 03:00:45 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:00:45 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 03:00:45 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 03:00:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x7, 0x7, 0x24, 0x40, 0x0, 0x2, 0x201, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb5, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x2b, 0x8, 0x10000, 0x5, 0x1, 0x80, 0xffff, 0x0, 0x8, 0x0, 0x9}, r1, 0x6, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r2, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x1, 0x10000}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1f, 0xa5, 0xd5, 0x18, 0x0, 0x8, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0xd102, 0x0, 0x6e, 0x0, 0x7fff, 0x5, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0x2, r2, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r4], 0x1) write$binfmt_misc(r0, 0x0, 0x0) 03:00:45 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-://'}, {0x20, '++.\xa1$'}, {0x20, '$.-@@*@*&'}, {0x20, '\'\xbb[:\''}, {0x20, '/dev/zero\x00'}], 0xa, "b6917238a0a43cde3d385632b088a1315e4374b6491db5e3449f7b60b3b53222ad78f57686750da5e9fab937f8d50e6fad5b21967d6c85a7cb6ed5c889e877e99ed01cf52321914e9bba86579bd3a84c2b2377a2b40ca4ca0546cf76fced169a92005b40ecf5eb29cb36107479459c4ca917511b1060300d0ffe3e31f90d30fb91eb0002d92f54dbedea8b6775132ceb152abd64605737e4281c0ef08631ae877ba748c5d3912b4f189112623e706ddcb6a56bca0c96"}, 0xe7) 03:00:45 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc, 0x0, 0x0) 03:00:45 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2289.705618] FAULT_INJECTION: forcing a failure. [ 2289.705618] name failslab, interval 1, probability 0, space 0, times 0 [ 2289.707152] CPU: 1 PID: 11446 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2289.708020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2289.709048] Call Trace: [ 2289.709390] dump_stack+0x107/0x167 [ 2289.709858] should_fail.cold+0x5/0xa [ 2289.710350] ? io_setup_async_rw+0x180/0x580 [ 2289.710892] should_failslab+0x5/0x20 [ 2289.711351] __kmalloc+0x72/0x390 [ 2289.711779] io_setup_async_rw+0x180/0x580 [ 2289.712296] ? iov_iter_restore+0x195/0x3a0 [ 2289.712829] io_read+0x775/0x11e0 [ 2289.713252] ? __is_insn_slot_addr+0x14c/0x290 [ 2289.713816] ? kiocb_done+0xc90/0xc90 [ 2289.714285] ? mark_lock+0xf5/0x2df0 [ 2289.714742] ? lock_chain_count+0x20/0x20 [ 2289.715270] ? __lock_acquire+0xbb1/0x5b00 [ 2289.715788] io_issue_sqe+0x2e8a/0x77b0 [ 2289.716284] ? find_held_lock+0x2c/0x110 [ 2289.716777] ? perf_trace_lock+0xac/0x490 [ 2289.717274] ? SOFTIRQ_verbose+0x10/0x10 [ 2289.717767] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2289.718351] ? io_connect+0x610/0x610 [ 2289.718819] ? lock_acquire+0x197/0x470 [ 2289.719297] ? find_held_lock+0x2c/0x110 [ 2289.719800] ? __fget_files+0x2cf/0x520 [ 2289.720282] ? lock_downgrade+0x6d0/0x6d0 [ 2289.720786] __io_queue_sqe+0x90/0x9d0 [ 2289.721259] ? io_issue_sqe+0x77b0/0x77b0 [ 2289.721760] ? __fget_files+0x2f8/0x520 [ 2289.722251] ? __io_file_supports_nowait+0x22a/0x510 [ 2289.722874] ? io_prep_rw+0x7f5/0x1050 [ 2289.723345] io_submit_sqes+0x44aa/0x8610 [ 2289.723867] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2289.724468] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2289.725051] ? find_held_lock+0x2c/0x110 [ 2289.725541] ? io_submit_sqes+0x8610/0x8610 [ 2289.726076] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2289.726653] ? wait_for_completion_io+0x270/0x270 [ 2289.727234] ? rcu_read_lock_any_held+0x75/0xa0 [ 2289.727793] ? vfs_write+0x354/0xb10 [ 2289.728241] ? fput_many+0x2f/0x1a0 [ 2289.728676] ? ksys_write+0x1a9/0x260 [ 2289.729144] ? __ia32_sys_read+0xb0/0xb0 [ 2289.729635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2289.730272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2289.730892] do_syscall_64+0x33/0x40 [ 2289.731339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2289.731952] RIP: 0033:0x7f1e32d62b19 [ 2289.732398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2289.734616] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2289.735538] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2289.736402] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2289.737261] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2289.738130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.739006] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:00:45 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x10, 0x0, 0x0) 03:00:45 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0) 03:00:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:00:45 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x12, 0x0, 0x0) 03:00:45 executing program 4: perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x8, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:00:58 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x18, 0x0, 0x0) 03:00:58 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x0) 03:00:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000005000000aaff02"], 0x0) 03:00:58 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 03:00:58 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:00:58 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 03:00:58 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 03:00:58 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-://'}, {0x20, '++.\xa1$'}, {0x20, '$.-@@*@*&'}, {0x20, '\'\xbb[:\''}, {0x20, '/dev/zero\x00'}], 0xa, "b6917238a0a43cde3d385632b088a1315e4374b6491db5e3449f7b60b3b53222ad78f57686750da5e9fab937f8d50e6fad5b21967d6c85a7cb6ed5c889e877e99ed01cf52321914e9bba86579bd3a84c2b2377a2b40ca4ca0546cf76fced169a92005b40ecf5eb29cb36107479459c4ca917511b1060300d0ffe3e31f90d30fb91eb0002d92f54dbedea8b6775132ceb152abd64605737e4281c0ef08631ae877ba748c5d3912b4f189112623e706ddcb6a56bca0c96"}, 0xe7) 03:00:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000003c000000aaff02"], 0x0) 03:00:58 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e, 0x0, 0x0) [ 2303.373361] FAULT_INJECTION: forcing a failure. [ 2303.373361] name failslab, interval 1, probability 0, space 0, times 0 [ 2303.375143] CPU: 0 PID: 11494 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2303.376290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2303.377666] Call Trace: [ 2303.378118] dump_stack+0x107/0x167 [ 2303.378730] should_fail.cold+0x5/0xa [ 2303.379354] ? create_object.isra.0+0x3a/0xa20 [ 2303.380110] should_failslab+0x5/0x20 [ 2303.380738] kmem_cache_alloc+0x5b/0x310 [ 2303.381416] create_object.isra.0+0x3a/0xa20 [ 2303.382151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2303.382996] __kmalloc+0x16e/0x390 [ 2303.383591] io_setup_async_rw+0x180/0x580 [ 2303.384293] ? iov_iter_restore+0x195/0x3a0 [ 2303.384861] io_read+0x775/0x11e0 [ 2303.385441] ? __is_insn_slot_addr+0x14c/0x290 [ 2303.386211] ? kiocb_done+0xc90/0xc90 [ 2303.386844] ? mark_lock+0xf5/0x2df0 [ 2303.387460] ? lock_chain_count+0x20/0x20 [ 2303.388173] ? __lock_acquire+0xbb1/0x5b00 [ 2303.388876] io_issue_sqe+0x2e8a/0x77b0 [ 2303.389515] ? find_held_lock+0x2c/0x110 [ 2303.390079] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2303.390845] ? SOFTIRQ_verbose+0x10/0x10 [ 2303.391373] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2303.392015] ? lock_downgrade+0x6d0/0x6d0 [ 2303.392573] ? io_connect+0x610/0x610 [ 2303.393095] ? lock_acquire+0x197/0x470 [ 2303.393637] ? find_held_lock+0x2c/0x110 [ 2303.394207] ? __fget_files+0x2cf/0x520 [ 2303.394745] ? lock_downgrade+0x6d0/0x6d0 [ 2303.395306] __io_queue_sqe+0x90/0x9d0 [ 2303.395836] ? io_issue_sqe+0x77b0/0x77b0 [ 2303.396466] ? __fget_files+0x2f8/0x520 [ 2303.397104] ? __io_file_supports_nowait+0x22a/0x510 [ 2303.397789] ? io_prep_rw+0x7f5/0x1050 [ 2303.398329] io_submit_sqes+0x44aa/0x8610 [ 2303.398905] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2303.399576] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2303.400225] ? find_held_lock+0x2c/0x110 [ 2303.400775] ? io_submit_sqes+0x8610/0x8610 [ 2303.401358] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2303.402004] ? wait_for_completion_io+0x270/0x270 [ 2303.402663] ? rcu_read_lock_any_held+0x75/0xa0 [ 2303.403285] ? vfs_write+0x354/0xb10 [ 2303.403792] ? fput_many+0x2f/0x1a0 [ 2303.404284] ? ksys_write+0x1a9/0x260 [ 2303.404793] ? __ia32_sys_read+0xb0/0xb0 [ 2303.405339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2303.406038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2303.406739] do_syscall_64+0x33/0x40 [ 2303.407240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2303.407926] RIP: 0033:0x7f1e32d62b19 [ 2303.408429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2303.411051] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2303.412024] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2303.412942] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2303.413859] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2303.414780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2303.415691] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:00:59 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) syz_emit_ethernet(0x21, &(0x7f0000000200)={@remote, @broadcast, @val={@val={0x9100, 0x6, 0x1, 0x4}, {0x8100, 0x4, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @random="000000001800", @multicast2}}}}, &(0x7f0000000000)={0x1, 0x1, [0x991, 0xc25, 0xf98, 0xeac]}) 03:00:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-://'}, {0x20, '++.\xa1$'}, {0x20, '$.-@@*@*&'}, {0x20, '\'\xbb[:\''}, {0x20, '/dev/zero\x00'}], 0xa, "b6917238a0a43cde3d385632b088a1315e4374b6491db5e3449f7b60b3b53222ad78f57686750da5e9fab937f8d50e6fad5b21967d6c85a7cb6ed5c889e877e99ed01cf52321914e9bba86579bd3a84c2b2377a2b40ca4ca0546cf76fced169a92005b40ecf5eb29cb36107479459c4ca917511b1060300d0ffe3e31f90d30fb91eb0002d92f54dbedea8b6775132ceb152abd64605737e4281c0ef08631ae877ba748c5d3912b4f189112623e706ddcb6a56bca0c96"}, 0xe7) 03:00:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000040000000aaff02"], 0x0) 03:00:59 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@random="4cb1ad5f4db2", @local, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x22, 0x2, 0x0, 0x0, "1d4dfdbc7fa7a27c347d8395b1b065275e81f25dd62eaab5cb8c548d78328ef8c8177beef703c648b784b2227a7b55daa4e94108565448ec408d41b87b01fe0f"}}}}, &(0x7f0000000080)={0x0, 0x2, [0xbda, 0xe79, 0xa52, 0xd11]}) 03:00:59 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x24, 0x0, 0x0) 03:00:59 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000060000000aaff02"], 0x0) 03:00:59 executing program 3: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x12, 0x0, 0x0) 03:00:59 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a, 0x0, 0x0) 03:01:12 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 03:01:12 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000100aaff02"], 0x0) 03:01:12 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 03:01:12 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 03:01:12 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x7fff}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x400}) close(r0) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\t\x00\x00\x00\t\x00', 0x6) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x400) r3 = socket$inet_icmp(0x2, 0x2, 0x1) dup2(r3, r0) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f0000000640)='net/hci\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1, 0xc1, 0x81, 0x21, 0x0, 0x6, 0x1021, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x8422, 0x1d, 0x7ff, 0x7, 0x7, 0x1, 0x7fff, 0x0, 0x1000, 0x0, 0x7817}, r4, 0x10, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="dd60d0ff4700020600fe8000000000000000000000000000aaff7f02b4d2b0935cd8cfe7085c406a882c645d877a04c55f5b6d46529d323b20f987b2384da881e5084aa442514357dc222c1de12cff0e39ee5aed2c353a08bec18b9274ec09c601de6a1120f8921504ed22fa28dd685e6f61fd9ad0c9bb11fee85833eff1e48147ba0bc54bd9e56d000000000000000000000000000000000008000000"], 0x0) 03:01:12 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x30, 0x0, 0x0) 03:01:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0xfc, 0x0, 0x5, 0x0, 0x0, 0x4307, 0x89090, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x1, 0x5323, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\x00') setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000540)=""/180, &(0x7f00000001c0)=0xb4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1, 0x10000}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)={'raw\x00', 0x0, [0x6, 0x270, 0x9, 0x9, 0x4216]}, &(0x7f0000000400)=0x54) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) syz_io_uring_complete(0x0) creat(&(0x7f0000000240)='./file0\x00', 0xc) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) fcntl$lock(r0, 0x25, &(0x7f0000000340)={0x0, 0x3, 0x3ff, 0x7f, r4}) io_setup(0x2, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) 03:01:12 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) [ 2316.803618] FAULT_INJECTION: forcing a failure. [ 2316.803618] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.805096] CPU: 0 PID: 11551 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2316.805900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.806881] Call Trace: [ 2316.807195] dump_stack+0x107/0x167 [ 2316.807624] should_fail.cold+0x5/0xa [ 2316.808070] ? __io_queue_sqe+0x666/0x9d0 [ 2316.808552] should_failslab+0x5/0x20 [ 2316.808998] kmem_cache_alloc_trace+0x55/0x320 [ 2316.809529] ? lock_downgrade+0x6d0/0x6d0 [ 2316.810016] __io_queue_sqe+0x666/0x9d0 [ 2316.810494] ? io_issue_sqe+0x77b0/0x77b0 [ 2316.810979] ? __fget_files+0x2f8/0x520 [ 2316.811447] ? __io_file_supports_nowait+0x22a/0x510 [ 2316.812042] ? io_prep_rw+0x7f5/0x1050 [ 2316.812500] io_submit_sqes+0x44aa/0x8610 [ 2316.813010] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2316.813592] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2316.814157] ? find_held_lock+0x2c/0x110 [ 2316.814646] ? io_submit_sqes+0x8610/0x8610 [ 2316.815155] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2316.815715] ? wait_for_completion_io+0x270/0x270 [ 2316.816280] ? rcu_read_lock_any_held+0x75/0xa0 [ 2316.816822] ? vfs_write+0x354/0xb10 [ 2316.817255] ? fput_many+0x2f/0x1a0 [ 2316.817677] ? ksys_write+0x1a9/0x260 [ 2316.818122] ? __ia32_sys_read+0xb0/0xb0 [ 2316.818604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.819220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.819820] do_syscall_64+0x33/0x40 [ 2316.820254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.820849] RIP: 0033:0x7f1e32d62b19 [ 2316.821284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.823438] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2316.824326] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2316.825156] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2316.825986] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.826823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2316.827654] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:01:12 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x36, 0x0, 0x0) 03:01:12 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000300aaff02"], 0x0) 03:01:12 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:01:12 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xa0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x6d36, 0x7, 0x4, 0x8}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @private=0xa010102}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r2 = syz_io_uring_setup(0x7fda, &(0x7f0000000280)={0x0, 0x18d6, 0x9fd3264f0a037f28, 0x2, 0x3d5, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(r2, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 03:01:12 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c, 0x0, 0x0) 03:01:12 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000500aaff02"], 0x0) 03:01:12 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:01:26 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 03:01:26 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000003c00aaff02"], 0x0) 03:01:26 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 03:01:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa722faaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:01:26 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e, 0x0, 0x0) 03:01:26 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x0, 0x3, 0x7, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') timerfd_settime(r1, 0x0, &(0x7f0000000000), &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/pps', 0x82000, 0x26) r3 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xff, 0x5, 0x4, 0x3, 0x0, 0x10000, 0x84390, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140)}, 0x1, 0x5, 0x3, 0x5, 0x0, 0xfffffe01, 0x401, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xb, r2, 0x1) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x480, 0x0) r5 = syz_io_uring_setup(0x2586, &(0x7f0000000440)={0x0, 0x46ea, 0x2, 0x0, 0x36d, 0x0, r4}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000004c0), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000014c0), 0x0) sendfile(r5, r0, &(0x7f0000000240)=0x3f, 0x7) readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) timerfd_gettime(r1, &(0x7f0000000200)) getpgrp(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) unshare(0x48020200) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000680)) sendfile(0xffffffffffffffff, r3, &(0x7f0000000540)=0x6, 0xfffffffffffffffa) syz_io_uring_setup(0x2a86, &(0x7f0000000340)={0x0, 0x7b02, 0x10, 0x2, 0x285, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000500)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000640)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x64}, 0xffffff01) 03:01:26 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 03:01:26 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) [ 2331.190552] FAULT_INJECTION: forcing a failure. [ 2331.190552] name failslab, interval 1, probability 0, space 0, times 0 03:01:26 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000004000aaff02"], 0x0) [ 2331.193146] CPU: 1 PID: 11593 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2331.194874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2331.196754] Call Trace: [ 2331.197355] dump_stack+0x107/0x167 [ 2331.198211] should_fail.cold+0x5/0xa [ 2331.199097] ? create_object.isra.0+0x3a/0xa20 [ 2331.200154] should_failslab+0x5/0x20 [ 2331.201036] kmem_cache_alloc+0x5b/0x310 [ 2331.201998] create_object.isra.0+0x3a/0xa20 [ 2331.203007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2331.204219] kmem_cache_alloc_trace+0x151/0x320 [ 2331.205279] ? lock_downgrade+0x6d0/0x6d0 [ 2331.206262] __io_queue_sqe+0x666/0x9d0 [ 2331.207175] ? io_issue_sqe+0x77b0/0x77b0 [ 2331.208135] ? __fget_files+0x2f8/0x520 [ 2331.209063] ? __io_file_supports_nowait+0x22a/0x510 [ 2331.210260] ? io_prep_rw+0x7f5/0x1050 [ 2331.211168] io_submit_sqes+0x44aa/0x8610 [ 2331.212163] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2331.213490] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2331.214581] ? find_held_lock+0x2c/0x110 [ 2331.215515] ? io_submit_sqes+0x8610/0x8610 [ 2331.216502] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2331.217582] ? wait_for_completion_io+0x270/0x270 [ 2331.218688] ? rcu_read_lock_any_held+0x75/0xa0 [ 2331.219715] ? vfs_write+0x354/0xb10 [ 2331.220573] ? fput_many+0x2f/0x1a0 [ 2331.221409] ? ksys_write+0x1a9/0x260 [ 2331.222273] ? __ia32_sys_read+0xb0/0xb0 [ 2331.223247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2331.224444] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.225592] do_syscall_64+0x33/0x40 [ 2331.226440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2331.227632] RIP: 0033:0x7f1e32d62b19 [ 2331.228478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.232731] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2331.234422] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2331.236114] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2331.237722] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2331.239381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2331.241019] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:01:26 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000006000aaff02"], 0x0) 03:01:26 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r0) 03:01:26 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x600, 0x0, 0x0) 03:01:26 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000fffffff500aaff02"], 0x0) 03:01:27 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00, 0x0, 0x0) 03:01:27 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000f5ffffff00aaff02"], 0x0) 03:01:27 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) syz_emit_ethernet(0x39, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@val={0x9100, 0x6, 0x1, 0x2}, {0x8100, 0x5, 0x1, 0x2}}, {@mpls_mc={0x8848, {[{0x4f8}], @llc={@snap={0xaa, 0x1, "b5", "3a29a0", 0x201, "75dbf73413374c76383bfbcc3b47a90d5e08a549fdbddc"}}}}}}, &(0x7f0000000040)={0x0, 0x2, [0xff4, 0x1cb, 0x11a, 0x109]}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0xe0, 0x100, 0x8, 0x4, 0x1}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r2 = getpgid(0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @void, @ipv6=@gre_packet={0x5, 0x6, "050052", 0x123f, 0x2f, 0x0, @local, @empty, {[@fragment={0x2c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x68}, @srh={0x87, 0x2, 0x4, 0x1, 0x3b, 0x1708df81cc8aa98, 0x0, [@private2]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb4, 0x1, [], "9166ebe0b2a4ff90d65f9167fb9d54a2cce850eb3f4993479ae480d73d5e9bf89a62328e3ac44b39c87a99d912a73dfbbf1e9d8cbdb125fd99438bea7a2a93d49725b2d420949cdc390ced8729b4e2668236a1038139eabaa5521669f2ee853a1225eea08bd31b9f85280d14940b15777d6758ba55cf55ea1f278331cf04c850c22a9aa0c8554c152cb28aa2baeb2f0c3f29a074fcba163e512c2b74153dbc2ae3fe55fee6606f8b3c4757cb06fc9127633f830f"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x3f, 0x4], "39b5ca53d881b5b57a61bff8db999db896914dc92308b860cdd8fe446909eb55cde20d73e71bf090404e00aa0f69165b1215cabc642c82f48376ca993a24a49e851736fb308154b02956de9d274042de76158b99779ae03ab3075b6793923ab6ed9d30d02e2d91006f3b295eca4b484ea36efa9726bfb8eebd3bf64c5e687d6bdc3ac23047d94d7a9053270ebe05821d7c7c48b99eebfd5e838559025cc6fb9ef813ae26031e996213bd36a4c69ce547647f7d8ce4484f85c88d6be31d53ba3e5ffb175a138c5ee1c99126b19b6f8ddae6"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x9], "0bc081c60585b96e4332d54f6b8f214ece542b167557cbc31ce01240c37de1a5b1d7cb3311571c32190ceec5555fc61bfcb33245f4a1ed36f2b2724f76c91aabe23480c263d2c64e2ebbb464515dc15bff569b1b05147cfc8163ac656d6cf4101b77853ed90481e8917da67d423181949edf92da49267175f831703cad1668a4650bae2b704753d7df86acaec01b62a4116902d03b6ad3fa25ebf04cb15a48060a5cfc372179d36fe2c9fc1f6da0ae11fa7e4c0b67b2b975b9a2d7c0486498a5dd3591a51d69dad99a2497969276e1b43ee2e59bdc37cf7dd9432343239e1a18a1fa748262d1f7cd977e4e13f721c92e3420fabd029d1439c5246f416804de511f3e75d5948a69a43774a2e9c64452cd17dedb214c2d93ce034e474cccd2e8dca49ea916359cdafc9220a86302ed17816e0624e160c3e1bfed053cfb047fff3a18b6ca709721cd624b306e9d32751e199142a40bffaa2991552a4cdcc790e0d00f417eed909bdeb279e6100ec550a0e6f1b4e05a082482664f62b65c47950a024a5459f39942020a12b1c70289763a705dc6d9872ab4b05dc335548fbb34027d95a2aa51d1e57a3d1081fe06176ebe7588ffdf7302bbb4f713814e145668d12f66aba7a3ea04daf9b89818ec4be2dc338518e9980185fd6c13501134c763a40e463f5220c43a011ac528e7923dbac5dad190b7b079af305f4a035a88d62868a37cafb14ee5115c19bce3a0eb8922a3ca4f7dc2fb2f96e62fa0d56db698ed48706679f29957f0f42fb44ab3c6c959b6312c2966378118ba2db6d180a47a5d01a4e04fcfb508115e514dc8eb0a39531d03c533a502c3d265547ffae48d015f0029d91309a991b8196dc32a79b86ce8dfaf253b57f4445c5efb938c26d38ca6f551bdbde8f1b125579c733d280cbb0db107b67c994d958778f4bd85013ecba3211ca4dd883c5af003de187899a5ed7d8f02d331bdaf654ee2fba0bce66b720b7edaec0e3db97784a44574bafe9145d7fd700ef885f1c95b79d32a28d4c503b387413e344359df545dddf2c0fed14f2907b578490f8d8a98342705b67598ed86c1cf37cec8d92a4c1e12294622c82984396321c9ba18019e8615bc93a3e95022c78000e023e064096f8053376c002c79a286534b14ced0276dce73d78dd765e472582ba1acc90978e551ac05e478c5438c36c5db0dd2521c4b2476bc09530f17a53c423b09398c2c779dc922e4abd2542c1807b53555d725861cbc0b77468b55c5844dcf518d911e58f11b3cef29c1a4286458e19e48b593e444a1af392d8bbb48c9be81ed316e62eac4252c2233b3e9bcb35e49e888e78382580965546136ce4e9e43521e4e4b44005ce1b0cbabbc12f26f8ecd6845ddfaeaf3a82a16452650da47c468eb1f33cb668c84f22b5d3b3e24e50818bc6e0d90b120124650ba0651a79d58229ae17204d645a803bc8c06acfb4ace1641ca95de433293775b7930fab39f0ec96ca41cdb983faed480eecc2d554d99e9782465627582d0646c3363d188e9c5a56cd909d24132f75b6acb912abe43e9e25125783ad83054068ebaa02ee708e5762af3e4ae36070717a89376b3e1f4ba043638cf735b177336d87d991ac59291fa4e8c45cc553a676fd2419f4186f1aeb406d2a54b4c0fc29ce16986c34808b32897a75914e5310c8dba7280a9bf0efd6383b004d4b76abf0ab92393b41396c768f27a4000f04683831dc149167d73d99b4662aaaa3f94e807845852b263b02d77bf1a6a34965d31d136d253d85791c45eb680a6acc023118530f7015d5ac9c29054165f116eca98acec3d3795547bce15d1002f55ff76028f6f2f988586e8580cd0b94e3924b8ec9208a1512e6bc29894ba350096aec267839a84a2546f9482dc425879c23f6843ce36bb5d6b870032d533f6723ef947e96cf4575253faf512b1bc7c72974d017777ceb73eda9208d19f8e2b916bc4f29aaa00f9b63d33e2d5dee49b413ff4af4fdf3705f63ca119dea5c81fb4b39bc912f5463725129ab1925a7d104b8b9df914a614a7ad12f90ee4c1faeac3a5385bee16e1c98a26e50149069d10dd7b72808ca4b68b77bfcc1b4cfcbeca9fc71cad52fac9a9160f9aca422b28d781039b5bd1d73146fc7a16bb92cbbf74ae4f79380c6afec28d9ca11513b19025e39071e64f33b9e3e1bd11b912ab193c9ae1697830ed0d230b853497cdec641d4430b1e127ce3b2b418af415b5c152adb3392ccde302d82ff12c762f2b83b3ee01662233b593e1d5c2c63977ac3e4b50e82ae352af93883c0d0408df23ccb7a5fb4883a24ba5f8fb034e9dc90c547c515bb5c9e078d2f0ffb2f27aa1d23d44ab072aaa73c71b99cd260c8bcdcb4d024afdb7c2c414bb139bd77f2567be4b7fd2f1f5e692247cc1d861e3568394e480f54a23bbf100a260b5d6941ade840eb4df99faac3f7297a9577c6c1aa0057f3e6d833893e5b7652150a63d525d159a890496f402841c243b69ea9d00487f49fece22ce135ef8b241b7094583c9e429731988938185c6c6dd7f6b4caa9e79966294fa9afa30f009574c97f454d82104255a3c8b28ecfb4eaf573988f90e32134f0ec883c59ae8ab268ddda53a228c74dbbde24a965d9e19d42b0848bd3a8ee1045a9ac18933b9e58ae2331d8ffc080155aa6156f57cff9bd0c0d26180d7f5f4cce6fbfbbf8531bbd590808a36f6d5dc0dca8a7f6eb5738173422e1db412358d734541b6ed12f6619f3b2295a10da90da57b0c3d1f05934a7770065e80573df141f110eb3dcfff18d3132b5cd968355161f28c97243269cf5a9f8f689dec7e133a464a5eec47ea73916095b04eef7eea1b7fac77e8e3c4ee6a178c48563103deba3db732bd1579635b607b854f93a3fc594959bfc728040d59eec90353678bde1337bec1ef709ba79067a5514df3a516a73f106c1b87d5a695cf0c630fa0d4e0cfc52159387ae7c5f7c666d3533c395bead11264df96711af22307f361ccee4ce98a0d5b83a3c89ddc62c8a95ed0ec1e07e8eb0ba7d96772c86ba044d6a1a7213df08ccacf256a0dbedb4606f94dc459121117addce6536ce6161a759fecb7278ac004b74d51b84bb1646ea44de095e97b74ab63eaa2a5d83762015c0d4e4cf55d8da6f08fce991c8785750f3da324f4973d39938e8875f714d762c925e5bcb1a2bca856789d055ace0d9109096f29c3bf4170f4d1b3628341b86d207d193d813419366e3cfc9ed7894297b1af157c82b0ac339dc4e2913a3bbd44d209e47824f2a46d15b1c7cb65c22f82e4e2d87540beac316b00620845fe0dd3c0f25373e3842b78a352d2ecf6f73b0c5ec1253b5de466ba24dd559f222fe263671cd28537290da025c2d749b2d1fc688bbd45f56165711d8ee1496aa61c48af7248d7674eb30183e53c98e2bebf6060f41cf8a6cd7b7a7bb4b7ca741964f7643f152c601368da95dc47c5927afac4bc55972c6193e56d0b9a15ec6b8d77b9ad2bdfdcc29a4315363597a38730ba6a7f9058154fa29fbfe49c6c8e6969dd59e6f5e63298f1db9338f919c0444a88946199bffac2ca7c2d3b170beb1f789cfd2a461c3ffc9d0801f85d06c81502be634e0e2e2727e3fd41565674d047154890a01709ec07be73c097706dc3fb654d67191d3a3e35d9167f3b92481b97250552981fd060ecaf86080a1eb2ebd699a694be22af713d8f6331a2608616c0570e83836290c403f59a9b98773957b8fa83ab67b2fbc0cedf8183cd684dc7e4a2a19bffbbf24924099823320cff7df0fb0dc29afd65eded0e8dc36e9e6d113f778dccc46f95f0d875929dd4b32f9e906bdfcbcbb77b4e874be57a3f7473b9df849d02b81e2285784a1df2c88e3dde8a47ef3f630bfcccfbc9822e21de0efe16509b5bae5632ff378d922b89b4c2d69b28452360e043ab8caa02f24014df6c2d2a61a30a018577224d8b80e58968c337d1dd0aa17826b1287812b465e200aba04c64c0bf5b5c7b1c8570a431e5240dedcf9abd9fdeba2ee09ffbad5426f9e3bb0f3db0313f03f7f0d895bfd5b42f4d756532975ca28ffa24abf1f7fcdbd2156e175113b43c3bedf272a89aa0df5d25ee4a99a53532770c46b4a1cd395d5acb91f4b8c77d719773e4c183ef997f30182da6d2247fe1946889e2b5c98f336f07c3ef08e1828c50d9d172390666c070590736b3992b8595d04ebcdb4cc2b208cec0bf4d4333e8890186b059859f014bbc6cb081058d766317e6debc3b80aad7a884a6909eb1ace2641aaecb05145d77f0bcd5b0fb50cb4fd9ccb2080de0417f36f00020a962750ca4bef48597cf88d971e627ef1df8a12ee60b07ba961afa75d350ae8b8b368054e94c6c8d49e9fc8587db5bb6e4511871ab1dbc4455409e748e77ca2981b38611521fbb3233a66de63d2d43a49e49f039c6c26c06d1d6e09f4fc612625ddd78e18c972dacea5502a4e7172d7b9f21e36463d0efb3fef014b0a43b37da3abd3f1f7ecaba74393ea7215531df5bd2e5b7afcc4dfb40bf81e19ac73d32f96b444f42801810eabfe7411e45a06983c70332fd8e6834a3dc66edd730b116ba37fcbb4998c5e95874c4fb09c1c9436ab5f62ea858e0083427edecc82f5f0d4b80c17fc088217e01ef487f27c8a392692a9b179ad072a8713aa4826eb6684aa2756be5bc274f5f4fdcc10fdf0fa1d0ccec61ddc493efa46ec40b4241b8f68329a83b1a27a63129f9822558d9ff1b40edef96334c4fb2ce9baf27f8fa9bd877b6653a8317a839afe7ce09027410b6bded8a62f6329dfd22ae724786d913688fe6ae9fcf685c134deceb5b3fa3d620a41c04d6042a0a04a9e111cc55ae44337ced3bfb7e5e81e84193e4e415229d74d6f47a18776dff1dc567c95f378adc656e8f8c11e8af9fa5e3ba1573b12f0f2c70c9550dd34a662c0a07e79bb9578d5cf27d38033f1ff00010ce43bcc313c67b4bbbef6a74c8904d67b691d11ec79ab5820be7268da28d1964f7cda61d04f5d63232cb6255e8496bd6489022b787eab7ab73ebb7ecf06b43acaed8fb14dc76ed1be3cdfa00b60ae42bab118ecadea0ceef1300d4ebdf4b4449290dc657ffad697789b71f9f320d84ed657a2dfc005da6acde9f9b799767fe7ed4b00c9ee9b77188730630895de45a41bdc70f88396510d7674fff6e9af19183ba7efa21f8c03a58addf50ceb67463cde407e6d112f485ac2f53852aed767692f2ca0e52dd8aa0e9603f536c2a7b3d2d97d48358a39a679d58a80129ca8dbb50f90e364575b720090dd97d4baf720cabb591f51300f6218fcea7ceee60e193d9f45dea40a06fbbd8929f1b67a2f0e0b30fbf586c684efd5585782e89f2924ac2a0f538f274f9791154f09fd65af0885a2478ae40e44228d09d761ba4d60059559630d241fc27543a73771eb57a59a0e68915c5d3458d8ca752e08844997cf33c9f700d988ba8e439a5092e7d44c054787017fa8e875ebbb5f84a37df27538c86dcadfa54c4a3ef10d67ab736490a106fb879327b55510113fedeececb1ac44aa1d7ed7ee98da35dcc3c82dc4028a950047c6c13cdaef436400e8f97774e79e5d500960bfd12e34739bc686d27aa04512411ac309eeb502574e9ac26b14632b24fba1d7f8685a575527ba9f33c6c7af6ac340951058dd4706b7ada8e6a7c2bff99710d099ea219a3e94a4acf8f8648b75eac1b29985d3eba9138d1d79e88b317498f3d47a0add24f2d09df09b881058b18b002dc3cfd968099d66d94f76ffd4436f9829de5011b3f226aa49650b02"}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x3f, 0x1, 0x1, 0x2, 0x4, 0xaa}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x5, {{0xf, 0x2, 0x5, 0x1, 0x0, 0x3, 0x3, 0x7f}, 0x2, {0x1, 0xc70, 0x3, 0x14, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x2, "6fa4e8ec0a29105d7931bea427283924584b69e8be628dd09335f4e6077b5e5b0b8fa4017de2e38e6fcdca9119ce996f6ff77d40f9138f2425bd4ce867fa47f526b8c8481b4c7714717b7d9ad1c6ba28"}}}}}, 0x1267) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000001740)=ANY=[@ANYBLOB="b0010000220002002cbd7000fbdbdf251200000004002a00bf00830053068039ad84bcc1b01db45d658d8df0d537df8ccb3c7b8e36ce36d4b6e97013d1999b257af724326102225b52562e05f5ca72acd8c9db56602f6545e753eeea22f9a3556134f6fd481bb54208baa34a06ccfc25e64edf5caad1046fa6ff3e9e156fa2b6914189bed08a6c1ec8dfb56ba6f188bfb59df5a75b2e2fc20e34ca49f3b3d2149601e34479e9c17dbe9879e10c8d13cc158676364b6beda97b42f72827a55b27d422b5617b0a62f714c919c0b97f315c75ad9f81664f020008008700", @ANYRES32=r2, @ANYBLOB="bd0052003045847f4dd69608a435fa537cc85d72c5c51383281f8dea584375a6792e69f4050847c0fd9d98ec09140b4340804cca6d646f6b5d6a7c087b378e470aaafb0b4b5e7f6c46375f58d841f0ead78e12a67aac98df10af3ff58a72d63fa3bcaf21ac7c47c75a4330787c8e2c3bad5435074e579108db546f70c19fe31842a93e74ce414a1cc7fef9be31c59af291615118a88957e1d96ed27e3cb0e32195678b1ae5995061b35d9b82f3b48adcc03b35d002072608bf2dd369e400000008004100", @ANYRES32=r3, @ANYBLOB='\b\x00k\x00', @ANYRES32=r0, @ANYBLOB="be28728a998b32ac708ede592e862e792e82b2422797165dc1c44647e31ea8849f076202ceac527ee0c1a2f2c293b749c4f4571942ad2d2e639cff761f83e8c005ea4062a993b7c3da1a44e00142733fd50d87d29b7ee9c0c5693d781eead27660ca45d45e73a06f530b15f7cd64bf45d6089da41fa6f85f1752ffb07f1280b1b1d2d2cb050d88b18dca6e89274a932faafa3c7c14f736dde8d893f4c9f9c2eb9356f487d20efdc2"], 0x1b0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040850) 03:01:42 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 03:01:42 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200, 0x0, 0x0) 03:01:42 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000003000000aaff02"], 0x0) 03:01:42 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff613db312c3e2699018eb493ab481399803020144267c0ce7abd30eab214ab4691f13b5d26cc6a3373a058c82d8ae249255d19e7fc1f699228b02594b817b429aa6fe964c6fb0352545ed920ed214c6bf71c1f85e8434463a8e08c7e460fac76d02fcbc1f4c8a"], 0x0) 03:01:42 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0) 03:01:42 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 03:01:42 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 03:01:42 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x7, 0x100) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x10003, 0x145, 0x1a}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x10000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x8a00, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) io_submit(0x0, 0x8, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)="85084ab6c9de0cba62c253998a91ef388af167cb52ec83670f50ba5b13b867510b67f9989e8fe44eda5901d5b0fc59f50a7bc9fed487fb50fe8414752e194c1f3da5866448847322", 0x48, 0xffffffff80000001, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x80, r0, &(0x7f00000002c0)="061863e760316ce418f5f1a84649231a21ec4db468f9fcabe72a8a32e2b7f18ff62a3e41a122314d1c6b833e99cd19c74d0f89cc08f585b81b04e5be88773b239834c457f6d13d6de98dd1ce8374ff8b25cd3aa2a0ddb8e2", 0x58, 0x0, 0x0, 0x2, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000000340)="16f6d24a9452dd547e995638ef5d9473158d89698f35bf8edcd008db4e600c578a71a6c42771ff95e7422d85e04b86255a27823d2746a40c1b5813030cdc13c93a3e6a902a53f641b11e008b1426fcd9fe36608d7cb16fc8e272cfe5cc81da1299078c3fc87d3db458d9d18716aed1db6284a98f5b1d599058ac40e24f1d816912934bb7e16bdec1614d90d960b93b43ec8ab74ee85cedbcefb4959d4a3b178bf26bfa5909cde46c38ef39c87e8b08aa41f4e4b8", 0xb4, 0x9, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000440)="304449cf9addc422394cb9e6ceac837421bc7936caea86285cb6e05fed33f35657b7ae1954d43eedd75728423c7d0c7b3f00b747f589bf7c192d9c6c1a75776ad6f83562fce82798fb2d8d4c96966ea8465e351c971311052f756b90cc1ddf73bc66830f18609963780297758c7a3a9246846bcdd9b12101ce08a4ffa8764b6bc5db108f4d49851c4b", 0x89, 0x8000}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x1000, r3, &(0x7f0000000540)="36ba17f3474773b5b80b78202e", 0xd, 0x4, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f00000005c0)="63b5ada5e6a745d9bdd9edb5f4e1638ef83ab7bf744dcfc75c6d500bb4069a53512c251e18275511a3e10c139170615a082a6dd97334a7", 0x37, 0x9, 0x0, 0x31e132556e2a3e5f}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x3f, 0xffffffffffffffff, &(0x7f0000000640)="56320de7045409d7afaad0119d3345442b730a28c4ec2f2566892f308b7502c3847babcba15e5074f2d51fbe1ac5f7c3af84d524f01e8b3df0e324596a6f5b7c60e5b51711", 0x45, 0x80000000, 0x0, 0x1, r5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x3f, r6, &(0x7f0000000740)="cd20cfdebfb67f5be50c30", 0xb, 0x19, 0x0, 0x1}]) fallocate(0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x9) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x3d, &(0x7f0000000040)=""/21, &(0x7f0000000080)=0x15) openat(0xffffffffffffffff, 0x0, 0x0, 0x102) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff}, 0xe) 03:01:42 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000005000000aaff02"], 0x0) [ 2347.377544] FAULT_INJECTION: forcing a failure. [ 2347.377544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2347.379343] CPU: 0 PID: 11661 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2347.380234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2347.381307] Call Trace: [ 2347.381655] dump_stack+0x107/0x167 [ 2347.382132] should_fail.cold+0x5/0xa [ 2347.382643] _copy_from_user+0x2e/0x1b0 [ 2347.383161] iovec_from_user+0x141/0x400 [ 2347.383687] __import_iovec+0x67/0x590 [ 2347.384187] ? SOFTIRQ_verbose+0x10/0x10 [ 2347.384708] ? lock_downgrade+0x6d0/0x6d0 [ 2347.385245] io_import_iovec+0x581/0x1120 [ 2347.385784] ? io_complete_rw+0x230/0x230 [ 2347.386316] ? lock_downgrade+0x6d0/0x6d0 [ 2347.386861] ? mark_lock+0xf5/0x2df0 [ 2347.387347] io_read+0xe14/0x11e0 [ 2347.387795] ? lock_chain_count+0x20/0x20 [ 2347.388335] ? __is_insn_slot_addr+0x14c/0x290 [ 2347.388930] ? __lock_acquire+0x1657/0x5b00 [ 2347.389490] ? kiocb_done+0xc90/0xc90 [ 2347.389980] ? mark_lock+0xf5/0x2df0 [ 2347.390462] ? lock_chain_count+0x20/0x20 [ 2347.391006] ? __lock_acquire+0x1657/0x5b00 [ 2347.391566] ? mark_lock+0xf5/0x2df0 [ 2347.392055] io_issue_sqe+0x2e8a/0x77b0 [ 2347.392568] ? find_held_lock+0x2c/0x110 [ 2347.393092] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2347.393760] ? SOFTIRQ_verbose+0x10/0x10 [ 2347.394277] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2347.394899] ? lock_downgrade+0x6d0/0x6d0 [ 2347.395427] ? io_connect+0x610/0x610 [ 2347.395917] ? mark_held_locks+0x9e/0xe0 [ 2347.396432] ? find_held_lock+0x2c/0x110 [ 2347.396955] ? __fget_files+0x2cf/0x520 [ 2347.397463] ? lock_downgrade+0x6d0/0x6d0 [ 2347.397998] __io_queue_sqe+0x90/0x9d0 [ 2347.398499] ? __fget_files+0x253/0x520 [ 2347.399017] ? io_issue_sqe+0x77b0/0x77b0 [ 2347.399544] ? __fget_files+0x2f8/0x520 [ 2347.400052] ? __io_file_supports_nowait+0x22a/0x510 [ 2347.400704] ? io_prep_rw+0x7f5/0x1050 [ 2347.401205] io_submit_sqes+0x44aa/0x8610 [ 2347.401757] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2347.402399] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2347.403026] ? find_held_lock+0x2c/0x110 [ 2347.403546] ? io_submit_sqes+0x8610/0x8610 [ 2347.404099] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2347.404717] ? wait_for_completion_io+0x270/0x270 [ 2347.405337] ? rcu_read_lock_any_held+0x75/0xa0 [ 2347.405950] ? vfs_write+0x354/0xb10 [ 2347.406432] ? fput_many+0x2f/0x1a0 [ 2347.406906] ? ksys_write+0x1a9/0x260 [ 2347.407397] ? __ia32_sys_read+0xb0/0xb0 [ 2347.407921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2347.408598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.409259] do_syscall_64+0x33/0x40 [ 2347.409739] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2347.410397] RIP: 0033:0x7f1e32d62b19 [ 2347.410881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2347.413241] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2347.414203] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2347.415162] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2347.416075] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.416988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2347.417899] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:01:43 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:01:43 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800, 0x0, 0x0) 03:01:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000003c000000aaff02"], 0x0) 03:01:43 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a48a}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xd0b9f000) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) 03:01:43 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00, 0x0, 0x0) 03:01:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000060000000aaff02"], 0x0) 03:01:43 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x6) 03:01:57 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0xeba) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa8eaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) syz_io_uring_setup(0x3d35, &(0x7f0000000040)={0x0, 0xc75, 0x0, 0x0, 0x1e0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000540)=0x0) r5 = syz_io_uring_complete(0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r5, &(0x7f0000000440), &(0x7f0000000300)='./file0\x00', 0x8, 0x0, 0x1}, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000580)=0x10) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r6, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x1, 0x10000}) syz_io_uring_submit(r2, r4, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x3, 0x0, r7, &(0x7f0000000340), &(0x7f0000000180)='./file0\x00', 0x7ff, 0x100, 0x1}, 0x1) 03:01:57 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0xffff, 0x3}) fsmount(r2, 0x1, 0x1) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800010001000000000000"], 0x2f64) 03:01:57 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 03:01:57 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 03:01:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000030000aaff02"], 0x0) 03:01:57 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 03:01:57 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 03:01:57 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) [ 2361.576361] FAULT_INJECTION: forcing a failure. [ 2361.576361] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.578245] CPU: 0 PID: 11709 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2361.579261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.580459] Call Trace: [ 2361.580823] dump_stack+0x107/0x167 [ 2361.581324] should_fail.cold+0x5/0xa [ 2361.581878] ? io_setup_async_rw+0x180/0x580 [ 2361.582492] should_failslab+0x5/0x20 [ 2361.583036] __kmalloc+0x72/0x390 [ 2361.583538] io_setup_async_rw+0x180/0x580 [ 2361.584140] ? iov_iter_restore+0x195/0x3a0 [ 2361.584754] io_read+0x775/0x11e0 [ 2361.585258] ? __is_insn_slot_addr+0x14c/0x290 [ 2361.585913] ? kiocb_done+0xc90/0xc90 [ 2361.586453] ? mark_lock+0xf5/0x2df0 [ 2361.586982] ? lock_chain_count+0x20/0x20 [ 2361.587569] ? __lock_acquire+0xbb1/0x5b00 [ 2361.588142] io_issue_sqe+0x2e8a/0x77b0 [ 2361.588686] ? find_held_lock+0x2c/0x110 [ 2361.589268] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2361.590018] ? SOFTIRQ_verbose+0x10/0x10 [ 2361.590595] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2361.591277] ? lock_downgrade+0x6d0/0x6d0 [ 2361.591840] ? io_connect+0x610/0x610 [ 2361.592358] ? lock_acquire+0x197/0x470 [ 2361.592910] ? find_held_lock+0x2c/0x110 [ 2361.593463] ? __fget_files+0x2cf/0x520 [ 2361.594002] ? lock_downgrade+0x6d0/0x6d0 [ 2361.594568] __io_queue_sqe+0x90/0x9d0 [ 2361.595115] ? io_issue_sqe+0x77b0/0x77b0 [ 2361.595670] ? __fget_files+0x2f8/0x520 [ 2361.596213] ? __io_file_supports_nowait+0x22a/0x510 [ 2361.596894] ? io_prep_rw+0x7f5/0x1050 [ 2361.597426] io_submit_sqes+0x44aa/0x8610 [ 2361.598008] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2361.598680] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2361.599343] ? find_held_lock+0x2c/0x110 [ 2361.599921] ? io_submit_sqes+0x8610/0x8610 [ 2361.600543] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2361.601230] ? wait_for_completion_io+0x270/0x270 [ 2361.601884] ? rcu_read_lock_any_held+0x75/0xa0 [ 2361.602522] ? vfs_write+0x354/0xb10 [ 2361.603061] ? fput_many+0x2f/0x1a0 [ 2361.603575] ? ksys_write+0x1a9/0x260 [ 2361.604124] ? __ia32_sys_read+0xb0/0xb0 [ 2361.604704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2361.605452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2361.606185] do_syscall_64+0x33/0x40 [ 2361.606707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2361.607436] RIP: 0033:0x7f1e32d62b19 [ 2361.607967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.610566] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2361.611656] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2361.612623] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2361.613579] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.614539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.615515] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:01:57 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2023014, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) openat(r0, &(0x7f0000000080)='./file0\x00', 0x1cda02, 0x110) 03:01:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000050000aaff02"], 0x0) 03:01:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000003c0000aaff02"], 0x0) 03:01:57 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400, 0x0, 0x0) 03:01:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000400000aaff02"], 0x0) 03:01:57 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:01:57 executing program 3: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000001180)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1433, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x113}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000001300)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4109, 0x100d}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) 03:01:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000600000aaff02"], 0x0) 03:01:57 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 03:01:57 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000001aaff02"], 0x0) 03:01:57 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 03:01:57 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00, 0x0, 0x0) 03:02:14 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 03:02:14 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 03:02:14 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) syz_emit_ethernet(0xa9, &(0x7f00000001c0)={@random="83708c8ba9c4", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc={0x4, {@llc={0xd4, 0xfe, '^0', "a739fce13f1ff92e396aa30b0235ff7583f73fdd5865e0a120f628fa14af36b06d3488a74a73ccabfc51964fce6f7c4e2198100ab4717042b2f60511a16afe0e1741d773fd29ea59d9a5e8fdf0678a74bd32fb313c1f5237a9c977908759bdaa53bbd4b1dc4ea79b4ef156ee2fd320c5e24c88d85cdfaf2252a1fde12ab5db4dc172dd4f8909c504615c42c41f893dec786359ad53d848"}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x7ab, 0xa11, 0x657, 0xa53]}) syz_emit_ethernet(0x12d0, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "0f7e0e", 0x1296, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, {[@fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x2, 0x68}, @fragment={0x2c, 0x0, 0x1, 0x0, 0x0, 0x6, 0x67}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xbb, 0x1, [0x55ed, 0x6], "133f5826d051e87ac915ce68ba0cb2addcbdf69cac45e757c23df7c81a5c24cbbeac4d6eaad9c3b5b9c83d13cdc86addbf3dba65a5c1428b9a4f534ddf9984fe769a9f0a42feddb5ac3c2238d5b554d60c36137154cfd6af2e54589445f8b01f4d474cb2171b65bc244f479420ed0a79c818fc569203f3d843a18de7783d837c3b6ff88768d58a67ae366bc0d1ccd0ea08edd6c897f0b564bd2e5108e7d9bb99d3651025caf8c81704220352baba3e23464549d45f18bfb8d4a591"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x2], "fda576206ac2acf86873f7e17b427f32a25fbab264e653594e00f159c164373578ad1ec8c2c192b8e28079155097cbba6df85f5797fae049aa89f2f5cd1195dbdc7f5196ccb1a0e68a9e4c922ac1c0e806fe4b0a75cbee6976f3aa5a7c1df9f716f079ac0ec32a3cc07cf0262d4b7ee033e360b971793c0883dcf52a0d50a973eb355a106d5a04ced433428926c518bf2c1883f53ad5bd4695300842219a7826ed34b00782ef31e28242c55d0d5db072e174e61a5db083965c6299558b2b188a614e7697a9aa2d9182f3982eac7f0d5a8ed4aac2a691b27ea12e5870e2809d35c252eae98105037d855cff0e9287"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x2, 0x16bd], "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"}, {0x8, 0x88be, 0x4, {{0x4, 0x1, 0xfb, 0x0, 0x1, 0x1, 0x2, 0x20}, 0x1, {0xfff}}}, {0x8, 0x22eb, 0x3, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x2, {0x0, 0x5, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "253462d2b5eb72150065752397a6fbd7b4d29e84406c9de2ca4823713a95efcdb2e8ea3499571507400cef82bf8dc7552651bcc0582584e56ca28925525ef161cb1f76b6b130b0740cb3f06272be92b8579bacb5ef3e75fa64dfdea6f84973eb7ac0b1933f5e8b8a9cc7b1b151f43b6aaedfb3f46d9965d9bed254b57d1d6a2ec52f40a838f6fc668d2bcd2908"}}}}}}}, &(0x7f0000000080)={0x1, 0x4, [0x870, 0x470, 0x9a7, 0x2]}) syz_emit_ethernet(0x1345, &(0x7f0000002b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a1020008907800002207b9f968a0030002220928c8116b58513500006543cb9717f1b251b5950c44f573fca1092f8cd19e001205bf401d63816ebb500cfcd2ccbd1d1d045aa6764b9fa2705fdf04b1a0938540d15673657e5ce36295881f82f81588565c71613c1e8515ddd956703df652ca8fcb5c8d2a209849f780916b1a27fdc35c0bebe82a9d71e84cf8a09c9572e163a61e7e518148a2dde1cad0a96e8a5b8508586b5bd3dcb260a61d2e51959f5639d1bcb37f249d59a8fb62686c343088e42dcd5fc4901a862da88000eb9399729aa12de7acc760dd"], &(0x7f0000000040)={0x0, 0x4, [0xb37, 0x3d2, 0x36f, 0x87e]}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0x20, 0x6}) 03:02:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000003aaff02"], 0x0) 03:02:14 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 03:02:14 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000, 0x0, 0x0) 03:02:14 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 03:02:14 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) syz_mount_image$nfs(0x0, &(0x7f0000001d00)='./file0\x00', 0x0, 0x2, &(0x7f0000003180)=[{&(0x7f0000001e00)="1d", 0x1, 0x4000000000000}, {&(0x7f0000001e80)="e3", 0x1}], 0x0, 0x0) [ 2379.115780] loop3: detected capacity change from 0 to 8388608 03:02:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000005aaff02"], 0x0) [ 2379.127694] FAULT_INJECTION: forcing a failure. [ 2379.127694] name failslab, interval 1, probability 0, space 0, times 0 [ 2379.130326] CPU: 1 PID: 11770 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2379.131845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2379.133644] Call Trace: [ 2379.134225] dump_stack+0x107/0x167 [ 2379.135029] should_fail.cold+0x5/0xa [ 2379.135864] ? create_object.isra.0+0x3a/0xa20 [ 2379.136858] should_failslab+0x5/0x20 [ 2379.137690] kmem_cache_alloc+0x5b/0x310 [ 2379.138587] create_object.isra.0+0x3a/0xa20 [ 2379.139558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2379.140666] __kmalloc+0x16e/0x390 [ 2379.141445] io_setup_async_rw+0x180/0x580 [ 2379.142359] ? iov_iter_restore+0x195/0x3a0 [ 2379.143307] io_read+0x775/0x11e0 [ 2379.144066] ? __is_insn_slot_addr+0x14c/0x290 [ 2379.145069] ? kiocb_done+0xc90/0xc90 [ 2379.145893] ? mark_lock+0xf5/0x2df0 [ 2379.146707] ? lock_chain_count+0x20/0x20 [ 2379.147649] ? __lock_acquire+0xbb1/0x5b00 [ 2379.148565] io_issue_sqe+0x2e8a/0x77b0 [ 2379.149425] ? find_held_lock+0x2c/0x110 [ 2379.150304] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2379.151431] ? SOFTIRQ_verbose+0x10/0x10 [ 2379.152298] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2379.153309] ? lock_downgrade+0x6d0/0x6d0 [ 2379.154197] ? io_connect+0x610/0x610 [ 2379.155025] ? lock_acquire+0x197/0x470 [ 2379.155875] ? find_held_lock+0x2c/0x110 [ 2379.156750] ? __fget_files+0x2cf/0x520 [ 2379.157601] ? lock_downgrade+0x6d0/0x6d0 [ 2379.158494] __io_queue_sqe+0x90/0x9d0 [ 2379.159343] ? io_issue_sqe+0x77b0/0x77b0 [ 2379.160228] ? __fget_files+0x2f8/0x520 [ 2379.161079] ? __io_file_supports_nowait+0x22a/0x510 [ 2379.162165] ? io_prep_rw+0x7f5/0x1050 [ 2379.163014] io_submit_sqes+0x44aa/0x8610 [ 2379.163934] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2379.164999] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2379.166037] ? find_held_lock+0x2c/0x110 [ 2379.166912] ? io_submit_sqes+0x8610/0x8610 [ 2379.167862] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2379.168898] ? wait_for_completion_io+0x270/0x270 [ 2379.169931] ? rcu_read_lock_any_held+0x75/0xa0 [ 2379.170923] ? vfs_write+0x354/0xb10 [ 2379.171733] ? fput_many+0x2f/0x1a0 [ 2379.172575] ? ksys_write+0x1a9/0x260 [ 2379.173500] ? __ia32_sys_read+0xb0/0xb0 [ 2379.174492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2379.175765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2379.177024] do_syscall_64+0x33/0x40 [ 2379.177926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2379.179172] RIP: 0033:0x7f1e32d62b19 [ 2379.180074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2379.184538] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2379.186384] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2379.188122] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2379.189850] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2379.191586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2379.193314] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2379.221123] loop3: detected capacity change from 0 to 8388608 03:02:14 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) 03:02:14 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600, 0x0, 0x0) 03:02:14 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4bc4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:02:14 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) [ 2379.452002] FAULT_INJECTION: forcing a failure. [ 2379.452002] name failslab, interval 1, probability 0, space 0, times 0 [ 2379.453641] CPU: 0 PID: 11800 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2379.454522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2379.455524] Call Trace: [ 2379.455864] dump_stack+0x107/0x167 [ 2379.456329] should_fail.cold+0x5/0xa [ 2379.456819] ? __io_queue_sqe+0x666/0x9d0 [ 2379.457349] should_failslab+0x5/0x20 [ 2379.457844] kmem_cache_alloc_trace+0x55/0x320 [ 2379.458423] ? lock_downgrade+0x6d0/0x6d0 [ 2379.458962] __io_queue_sqe+0x666/0x9d0 [ 2379.459478] ? io_issue_sqe+0x77b0/0x77b0 [ 2379.459999] ? __fget_files+0x2f8/0x520 [ 2379.460502] ? __io_file_supports_nowait+0x22a/0x510 [ 2379.461139] ? io_prep_rw+0x7f5/0x1050 [ 2379.461639] io_submit_sqes+0x44aa/0x8610 [ 2379.462180] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2379.462809] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2379.463428] ? find_held_lock+0x2c/0x110 [ 2379.463949] ? io_submit_sqes+0x8610/0x8610 [ 2379.464503] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2379.465107] ? wait_for_completion_io+0x270/0x270 [ 2379.465716] ? rcu_read_lock_any_held+0x75/0xa0 [ 2379.466303] ? vfs_write+0x354/0xb10 [ 2379.466772] ? fput_many+0x2f/0x1a0 [ 2379.467250] ? ksys_write+0x1a9/0x260 [ 2379.467732] ? __ia32_sys_read+0xb0/0xb0 [ 2379.468249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2379.468912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2379.469577] do_syscall_64+0x33/0x40 [ 2379.470050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2379.470691] RIP: 0033:0x7f1e32d62b19 [ 2379.471176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2379.473508] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2379.474431] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2379.475345] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2379.476250] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2379.477151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2379.478007] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:02:27 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 03:02:27 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00, 0x0, 0x0) 03:02:27 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 03:02:27 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000052889a4f70781d84fa5500a286dd60d0ff4700020600fe8000000000000000000000000000aaff1c368f43aa02cc8e1f502616a518f1dd9a8da74418ecbdcf930ed6fe72627a21af179f19fc2f7fbb6a701ab6b576314c8c5155abac00e000"/119], 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040)) 03:02:27 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000000000003caaff02"], 0x0) 03:02:27 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x5) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x1f, 0x73, 0x9, 0x0, 0x80, 0x804a0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000140), 0x9}, 0x7702, 0x0, 0x81d, 0x2, 0xf3, 0x3, 0x1ff, 0x0, 0x6, 0x0, 0xd53}, 0x0, 0x1, 0xffffffffffffffff, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x80000c, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, r1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xdf, 0x1, 0x0, 0x1, 0x0, 0x2, 0x54210, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ffffd, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x80, 0xf61, 0x6, 0x5, 0x3, 0xa30, 0x8, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f00000000c0)) pkey_free(r0) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x2, 0x2010, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x4, r0) creat(&(0x7f0000000100)='./file1\x00', 0xc0) 03:02:27 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 03:02:27 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) [ 2392.121125] FAULT_INJECTION: forcing a failure. [ 2392.121125] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.123171] CPU: 0 PID: 11817 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2392.124373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2392.125818] Call Trace: [ 2392.126282] dump_stack+0x107/0x167 [ 2392.126918] should_fail.cold+0x5/0xa [ 2392.127582] ? create_object.isra.0+0x3a/0xa20 [ 2392.128364] should_failslab+0x5/0x20 [ 2392.129009] kmem_cache_alloc+0x5b/0x310 [ 2392.129703] create_object.isra.0+0x3a/0xa20 [ 2392.130455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2392.131340] kmem_cache_alloc_trace+0x151/0x320 [ 2392.132131] ? lock_downgrade+0x6d0/0x6d0 [ 2392.132847] __io_queue_sqe+0x666/0x9d0 [ 2392.133527] ? io_issue_sqe+0x77b0/0x77b0 [ 2392.134236] ? __fget_files+0x2f8/0x520 [ 2392.134916] ? __io_file_supports_nowait+0x22a/0x510 [ 2392.135790] ? io_prep_rw+0x7f5/0x1050 [ 2392.136459] io_submit_sqes+0x44aa/0x8610 [ 2392.137200] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2392.138049] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2392.138875] ? find_held_lock+0x2c/0x110 [ 2392.139584] ? io_submit_sqes+0x8610/0x8610 [ 2392.140330] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2392.141162] ? wait_for_completion_io+0x270/0x270 [ 2392.141987] ? rcu_read_lock_any_held+0x75/0xa0 [ 2392.142776] ? vfs_write+0x354/0xb10 [ 2392.143423] ? fput_many+0x2f/0x1a0 [ 2392.144061] ? ksys_write+0x1a9/0x260 [ 2392.144706] ? __ia32_sys_read+0xb0/0xb0 [ 2392.145405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2392.146303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2392.147200] do_syscall_64+0x33/0x40 [ 2392.147846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2392.148723] RIP: 0033:0x7f1e32d62b19 [ 2392.149359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2392.152525] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2392.153821] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2392.155044] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2392.156272] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2392.157489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2392.158738] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:02:27 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000040aaff02"], 0x0) 03:02:27 executing program 3: syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) timer_delete(0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000240)=0x0) timer_gettime(r0, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000002c0)) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0xaa5, 0x9, 0x9, 0xfffffffd, 0x11b2}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private0, r2}, 0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/machinecheck', 0x6281, 0x19) timer_delete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000880)={0x100, &(0x7f0000000640), &(0x7f0000000440), &(0x7f0000000600)=0x0, {0x80041}, &(0x7f0000001e00)=""/102400, 0x19000, &(0x7f0000000980)=""/231, &(0x7f0000000840)}, 0x58) timer_create(0x6, &(0x7f0000000080)={0x0, 0x3, 0x2, @tid=r3}, &(0x7f00000004c0)=0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000540)={{r5, r6+60000000}}, &(0x7f0000000580)) clone3(&(0x7f00000001c0)={0xc8182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:02:27 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e00, 0x0, 0x0) 03:02:27 executing program 4: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000d80)=ANY=[], 0x48, r0) keyctl$get_keyring_id(0x0, r0, 0x7fff) perf_event_open(&(0x7f0000000440)={0x2, 0xbc, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfec4) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "c1bc9cb8aa786d6626886c9f68d1dfc32ad99117562cfb76b2774a5c37955ca14def0d150a6f136135497e897446633f892af6b9339c350adb3ccd3aef066bf1", 0x2e}, 0x48, r0) keyctl$assume_authority(0x10, r3) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x10000}) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x1e, 0x0, 0x70bd29, 0x25dfdbfd, {0x1a}, [@generic="3f3972f4f8bd1d1f36fa73a7061935f232d2de458d88968c23d6245da5d0af5149388e2b17f79338b72a468108ad4b448c75bfca3f823bb0717db0e00d65ded599799dd3566cc0"]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) 03:02:27 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e, 0x0, 0x0, 0x0) 03:02:27 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000060aaff02"], 0x0) 03:02:27 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 03:02:28 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1", 0x1}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)}, 0x1, 0x0, 0x0, 0x40814}, 0x4040000) syz_io_uring_setup(0x67bd, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x7f, 0x8, 0x7, 0x0, 0x8000, 0x520, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb34, 0x0, @perf_config_ext, 0x4, 0x0, 0x4, 0x2, 0x1, 0x3, 0x9, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f00000003c0)}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x1, 0x1, 0x1}, 0x1ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x10000) syz_io_uring_submit(0x0, r2, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x1}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)="826080e4", 0x4}], 0x1}}, 0x1) syz_io_uring_setup(0x200028a0, &(0x7f0000000300)={0x0, 0xcbeb, 0x8, 0x2, 0x23, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000380)) [ 2392.468156] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.474495] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.476956] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.477723] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.478731] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.488591] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.490951] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.491725] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.498153] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.504563] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.505439] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.506349] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.509650] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.510524] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.511499] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.512330] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.531459] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.532443] ieee802154 phy0 wpan0: encryption failed: -22 [ 2392.537688] ieee802154 phy0 wpan0: encryption failed: -22 03:02:43 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e00, 0x0, 0x0, 0x0) 03:02:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000fffffff5aaff02"], 0x0) 03:02:43 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 03:02:43 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x400, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000640)='net/hci\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x33, 0x0, 0x4, 0xed, 0x0, 0x7, 0x5005, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf4a, 0x1, @perf_config_ext={0x977, 0x430}, 0x2000, 0x5, 0x10001, 0x7, 0x4, 0x1f, 0x4b5, 0x0, 0xfcb7, 0x0, 0x2}, r0, 0xa, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:02:43 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 03:02:43 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) 03:02:43 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 03:02:43 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1", 0x1}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)}, 0x1, 0x0, 0x0, 0x40814}, 0x4040000) syz_io_uring_setup(0x67bd, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x7f, 0x8, 0x7, 0x0, 0x8000, 0x520, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb34, 0x0, @perf_config_ext, 0x4, 0x0, 0x4, 0x2, 0x1, 0x3, 0x9, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f00000003c0)}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x1, 0x1, 0x1}, 0x1ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8}, 0x10000) syz_io_uring_submit(0x0, r2, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x1}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)="826080e4", 0x4}], 0x1}}, 0x1) syz_io_uring_setup(0x200028a0, &(0x7f0000000300)={0x0, 0xcbeb, 0x8, 0x2, 0x23, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000380)) [ 2408.448234] FAULT_INJECTION: forcing a failure. [ 2408.448234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2408.450804] CPU: 1 PID: 11889 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2408.452294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2408.454049] Call Trace: [ 2408.454623] dump_stack+0x107/0x167 [ 2408.455420] should_fail.cold+0x5/0xa [ 2408.456249] _copy_from_user+0x2e/0x1b0 [ 2408.457098] iovec_from_user+0x141/0x400 [ 2408.457970] __import_iovec+0x67/0x590 [ 2408.458803] ? SOFTIRQ_verbose+0x10/0x10 [ 2408.459683] ? lock_downgrade+0x6d0/0x6d0 [ 2408.460573] io_import_iovec+0x581/0x1120 [ 2408.461476] ? io_complete_rw+0x230/0x230 [ 2408.462363] ? lock_downgrade+0x6d0/0x6d0 [ 2408.463253] ? mark_lock+0xf5/0x2df0 [ 2408.464064] io_read+0xe14/0x11e0 [ 2408.464813] ? lock_chain_count+0x20/0x20 [ 2408.465699] ? __is_insn_slot_addr+0x14c/0x290 [ 2408.466692] ? __lock_acquire+0x1657/0x5b00 [ 2408.467624] ? kiocb_done+0xc90/0xc90 [ 2408.468439] ? mark_lock+0xf5/0x2df0 [ 2408.469245] ? lock_chain_count+0x20/0x20 [ 2408.470143] ? __lock_acquire+0x1657/0x5b00 [ 2408.471098] ? __lock_acquire+0xbb1/0x5b00 [ 2408.472019] io_issue_sqe+0x2e8a/0x77b0 03:02:44 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000f5ffffffaaff02"], 0x0) [ 2408.472876] ? find_held_lock+0x2c/0x110 [ 2408.474130] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2408.475515] ? SOFTIRQ_verbose+0x10/0x10 [ 2408.476560] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2408.477785] ? lock_downgrade+0x6d0/0x6d0 [ 2408.478861] ? io_connect+0x610/0x610 [ 2408.479865] ? lock_acquire+0x197/0x470 [ 2408.480911] ? find_held_lock+0x2c/0x110 [ 2408.481986] ? __fget_files+0x2cf/0x520 [ 2408.483014] ? lock_downgrade+0x6d0/0x6d0 [ 2408.484103] __io_queue_sqe+0x90/0x9d0 [ 2408.485012] ? io_issue_sqe+0x77b0/0x77b0 [ 2408.486067] ? __fget_files+0x2f8/0x520 [ 2408.487093] ? __io_file_supports_nowait+0x22a/0x510 [ 2408.488406] ? io_prep_rw+0x7f5/0x1050 [ 2408.489310] io_submit_sqes+0x44aa/0x8610 [ 2408.490410] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2408.491579] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2408.492804] ? find_held_lock+0x2c/0x110 [ 2408.493746] ? io_submit_sqes+0x8610/0x8610 [ 2408.494667] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2408.495704] ? wait_for_completion_io+0x270/0x270 [ 2408.496731] ? rcu_read_lock_any_held+0x75/0xa0 [ 2408.497713] ? vfs_write+0x354/0xb10 [ 2408.498506] ? fput_many+0x2f/0x1a0 [ 2408.499290] ? ksys_write+0x1a9/0x260 [ 2408.500102] ? __ia32_sys_read+0xb0/0xb0 [ 2408.500974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2408.502085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2408.503182] do_syscall_64+0x33/0x40 [ 2408.503989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2408.505072] RIP: 0033:0x7f1e32d62b19 [ 2408.505863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2408.509725] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2408.511354] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2408.512854] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 03:02:44 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000b19200000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) [ 2408.514362] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2408.516229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2408.517924] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2408.540768] ieee802154 phy0 wpan0: encryption failed: -22 [ 2408.547158] ieee802154 phy0 wpan0: encryption failed: -22 [ 2408.552398] ieee802154 phy0 wpan0: encryption failed: -22 [ 2408.559076] ieee802154 phy0 wpan0: encryption failed: -22 [ 2408.566621] ieee802154 phy0 wpan0: encryption failed: -22 [ 2408.571063] ieee802154 phy0 wpan0: encryption failed: -22 [ 2408.579576] ieee802154 phy0 wpan0: encryption failed: -22 03:02:44 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) [ 2408.593774] ieee802154 phy0 wpan0: encryption failed: -22 03:02:44 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000030000aaff02"], 0x0) 03:02:44 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x15163221}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x45d9, 0x2, 0x1, &(0x7f00000000c0)={[0x8000]}, 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x9, 0x0, 0x4, 0x0, 0x1, 0x20800, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x17b0, 0x9}, 0x1a380, 0xf674, 0xffff, 0x0, 0x3f, 0x7ff, 0x6d9, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaa5870ac442306c62cdce2f909aaaa00000000000086dd60d0ff47000206a1fe800000588fb3c9029a11858cacbcc1c58072fa8adee8dcac4f402928b993432985540144a4fe05efeaf5"], 0x0) 03:02:44 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000050000aaff02"], 0x0) 03:02:44 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:02:44 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000, 0x0, 0x0) 03:02:44 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) 03:02:44 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 03:02:58 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) 03:02:58 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 03:02:58 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 03:02:58 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:02:58 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc000000, 0x0, 0x0) 03:02:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80000000000000000000003c0000aaff02"], 0x0) 03:02:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x3, @multicast, 'veth0_to_bridge\x00'}}, 0x80, &(0x7f0000002480)}, 0x4000000) 03:02:58 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) [ 2422.994734] FAULT_INJECTION: forcing a failure. [ 2422.994734] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.996252] CPU: 1 PID: 11945 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2422.997118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.998154] Call Trace: [ 2422.998490] dump_stack+0x107/0x167 [ 2422.998947] should_fail.cold+0x5/0xa [ 2422.999441] ? io_setup_async_rw+0x180/0x580 [ 2422.999995] should_failslab+0x5/0x20 [ 2423.000471] __kmalloc+0x72/0x390 [ 2423.000914] io_setup_async_rw+0x180/0x580 [ 2423.001445] ? iov_iter_restore+0x195/0x3a0 [ 2423.001988] io_read+0x775/0x11e0 [ 2423.002426] ? __is_insn_slot_addr+0x14c/0x290 [ 2423.003007] ? kiocb_done+0xc90/0xc90 [ 2423.003496] ? mark_lock+0xf5/0x2df0 [ 2423.003981] ? lock_chain_count+0x20/0x20 [ 2423.004685] ? __lock_acquire+0xbb1/0x5b00 [ 2423.005368] io_issue_sqe+0x2e8a/0x77b0 [ 2423.006008] ? find_held_lock+0x2c/0x110 [ 2423.006679] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2423.007549] ? SOFTIRQ_verbose+0x10/0x10 [ 2423.008216] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2423.008981] ? lock_downgrade+0x6d0/0x6d0 [ 2423.009653] ? io_connect+0x610/0x610 [ 2423.010278] ? lock_acquire+0x197/0x470 [ 2423.010929] ? find_held_lock+0x2c/0x110 [ 2423.011595] ? __fget_files+0x2cf/0x520 [ 2423.012249] ? lock_downgrade+0x6d0/0x6d0 [ 2423.012923] __io_queue_sqe+0x90/0x9d0 [ 2423.013556] ? io_issue_sqe+0x77b0/0x77b0 [ 2423.014229] ? __fget_files+0x2f8/0x520 [ 2423.014861] ? __io_file_supports_nowait+0x22a/0x510 [ 2423.015685] ? io_prep_rw+0x7f5/0x1050 [ 2423.016314] io_submit_sqes+0x44aa/0x8610 [ 2423.016997] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2423.017795] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2423.018574] ? find_held_lock+0x2c/0x110 [ 2423.019226] ? io_submit_sqes+0x8610/0x8610 [ 2423.019938] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2423.020715] ? wait_for_completion_io+0x270/0x270 [ 2423.021322] ? rcu_read_lock_any_held+0x75/0xa0 [ 2423.022073] ? vfs_write+0x354/0xb10 [ 2423.022665] ? fput_many+0x2f/0x1a0 [ 2423.023254] ? ksys_write+0x1a9/0x260 [ 2423.023880] ? __ia32_sys_read+0xb0/0xb0 [ 2423.024534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2423.025383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2423.026220] do_syscall_64+0x33/0x40 [ 2423.026817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2423.027656] RIP: 0033:0x7f1e32d62b19 [ 2423.028254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2423.031205] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2423.032464] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2423.033622] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2423.034749] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2423.035906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2423.037048] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:02:58 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x40000, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00280900000086d960d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:02:58 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000, 0x0, 0x0) 03:02:58 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) syz_io_uring_setup(0x2c99, &(0x7f0000000340)={0x0, 0x28c, 0x4, 0x2, 0x313, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000280)=""/165, &(0x7f00000001c0)=0xa5) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x404681, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000500)=0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r7, 0x70c1, {0x0, r8}, 0x7, 0xa, 0x1, {0x0, 0x0, r4}}, 0xfffffffe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xbb8}, 0x1, 0x0, 0x0, 0x881}, 0x4000) io_uring_enter(r0, 0x800012d, 0x4, 0x0, 0x0, 0x0) 03:02:58 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000600000aaff02"], 0x0) 03:02:58 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 03:02:58 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000800000000000000000aaff1ee4ee29050367db04dde9f8bc8a3182680d36d26859c7a9da082285b32d38a57e3f8bc95c10682a5059824c652294edc5867f19dd6c996e182c8a1d695a629be9d8569fd086c75a6ea67e84e38271c9fe347dc3e288ee3ccbf4dc545e9e936efc57f444a7144e28c39745f6aa6e342c5209204d16d4dd76c9aa9a34f87693b918"], 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x4, 0xfa, 0x81, 0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3ff, 0x2, @perf_config_ext={0x80000000, 0xe41}, 0x2a900, 0x2656, 0x3, 0x2, 0xfffffffffffff3ed, 0x8000, 0x8000, 0x0, 0x4709c8f0, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x1) 03:02:58 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x12000000, 0x0, 0x0) 03:02:58 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) [ 2423.437536] FAULT_INJECTION: forcing a failure. [ 2423.437536] name failslab, interval 1, probability 0, space 0, times 0 [ 2423.439041] CPU: 1 PID: 11982 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2423.440026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2423.440920] Call Trace: [ 2423.441293] dump_stack+0x107/0x167 [ 2423.441804] should_fail.cold+0x5/0xa [ 2423.442341] ? create_object.isra.0+0x3a/0xa20 [ 2423.442985] should_failslab+0x5/0x20 [ 2423.443534] kmem_cache_alloc+0x5b/0x310 [ 2423.444109] create_object.isra.0+0x3a/0xa20 [ 2423.444723] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2423.445440] __kmalloc+0x16e/0x390 [ 2423.445943] io_setup_async_rw+0x180/0x580 [ 2423.446538] ? iov_iter_restore+0x195/0x3a0 [ 2423.447147] io_read+0x775/0x11e0 [ 2423.447644] ? __is_insn_slot_addr+0x14c/0x290 [ 2423.448298] ? kiocb_done+0xc90/0xc90 [ 2423.448833] ? mark_lock+0xf5/0x2df0 [ 2423.449360] ? lock_chain_count+0x20/0x20 [ 2423.449961] ? __lock_acquire+0xbb1/0x5b00 [ 2423.450561] io_issue_sqe+0x2e8a/0x77b0 [ 2423.451119] ? find_held_lock+0x2c/0x110 [ 2423.451710] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2423.452446] ? SOFTIRQ_verbose+0x10/0x10 [ 2423.453012] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2423.453676] ? lock_downgrade+0x6d0/0x6d0 [ 2423.454252] ? io_connect+0x610/0x610 [ 2423.454790] ? lock_acquire+0x197/0x470 [ 2423.455351] ? find_held_lock+0x2c/0x110 [ 2423.455935] ? __fget_files+0x2cf/0x520 [ 2423.456491] ? lock_downgrade+0x6d0/0x6d0 [ 2423.457076] __io_queue_sqe+0x90/0x9d0 [ 2423.457632] ? io_issue_sqe+0x77b0/0x77b0 [ 2423.458217] ? __fget_files+0x2f8/0x520 [ 2423.458776] ? __io_file_supports_nowait+0x22a/0x510 [ 2423.459498] ? io_prep_rw+0x7f5/0x1050 [ 2423.460049] io_submit_sqes+0x44aa/0x8610 [ 2423.460647] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2423.461345] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2423.462022] ? find_held_lock+0x2c/0x110 [ 2423.462603] ? io_submit_sqes+0x8610/0x8610 [ 2423.463212] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2423.463897] ? wait_for_completion_io+0x270/0x270 [ 2423.464574] ? rcu_read_lock_any_held+0x75/0xa0 [ 2423.465220] ? vfs_write+0x354/0xb10 [ 2423.465733] ? fput_many+0x2f/0x1a0 [ 2423.466243] ? ksys_write+0x1a9/0x260 [ 2423.466779] ? __ia32_sys_read+0xb0/0xb0 [ 2423.467354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2423.468096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2423.468828] do_syscall_64+0x33/0x40 [ 2423.469344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2423.470058] RIP: 0033:0x7f1e32d62b19 [ 2423.470581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2423.473168] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2423.474232] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2423.475231] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2423.476236] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2423.477235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2423.478237] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:03:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000300aaff02"], 0x0) 03:03:15 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 03:03:15 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 03:03:15 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e, 0x0, 0x0, 0x0) 03:03:15 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4e3d6103c1"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "dce77cb065cf1e6053cbc9fe93"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "31f1e7d947"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d6b94f91d5"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2d3303203c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xd28cf56863c3da71}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4815}, 0x8c4) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000040dff4655f000000000000002e0001000000000000000b", 0x56, 0x400}], 0x0, &(0x7f00000004c0)=ANY=[]) 03:03:15 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x18000000, 0x0, 0x0) 03:03:15 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:03:15 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) [ 2440.186195] loop3: detected capacity change from 0 to 2048 [ 2440.203148] EXT4-fs (loop3): unsupported inode size: 0 [ 2440.204504] EXT4-fs (loop3): blocksize: 2048 [ 2440.221444] FAULT_INJECTION: forcing a failure. [ 2440.221444] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.224004] CPU: 1 PID: 12008 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2440.225517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.227332] Call Trace: [ 2440.227922] dump_stack+0x107/0x167 [ 2440.228721] should_fail.cold+0x5/0xa [ 2440.229563] ? __io_queue_sqe+0x666/0x9d0 [ 2440.230467] should_failslab+0x5/0x20 [ 2440.231299] kmem_cache_alloc_trace+0x55/0x320 [ 2440.232305] ? lock_downgrade+0x6d0/0x6d0 [ 2440.233215] __io_queue_sqe+0x666/0x9d0 [ 2440.234088] ? io_issue_sqe+0x77b0/0x77b0 [ 2440.234989] ? __fget_files+0x2f8/0x520 [ 2440.235864] ? __io_file_supports_nowait+0x22a/0x510 [ 2440.236965] ? io_prep_rw+0x7f5/0x1050 [ 2440.237821] io_submit_sqes+0x44aa/0x8610 [ 2440.238757] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2440.239850] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2440.240903] ? find_held_lock+0x2c/0x110 [ 2440.241794] ? io_submit_sqes+0x8610/0x8610 [ 2440.242741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2440.243802] ? wait_for_completion_io+0x270/0x270 [ 2440.244855] ? rcu_read_lock_any_held+0x75/0xa0 [ 2440.245867] ? vfs_write+0x354/0xb10 [ 2440.246683] ? fput_many+0x2f/0x1a0 [ 2440.247502] ? ksys_write+0x1a9/0x260 [ 2440.248388] ? __ia32_sys_read+0xb0/0xb0 [ 2440.249321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2440.250523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2440.251731] do_syscall_64+0x33/0x40 [ 2440.252564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2440.253691] RIP: 0033:0x7f1e32d62b19 [ 2440.254507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.258528] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2440.260213] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2440.261761] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2440.263320] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2440.264867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2440.266413] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:03:15 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000500aaff02"], 0x0) 03:03:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x15d8c0, 0xc0) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r3, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x1, 0x10000}) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x100, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file1', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x40) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d06608f3ec17503e37002b38c1e4d1000000000000000000000000aaff"], 0x0) [ 2440.283231] loop3: detected capacity change from 0 to 2048 [ 2440.289027] EXT4-fs (loop3): unsupported inode size: 0 [ 2440.290769] EXT4-fs (loop3): blocksize: 2048 03:03:16 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e000000, 0x0, 0x0) 03:03:16 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000003c00aaff02"], 0x0) 03:03:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000004000aaff02"], 0x0) 03:03:33 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 03:03:33 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 03:03:33 executing program 4: add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @empty, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x40000006, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) r1 = syz_open_procfs(0x0, 0x0) r2 = getpgid(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0xc3, 0x9, 0xfffffff8, 0x1, @loopback, @empty, 0x80, 0x7800, 0x2, 0x8}}) r4 = gettid() fcntl$setown(r0, 0x8, r2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x8, 0x4, @tid=r4}, &(0x7f0000000000)) openat(r1, &(0x7f0000000180)='./file0\x00', 0x200, 0x82) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002580)) 03:03:33 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 03:03:33 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 03:03:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x7, 0xff, r1}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[]}) clone3(&(0x7f0000000480)={0x2080, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300), {0x2}, &(0x7f0000000380)=""/10, 0xa, &(0x7f0000000900)=""/4096, &(0x7f0000000380)}, 0x58) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000800)=""/188, 0xbc}], 0x1, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x20000060) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3, 0x0, 0x28, 0xc4, 0x0, 0x5, 0x20000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000200), 0x5}, 0x40, 0x6, 0x1, 0x2, 0x800, 0x9, 0x1, 0x0, 0x101, 0x0, 0x4}, r5, 0x4, r3, 0x1) unshare(0x48020200) r6 = inotify_init1(0x80000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000700)={"1592d452eb739669a7f77a0028bab618", r7, 0x0, {0x3ff, 0x7a}, {0x10000, 0x80000001}, 0x100000001, [0xd99, 0xb0c3, 0x0, 0x1000, 0x3, 0x7fffffff, 0x5, 0x7, 0x4, 0x63a, 0x0, 0xffff, 0xaa, 0x10000, 0x1f, 0xfffffffffffffc01]}) 03:03:33 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 03:03:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000006000aaff02"], 0x0) [ 2458.026118] FAULT_INJECTION: forcing a failure. [ 2458.026118] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.028404] CPU: 0 PID: 12055 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2458.029611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.031052] Call Trace: [ 2458.031514] dump_stack+0x107/0x167 [ 2458.032167] should_fail.cold+0x5/0xa [ 2458.032833] ? create_object.isra.0+0x3a/0xa20 [ 2458.033625] should_failslab+0x5/0x20 [ 2458.034284] kmem_cache_alloc+0x5b/0x310 [ 2458.034993] create_object.isra.0+0x3a/0xa20 [ 2458.035754] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2458.036661] kmem_cache_alloc_trace+0x151/0x320 [ 2458.037469] ? lock_downgrade+0x6d0/0x6d0 [ 2458.038199] __io_queue_sqe+0x666/0x9d0 [ 2458.038894] ? io_issue_sqe+0x77b0/0x77b0 [ 2458.039603] ? __fget_files+0x2f8/0x520 [ 2458.040296] ? __io_file_supports_nowait+0x22a/0x510 [ 2458.041166] ? io_prep_rw+0x7f5/0x1050 [ 2458.041840] io_submit_sqes+0x44aa/0x8610 [ 2458.042573] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2458.043426] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2458.044271] ? find_held_lock+0x2c/0x110 [ 2458.044977] ? io_submit_sqes+0x8610/0x8610 [ 2458.045725] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2458.046555] ? wait_for_completion_io+0x270/0x270 [ 2458.047390] ? rcu_read_lock_any_held+0x75/0xa0 [ 2458.048196] ? vfs_write+0x354/0xb10 [ 2458.048849] ? fput_many+0x2f/0x1a0 [ 2458.049501] ? ksys_write+0x1a9/0x260 [ 2458.050155] ? __ia32_sys_read+0xb0/0xb0 [ 2458.050881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2458.051787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2458.052685] do_syscall_64+0x33/0x40 [ 2458.053337] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.054221] RIP: 0033:0x7f1e32d62b19 [ 2458.054854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.058047] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2458.059357] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2458.060595] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2458.061809] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.063033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2458.064255] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:03:33 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x24000000, 0x0, 0x0) 03:03:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000300aaff02"], 0x0) 03:03:33 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a000000, 0x0, 0x0) 03:03:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000500aaff02"], 0x0) 03:03:33 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x30000000, 0x0, 0x0) 03:03:34 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000003c00aaff02"], 0x0) 03:03:34 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x36000000, 0x0, 0x0) 03:03:34 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 03:03:34 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10000000, 0x0, 0x0, 0x0) [ 2458.682990] FAULT_INJECTION: forcing a failure. [ 2458.682990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2458.685558] CPU: 1 PID: 12093 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2458.687034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.688801] Call Trace: [ 2458.689367] dump_stack+0x107/0x167 [ 2458.690143] should_fail.cold+0x5/0xa [ 2458.690961] _copy_from_user+0x2e/0x1b0 [ 2458.691798] iovec_from_user+0x141/0x400 [ 2458.692676] __import_iovec+0x67/0x590 [ 2458.693517] ? SOFTIRQ_verbose+0x10/0x10 [ 2458.694378] ? lock_downgrade+0x6d0/0x6d0 [ 2458.695264] io_import_iovec+0x581/0x1120 [ 2458.696163] ? io_complete_rw+0x230/0x230 [ 2458.697040] ? lock_downgrade+0x6d0/0x6d0 [ 2458.697920] ? mark_lock+0xf5/0x2df0 [ 2458.698710] io_read+0xe14/0x11e0 [ 2458.699446] ? lock_chain_count+0x20/0x20 [ 2458.700337] ? __is_insn_slot_addr+0x14c/0x290 [ 2458.701304] ? __lock_acquire+0x1657/0x5b00 [ 2458.702215] ? kiocb_done+0xc90/0xc90 [ 2458.703024] ? mark_lock+0xf5/0x2df0 [ 2458.703817] ? lock_chain_count+0x20/0x20 [ 2458.704704] ? __lock_acquire+0x1657/0x5b00 [ 2458.705639] ? __lock_acquire+0xbb1/0x5b00 [ 2458.706539] io_issue_sqe+0x2e8a/0x77b0 [ 2458.707381] ? find_held_lock+0x2c/0x110 [ 2458.708251] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2458.709373] ? SOFTIRQ_verbose+0x10/0x10 [ 2458.710216] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2458.711212] ? lock_downgrade+0x6d0/0x6d0 [ 2458.712095] ? io_connect+0x610/0x610 [ 2458.712900] ? lock_acquire+0x197/0x470 [ 2458.713733] ? find_held_lock+0x2c/0x110 [ 2458.714599] ? __fget_files+0x2cf/0x520 [ 2458.715433] ? lock_downgrade+0x6d0/0x6d0 [ 2458.716323] __io_queue_sqe+0x90/0x9d0 [ 2458.717149] ? io_issue_sqe+0x77b0/0x77b0 [ 2458.718025] ? __fget_files+0x2f8/0x520 [ 2458.718866] ? __io_file_supports_nowait+0x22a/0x510 [ 2458.719938] ? io_prep_rw+0x7f5/0x1050 [ 2458.720767] io_submit_sqes+0x44aa/0x8610 [ 2458.721676] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2458.722718] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2458.723729] ? find_held_lock+0x2c/0x110 [ 2458.724606] ? io_submit_sqes+0x8610/0x8610 [ 2458.725540] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2458.726561] ? wait_for_completion_io+0x270/0x270 [ 2458.727589] ? rcu_read_lock_any_held+0x75/0xa0 [ 2458.728578] ? vfs_write+0x354/0xb10 [ 2458.729369] ? fput_many+0x2f/0x1a0 [ 2458.730142] ? ksys_write+0x1a9/0x260 [ 2458.730941] ? __ia32_sys_read+0xb0/0xb0 [ 2458.731803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2458.732921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2458.734003] do_syscall_64+0x33/0x40 [ 2458.734791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.735882] RIP: 0033:0x7f1e32d62b19 [ 2458.736668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.740594] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2458.742189] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2458.743698] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2458.745211] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.746727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2458.748255] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:03:50 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 03:03:50 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c000000, 0x0, 0x0) 03:03:50 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 03:03:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000006000aaff02"], 0x0) 03:03:50 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 03:03:50 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 03:03:50 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r2, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x1, 0x10000}) syz_open_pts(r2, 0x1c5000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb23}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) fcntl$dupfd(r4, 0x406, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ftruncate(r5, 0x7f) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) 03:03:50 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) [ 2474.810335] FAULT_INJECTION: forcing a failure. [ 2474.810335] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.812897] CPU: 1 PID: 12108 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2474.814380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2474.816318] Call Trace: [ 2474.816900] dump_stack+0x107/0x167 [ 2474.817704] should_fail.cold+0x5/0xa [ 2474.818554] ? __io_queue_sqe+0x666/0x9d0 [ 2474.819469] should_failslab+0x5/0x20 [ 2474.820331] kmem_cache_alloc_trace+0x55/0x320 [ 2474.821337] ? lock_downgrade+0x6d0/0x6d0 [ 2474.822259] __io_queue_sqe+0x666/0x9d0 [ 2474.823134] ? io_issue_sqe+0x77b0/0x77b0 [ 2474.824078] ? __fget_files+0x2f8/0x520 [ 2474.824944] ? __io_file_supports_nowait+0x22a/0x510 [ 2474.826072] ? io_prep_rw+0x7f5/0x1050 [ 2474.826938] io_submit_sqes+0x44aa/0x8610 [ 2474.827886] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2474.828995] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2474.830061] ? find_held_lock+0x2c/0x110 [ 2474.830966] ? io_submit_sqes+0x8610/0x8610 [ 2474.831931] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2474.833016] ? wait_for_completion_io+0x270/0x270 [ 2474.834083] ? rcu_read_lock_any_held+0x75/0xa0 [ 2474.835104] ? vfs_write+0x354/0xb10 [ 2474.835930] ? fput_many+0x2f/0x1a0 [ 2474.836754] ? ksys_write+0x1a9/0x260 [ 2474.837594] ? __ia32_sys_read+0xb0/0xb0 [ 2474.838492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2474.839645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2474.840793] do_syscall_64+0x33/0x40 [ 2474.841616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2474.842746] RIP: 0033:0x7f1e32d62b19 [ 2474.843562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2474.847632] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2474.849327] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2474.850894] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2474.852479] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2474.854056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2474.855627] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:03:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000003aaff02"], 0x0) 03:03:50 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e000000, 0x0, 0x0) 03:03:50 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0086dd60d0ff47000206fdfd80e5ffffff002000000000000000aaffc0f845b5ebee1e83f5b0f5907a2123b7b21485e4b94430051bdf7e672e8536ae933e77cbd1ccff4a95731bc57522bea369cd314c5d907f4ae496e8f840edb9a7986154d527907a007798a85079898ae58e8fff73efd34015be406390322209dbcb12d247ed411d4da2aa2d7aea4671f7b9a6f469ec6cf0dc2a24b1fd"], 0x0) 03:03:50 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) gettid() 03:03:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000005aaff02"], 0x0) 03:03:50 executing program 4: r0 = fork() r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101}, r0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, &(0x7f0000000000)=0x3ff, r1, &(0x7f0000000040)=0x10000, 0x800, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) [ 2475.096510] loop3: detected capacity change from 0 to 262144 03:03:50 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) [ 2475.141000] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 2475.235868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 03:03:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000000000003caaff02"], 0x0) 03:04:05 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0) 03:04:05 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 03:04:05 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 03:04:05 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 03:04:05 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb, 0x1d012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x10000}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x77, 0x0, 0x1f, 0x0, 0x3, 0x1000, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff80, 0x1, @perf_config_ext={0x200, 0x65ce}, 0x20, 0x5, 0x2, 0x4, 0x9, 0xffffffff, 0x100, 0x0, 0x80000000, 0x0, 0x7f}, 0xffffffffffffffff, 0xa, r2, 0xa) finit_module(r0, 0x0, 0x0) 03:04:05 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@multicast, @remote, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0x8}, {0x30, 0x0, 0x1}, {0x48, 0x0, 0x1}, {0x4}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x800, 0x0, 0x1}], @ipv4=@icmp={{0x9, 0x4, 0x3, 0x1c, 0x2c, 0x66, 0x0, 0x8, 0x1, 0x0, @local, @local, {[@generic={0x0, 0xf, "b0095f7780314770c97dc4e6cb"}]}}, @info_reply={0x10, 0x0, 0x0, 0x8001, 0xabc6}}}}}}, 0x0) 03:04:05 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 03:04:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000040aaff02"], 0x0) [ 2490.329483] audit: type=1400 audit(1755659045.928:156): avc: denied { module_load } for pid=12166 comm="syz-executor.3" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=49242 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=system permissive=1 03:04:05 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000060aaff02"], 0x0) [ 2490.352005] FAULT_INJECTION: forcing a failure. [ 2490.352005] name failslab, interval 1, probability 0, space 0, times 0 [ 2490.354643] CPU: 1 PID: 12177 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2490.356240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2490.358152] Call Trace: [ 2490.358772] dump_stack+0x107/0x167 [ 2490.359635] should_fail.cold+0x5/0xa [ 2490.360581] ? create_object.isra.0+0x3a/0xa20 [ 2490.361639] should_failslab+0x5/0x20 [ 2490.362532] kmem_cache_alloc+0x5b/0x310 [ 2490.363496] create_object.isra.0+0x3a/0xa20 [ 2490.364528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2490.365747] __kmalloc+0x16e/0x390 [ 2490.366605] io_setup_async_rw+0x180/0x580 [ 2490.367620] ? iov_iter_restore+0x195/0x3a0 [ 2490.368017] Module has invalid ELF structures [ 2490.368666] io_read+0x775/0x11e0 [ 2490.369945] ? __is_insn_slot_addr+0x14c/0x290 [ 2490.371040] ? kiocb_done+0xc90/0xc90 [ 2490.371907] ? mark_lock+0xf5/0x2df0 [ 2490.372822] ? lock_chain_count+0x20/0x20 [ 2490.373819] ? __lock_acquire+0xbb1/0x5b00 [ 2490.374805] io_issue_sqe+0x2e8a/0x77b0 [ 2490.375744] ? find_held_lock+0x2c/0x110 [ 2490.376730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2490.377936] ? SOFTIRQ_verbose+0x10/0x10 [ 2490.378884] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2490.380164] ? lock_downgrade+0x6d0/0x6d0 [ 2490.381245] ? io_connect+0x610/0x610 [ 2490.382125] ? lock_acquire+0x197/0x470 [ 2490.383049] ? find_held_lock+0x2c/0x110 [ 2490.384006] ? __fget_files+0x2cf/0x520 [ 2490.384920] ? lock_downgrade+0x6d0/0x6d0 [ 2490.385872] __io_queue_sqe+0x90/0x9d0 [ 2490.386802] ? io_issue_sqe+0x77b0/0x77b0 [ 2490.387747] ? __fget_files+0x2f8/0x520 [ 2490.388691] ? __io_file_supports_nowait+0x22a/0x510 [ 2490.389841] ? io_prep_rw+0x7f5/0x1050 [ 2490.390748] io_submit_sqes+0x44aa/0x8610 [ 2490.391911] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2490.393112] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2490.394234] ? find_held_lock+0x2c/0x110 [ 2490.395180] ? io_submit_sqes+0x8610/0x8610 [ 2490.396198] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2490.397312] ? wait_for_completion_io+0x270/0x270 [ 2490.398449] ? rcu_read_lock_any_held+0x75/0xa0 [ 2490.399508] ? vfs_write+0x354/0xb10 [ 2490.400413] ? fput_many+0x2f/0x1a0 [ 2490.401272] ? ksys_write+0x1a9/0x260 [ 2490.402301] ? __ia32_sys_read+0xb0/0xb0 [ 2490.403237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2490.404465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2490.405644] do_syscall_64+0x33/0x40 [ 2490.406486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2490.407684] RIP: 0033:0x7f1e32d62b19 [ 2490.408563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2490.412756] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2490.414492] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2490.416152] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2490.417788] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2490.419438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2490.421082] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:04:06 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b008000aaaa00ce4de47a6df2f7ca09065e528cb207cb500000fe8000000000000000000000008cdf5852bc68a086e8ff524e06959499caad57937a5d5a8443e6156f1671b77fde9228ba9d7396980200540f8e65a5207f1eedd78b2f4aace5e315228c6d89f41bda93407a09ef3be148c89b7954611185ffaa8114a6dc2dfdf8c5b85982d189961449dd5acb24735aadb4ba367b1466ff4baa37029f9d8449392f01c80d215e80dd220b70470a269cb34dd26a94a2483fdbd53a348e650c2b3039ff8279da95f0028e93e0b3c80e23c676218ac7c64d44a32a4f8c30bfc6a39ba5b60a22ca672788d401273d32"], 0x0) 03:04:06 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x600000000000000, 0x0, 0x0) 03:04:06 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086cd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) syz_emit_ethernet(0xf8, &(0x7f0000000100)={@empty, @empty, @void, {@llc_tr={0x11, {@snap={0x1, 0x0, "4fe2", "180f7d", 0x200, "38ad51cca848fd21758cfd118b5d9d3195ff53aba0825753725fb9b2e8575238adda0b939b665b49b9b396e79f39fc35c42e345e48cce05a2902c216aa4cff139821aca8d0f783f1e5abfa99600f561eee1ad2c2ae7aa5191e1a8ab5d70e20d6764895e0eb893608570d2661f7dc6f6af8a797173b54b0019666bfb180c5a1c3dcad91364fa0be6de5efa535fab674101779b4eda1526e2b8e36e6fc797df390adfb54eeb54aac31ca6f3c7d29919e19b1be825848f824c41f7a72fde5aeca6e0c1f850b86b4b3df6e584ff7a6f268bc2adc94a0993635cc8e523e28c98e9666a7"}}}}}, &(0x7f0000000000)={0x0, 0x1, [0x38a, 0x806, 0xed6, 0xcd2]}) 03:04:06 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000003aaff02"], 0x0) 03:04:06 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00000000000000, 0x0, 0x0) 03:04:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, @perf_config_ext={0x52, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:04:06 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000005aaff02"], 0x0) 03:04:06 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x0, 0x0, 0x0) 03:04:06 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 03:04:06 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 03:04:06 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe800000000000000000000000003caaff02"], 0x0) 03:04:06 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0x5) r0 = perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3, 0x0, 0x20000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0xfffffe00, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r1 = clone3(&(0x7f0000000380)={0x210002100, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x2a}, &(0x7f0000000240)=""/41, 0x29, &(0x7f0000000280)=""/137, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf9, 0x40, 0xfe, 0x7, 0x0, 0x81, 0x400, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x1, 0x312}, 0x200, 0x8, 0x0, 0x4, 0xfffffffffffffff9, 0x8, 0x0, 0x0, 0x10000, 0x0, 0x7}, r1, 0xe, r0, 0x1) 03:04:20 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 03:04:20 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 03:04:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000060aaff02"], 0x0) 03:04:20 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000000000000, 0x0, 0x0) 03:04:20 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 03:04:20 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6090000000003706dd0000aaff00"/42], 0x0) 03:04:20 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 03:04:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x200, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xab}}, 0x10) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000140)=""/215, 0xd7}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000600)=""/51, 0x33}, {&(0x7f0000000640)=""/247, 0xf7}], 0xa, &(0x7f0000000d80)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000008000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xe8}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/40, 0x28}, {&(0x7f00000009c0)=""/104, 0x68}], 0x2}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/17, 0x11}], 0x1}}], 0x3, 0x2000, &(0x7f0000000c80)={r1, r2+60000000}) fstatfs(r4, &(0x7f0000000cc0)=""/169) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000043380)={0x0, 0x0, "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", "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"}) [ 2504.971546] FAULT_INJECTION: forcing a failure. [ 2504.971546] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.973229] CPU: 0 PID: 12241 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2504.974086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2504.975118] Call Trace: [ 2504.975450] dump_stack+0x107/0x167 [ 2504.975912] should_fail.cold+0x5/0xa [ 2504.976403] ? __io_queue_sqe+0x666/0x9d0 [ 2504.976920] should_failslab+0x5/0x20 [ 2504.977396] kmem_cache_alloc_trace+0x55/0x320 [ 2504.977967] ? lock_downgrade+0x6d0/0x6d0 [ 2504.978483] __io_queue_sqe+0x666/0x9d0 [ 2504.978981] ? io_issue_sqe+0x77b0/0x77b0 [ 2504.979491] ? __fget_files+0x2f8/0x520 [ 2504.980005] ? __io_file_supports_nowait+0x22a/0x510 [ 2504.980650] ? io_prep_rw+0x7f5/0x1050 [ 2504.981141] io_submit_sqes+0x44aa/0x8610 [ 2504.981675] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2504.982294] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2504.982888] ? find_held_lock+0x2c/0x110 [ 2504.983388] ? io_submit_sqes+0x8610/0x8610 [ 2504.983928] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2504.984541] ? wait_for_completion_io+0x270/0x270 [ 2504.985137] ? rcu_read_lock_any_held+0x75/0xa0 [ 2504.985712] ? vfs_write+0x354/0xb10 [ 2504.986168] ? fput_many+0x2f/0x1a0 [ 2504.986618] ? ksys_write+0x1a9/0x260 [ 2504.987092] ? __ia32_sys_read+0xb0/0xb0 [ 2504.987595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2504.988247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2504.988900] do_syscall_64+0x33/0x40 [ 2504.989359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2504.989994] RIP: 0033:0x7f1e32d62b19 [ 2504.990452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2504.992406] loop3: detected capacity change from 0 to 32768 [ 2504.992747] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2504.994962] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2504.995862] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2504.996749] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2504.997624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2504.998503] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 [ 2505.023961] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000044380)={0x0, 0x0, "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", "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"}) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r6 = openat(r5, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x10000000c) syz_io_uring_setup(0x77d5, &(0x7f0000000140)={0x0, 0x6d73, 0x0, 0x2, 0xbb, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000043380)={r10, r11, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000044380)={r9, r8, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000051180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x8, "a261e899a980cb"}) sendto$inet(r0, &(0x7f0000000040)="e1c97353f72cb8b170622cd1648fd630d7209e7d", 0x14, 0x0, 0x0, 0x0) 03:04:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aa0103"], 0x0) 03:04:20 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x71, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) [ 2505.093746] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 03:04:20 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200000000000000, 0x0, 0x0) 03:04:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}, 0x8804) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x2080012, r1, 0x92a4c000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x3, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80, 0x1, 0xfffffff8, 0x8}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0xc) sendfile(r2, r2, &(0x7f0000000040)=0x8f8, 0x3) 03:04:35 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 03:04:35 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff05"], 0x0) 03:04:35 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 03:04:35 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800000000000000, 0x0, 0x0) 03:04:35 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:04:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000240)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {&(0x7f0000000140)="ad3895c37b746c5f7979a6eae24b1fad9484c4d962aa0509b929b0af7c5f62c0ba469b0989b59aa63196cf1acc594ec897157fa06bb25e157947971d12a8a4653450a887d06933c27033c3a8c8e30194e3607ab7cb5f9428aa70432ed62eeed2799843e35946e998895698e49c39c5d9d0f2a637c3c7af60364e8c0e38e4c649021a571e33d387944d6e9661103e208c46a8e8c2b6410a61325f3fb8c77c", 0x9e, 0x6}, {&(0x7f0000000080)="02b3186926efc57aa104de7c88d2f1d8d8cf2bce402eadc5df6fa96d63d049e8fc73bde16c392f7ebd8ccb", 0x2b, 0x9}], 0x0, &(0x7f0000001500)=ANY=[]) 03:04:35 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 03:04:35 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24000000, 0x0, 0x0, 0x0) [ 2519.692232] loop3: detected capacity change from 0 to 32768 [ 2519.693969] FAULT_INJECTION: forcing a failure. [ 2519.693969] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.695361] CPU: 0 PID: 12293 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2519.696161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.697127] Call Trace: [ 2519.697438] dump_stack+0x107/0x167 [ 2519.697860] should_fail.cold+0x5/0xa [ 2519.698307] ? __io_queue_sqe+0x666/0x9d0 [ 2519.698787] should_failslab+0x5/0x20 [ 2519.699234] kmem_cache_alloc_trace+0x55/0x320 [ 2519.699759] ? lock_downgrade+0x6d0/0x6d0 [ 2519.700244] __io_queue_sqe+0x666/0x9d0 [ 2519.700716] ? io_issue_sqe+0x77b0/0x77b0 [ 2519.701196] ? __fget_files+0x2f8/0x520 [ 2519.701655] ? __io_file_supports_nowait+0x22a/0x510 [ 2519.702247] ? io_prep_rw+0x7f5/0x1050 [ 2519.702697] io_submit_sqes+0x44aa/0x8610 [ 2519.703189] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2519.703765] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2519.704326] ? find_held_lock+0x2c/0x110 [ 2519.704805] ? io_submit_sqes+0x8610/0x8610 [ 2519.705307] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2519.705865] ? wait_for_completion_io+0x270/0x270 [ 2519.706424] ? rcu_read_lock_any_held+0x75/0xa0 [ 2519.706960] ? vfs_write+0x354/0xb10 [ 2519.707390] ? fput_many+0x2f/0x1a0 [ 2519.707809] ? ksys_write+0x1a9/0x260 [ 2519.708256] ? __ia32_sys_read+0xb0/0xb0 [ 2519.708739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.709349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.709948] do_syscall_64+0x33/0x40 [ 2519.710379] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2519.710969] RIP: 0033:0x7f1e32d62b19 [ 2519.711397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.713353] FAT-fs (loop3): invalid media value (0x88) [ 2519.713517] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2519.714724] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2519.715537] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2519.715544] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2519.715551] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.715557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2519.715574] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:04:35 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x0) syz_emit_ethernet(0x1b, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @broadcast, @val={@val={0x9100, 0x0, 0x1, 0x2}, {0x8100, 0x1, 0x1}}, {@x25={0x805, {0x2, 0xb9, 0x17, "b40f"}}}}, &(0x7f0000000080)={0x1, 0x2, [0x4c2, 0xa33, 0xb4c, 0xc3]}) 03:04:35 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaffff"], 0x0) 03:04:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000180)=0x0) r2 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000004, 0x2010, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x1, 0x7, 0x0, 0x400, 0x2}, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 03:04:35 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00000000000000, 0x0, 0x0) 03:04:35 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aafffd"], 0x0) 03:04:35 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x10000}) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000580)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r5 = pidfd_open(0x0, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@ieee802154={0x24, @short}, &(0x7f00000003c0)=0x80, 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000100)="dfcd6a5cdedf15e383b23f936d3d7dd87a44448a75c49547750c5ad438baf54043b2f2d8b09a7bc480451db13842b610991e749ee67214a0e6c3e959d683408a90a811300b3ec01dc63380b25e13bbf3a4", 0x51}, {&(0x7f0000000180)="c60484a739fa6fc99ad99f8792c697d15e7824a3be3fd0303a02389dd3abc5515058d67ebfe0b97919382118178093e6b1512ae3a9a9fe2cd6d880fd6c711c0ec4ccb8e0a22e5240b2b45352a49ced74163d7a36c01be7b395", 0x59}, {&(0x7f0000000200)="d613d68a24d0b61e97be95717e0602a673ccef12dbee7246e9e5394434a8bedb03342290fa98e8d05cb45052f8e8258e0fdce7ad2833c14530a8f0a911b15f80b982aff9f0f052a7c3b4e8d6025013e948fa1504781744f6a27f84db", 0x5c}, {&(0x7f0000000280)="c618f1f776cb68134692279a52969311aec5b8a31345650753bfda65e504ce3f3f5f5168308c47c00d60ae7c2829ccf3bfa13e24e89ae480ca3201d22b915ba5d29dc8aaefdeb0590773e71a03af08d2fab06d038a511186345c8c681380dc94a7c26a93ec29de192a5be84b1e07978af138acc9f73db163b2ef6fc881cd0503da", 0x81}], 0x4, &(0x7f00000004c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r3, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0xc0, 0x8000}, 0x44800) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0xb, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc044) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:04:50 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 03:04:50 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 03:04:50 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x72, 0x6, 0x20, 0x3f, 0x0, 0x10000000000000, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x6, 0x2, 0xffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x800000000003, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x10000}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) fcntl$addseals(0xffffffffffffffff, 0x409, 0x6) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000080)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = dup(r0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 03:04:50 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 03:04:50 executing program 3: prctl$PR_SET_FP_MODE(0x2d, 0x3) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x5c, 0xa3, 0x4, 0x81, 0x0, 0x2, 0x400, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0xffffffffffff0001}, 0x20, 0x6, 0x2b, 0x4, 0x6, 0x5, 0x80, 0x0, 0x4, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsmount(r0, 0x0, 0x74) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x10f4}}, 0x0) 03:04:50 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000ffb400000000000000aaff"], 0x0) 03:04:50 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 03:04:50 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) [ 2534.841453] FAULT_INJECTION: forcing a failure. [ 2534.841453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2534.844067] CPU: 1 PID: 12327 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2534.845546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2534.847259] Call Trace: [ 2534.847824] dump_stack+0x107/0x167 [ 2534.848590] should_fail.cold+0x5/0xa [ 2534.849410] _copy_from_user+0x2e/0x1b0 [ 2534.850262] iovec_from_user+0x141/0x400 [ 2534.851119] __import_iovec+0x67/0x590 [ 2534.851939] ? SOFTIRQ_verbose+0x10/0x10 [ 2534.852800] ? lock_downgrade+0x6d0/0x6d0 [ 2534.853677] io_import_iovec+0x581/0x1120 [ 2534.854554] ? io_complete_rw+0x230/0x230 [ 2534.855425] ? lock_downgrade+0x6d0/0x6d0 [ 2534.856297] ? mark_lock+0xf5/0x2df0 [ 2534.857091] io_read+0xe14/0x11e0 [ 2534.857814] ? lock_chain_count+0x20/0x20 [ 2534.858684] ? __is_insn_slot_addr+0x14c/0x290 [ 2534.859659] ? __lock_acquire+0x1657/0x5b00 [ 2534.860574] ? kiocb_done+0xc90/0xc90 [ 2534.861387] ? mark_lock+0xf5/0x2df0 [ 2534.862177] ? lock_chain_count+0x20/0x20 [ 2534.863063] ? __lock_acquire+0x1657/0x5b00 [ 2534.864002] ? __lock_acquire+0xbb1/0x5b00 [ 2534.864910] io_issue_sqe+0x2e8a/0x77b0 [ 2534.865751] ? find_held_lock+0x2c/0x110 [ 2534.866603] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2534.867683] ? SOFTIRQ_verbose+0x10/0x10 [ 2534.868523] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2534.869518] ? lock_downgrade+0x6d0/0x6d0 [ 2534.870388] ? io_connect+0x610/0x610 [ 2534.871206] ? lock_acquire+0x197/0x470 [ 2534.872035] ? find_held_lock+0x2c/0x110 [ 2534.872909] ? __fget_files+0x2cf/0x520 [ 2534.873743] ? lock_downgrade+0x6d0/0x6d0 [ 2534.874617] __io_queue_sqe+0x90/0x9d0 [ 2534.875449] ? io_issue_sqe+0x77b0/0x77b0 [ 2534.876318] ? __fget_files+0x2f8/0x520 [ 2534.877167] ? __io_file_supports_nowait+0x22a/0x510 [ 2534.878246] ? io_prep_rw+0x7f5/0x1050 [ 2534.879066] io_submit_sqes+0x44aa/0x8610 [ 2534.879973] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2534.881088] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2534.882260] ? find_held_lock+0x2c/0x110 [ 2534.883122] ? io_submit_sqes+0x8610/0x8610 [ 2534.884041] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2534.885111] ? wait_for_completion_io+0x270/0x270 [ 2534.886129] ? rcu_read_lock_any_held+0x75/0xa0 [ 2534.887120] ? vfs_write+0x354/0xb10 [ 2534.887897] ? fput_many+0x2f/0x1a0 [ 2534.888652] ? ksys_write+0x1a9/0x260 [ 2534.889458] ? __ia32_sys_read+0xb0/0xb0 [ 2534.890322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2534.891442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.892537] do_syscall_64+0x33/0x40 [ 2534.892559] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2534.892582] RIP: 0033:0x7f1e32d62b19 [ 2534.895276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2534.899170] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2534.900784] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2534.902264] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2534.903748] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.905265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2534.906773] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:04:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) 03:04:50 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x500a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:04:50 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400000000000000, 0x0, 0x0) 03:04:50 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00003b9182c827f4d13ba0ca8cf8805fa5670000000000ff01000000000000aaff"], 0x0) 03:04:50 executing program 3: fallocate(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc1, 0xb4700000, 0x3ff, 0x73cf}) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x81, 0x7, 0x95, 0x5, 0x0, 0x0, 0x20000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x1060, 0x7, 0x89e2, 0x8, 0x1, 0x7, 0x101, 0x0, 0xfff, 0x0, 0xbf}, 0xffffffffffffffff, 0x0, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0), 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000140)) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3a74, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 03:04:50 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) fallocate(r1, 0x0, 0x0, 0x2) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) fcntl$getflags(r0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x10000}) r3 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x3f, 0x0, 0x79, 0x0, 0xfffffffffffffe00, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x3804, 0x5}, 0x48520, 0xff, 0x3, 0x9, 0x120000000000, 0x1, 0x9, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x1, r1, 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) fstat(r4, &(0x7f0000000200)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3], 0x0) 03:04:50 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00000000000000, 0x0, 0x0) 03:04:50 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:05:07 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000000000000000, 0x0, 0x0) 03:05:07 executing program 3: rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) fork() rseq(&(0x7f0000000000), 0x20, 0x1, 0x0) 03:05:07 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 03:05:07 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, &(0x7f0000000140)=0x6, r0, 0x0, 0x6, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) syz_emit_ethernet(0x85, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@x25={0x805, {0x0, 0xa7, 0x5, "1fd31ac403cf28612b0f40682354e98b68cdc4d5d4579a6ce12759894a0cefe9274ccd3174a2eca0e30143847f1f2e807f0020f8a51a495092956d27187f3c81ca6359566728e950b854b05d5b7013b336cbefd10c42b11dbfcc92bad658300c35b454845d971b4d6b55ad09fcc9348682e1576c"}}}}, &(0x7f0000000100)={0x1, 0x2, [0x148, 0x514, 0x544, 0x1ee]}) 03:05:07 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 03:05:07 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) 03:05:07 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 03:05:07 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa010000006b5e52770abe03f9adbad54f0a52096248ba009c60bada55aaaaaaaa00000000000086dd60d0ff4700020600fec145ba766f48eeb062cc005595b6d1ad08b9c602884e8429e45eb81d6898d3aac7c48c6e35d68d402d04a835081a2d4aa52fb409191dd46d5f634283892054a4f287934607e91d0c553221954aea55a5837d6aa9da9a7c4b40f3a7df94a6f3567fcfcb3e1ec46a696c17b340d2a34fddad6eae7c5e0508a977fbbe487e2dbc9d484bb6c495a68f4fe2e9b839c66888"], 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) fcntl$getown(r0, 0x9) [ 2551.615464] FAULT_INJECTION: forcing a failure. [ 2551.615464] name failslab, interval 1, probability 0, space 0, times 0 [ 2551.616848] CPU: 1 PID: 12390 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2551.617662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2551.618607] Call Trace: [ 2551.618908] dump_stack+0x107/0x167 [ 2551.619322] should_fail.cold+0x5/0xa [ 2551.619770] ? io_setup_async_rw+0x180/0x580 [ 2551.620268] should_failslab+0x5/0x20 [ 2551.620695] __kmalloc+0x72/0x390 [ 2551.621102] io_setup_async_rw+0x180/0x580 [ 2551.621583] ? iov_iter_restore+0x195/0x3a0 [ 2551.622084] io_read+0x775/0x11e0 [ 2551.622478] ? __is_insn_slot_addr+0x14c/0x290 [ 2551.623004] ? kiocb_done+0xc90/0xc90 [ 2551.623443] ? mark_lock+0xf5/0x2df0 [ 2551.623877] ? lock_chain_count+0x20/0x20 [ 2551.624378] ? __lock_acquire+0xbb1/0x5b00 [ 2551.624861] io_issue_sqe+0x2e8a/0x77b0 [ 2551.625331] ? find_held_lock+0x2c/0x110 [ 2551.625798] ? perf_trace_lock+0xac/0x490 [ 2551.626275] ? SOFTIRQ_verbose+0x10/0x10 [ 2551.626739] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2551.627283] ? io_connect+0x610/0x610 [ 2551.627722] ? lock_acquire+0x197/0x470 [ 2551.628178] ? find_held_lock+0x2c/0x110 [ 2551.628648] ? __fget_files+0x2cf/0x520 [ 2551.629115] ? lock_downgrade+0x6d0/0x6d0 [ 2551.629594] __io_queue_sqe+0x90/0x9d0 [ 2551.630047] ? io_issue_sqe+0x77b0/0x77b0 [ 2551.630521] ? __fget_files+0x2f8/0x520 [ 2551.630974] ? __io_file_supports_nowait+0x22a/0x510 [ 2551.631556] ? io_prep_rw+0x7f5/0x1050 [ 2551.632004] io_submit_sqes+0x44aa/0x8610 [ 2551.632500] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2551.633082] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2551.633629] ? find_held_lock+0x2c/0x110 [ 2551.634098] ? io_submit_sqes+0x8610/0x8610 [ 2551.634600] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2551.635152] ? wait_for_completion_io+0x270/0x270 [ 2551.635708] ? rcu_read_lock_any_held+0x75/0xa0 [ 2551.636242] ? vfs_write+0x354/0xb10 [ 2551.636665] ? fput_many+0x2f/0x1a0 [ 2551.637093] ? ksys_write+0x1a9/0x260 [ 2551.637526] ? __ia32_sys_read+0xb0/0xb0 [ 2551.637998] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2551.638597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2551.639196] do_syscall_64+0x33/0x40 [ 2551.639618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2551.640210] RIP: 0033:0x7f1e32d62b19 [ 2551.640631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2551.642749] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2551.643617] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2551.644441] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2551.645268] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.646082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2551.646902] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:05:07 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaac0aa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) 03:05:07 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001880)=ANY=[@ANYBLOB="aa0000000000006d7c86dd60d004000000000000000000000000000000000000005b328c3493ee1c110800"/54], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRESOCT=r0, @ANYRES16, @ANYBLOB="63124dda5c08e890a7dd5f52872bcba2b8319aef2281d7ec9bdf36aea069786a58144baa43834101004109", @ANYRES16, @ANYRESOCT=r3, @ANYRESHEX=r4, @ANYRES32=r5], 0xfec4) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000018c0)={0x84, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x14, 0x4, @empty}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4080}, 0x40045) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001840)=@IORING_OP_WRITEV={0x2, 0x1, 0x2004, @fd=r6, 0x1000, &(0x7f00000017c0)=[{&(0x7f00000003c0)="316a5865ad74aa86d9b37325ffd8653acd3a90f1bbffc9ed5cbebd30f6225a0baeb9fd94025a2ec5c9f12054265653213ec16a31494a336f2b33f0ac0465de5dd80ad1b3a52bad314b8140b6e7a3ee4e78c585814e66df5a1b08850b8674aa", 0x5f}, {&(0x7f00000004c0)="74b5c94006812b5cfa35cfea69c75d6b45d5f089044e55926e638c910b076596f28e69b02938391fd306c3679d3ba055b8d330ac31a8107b9e880f2d3e12263e7916a311b0f15fb3bc06158eadeb226cd8893cad20800a2de143a298a63ea033a91d76c4e82a01ed79e66cf69b2ed529dc9a5b9783dc5e23d58103d2dfb486440c8d893974846b4b4b36c33cc40f80969447b2610a21b855820b15b09efc49bceea6f5b1a24a08d9350e9a4cd3d8feada031f11ac34cb5fb6a88df742970f1b4bf145ee88a77f09d704276b30d5142778ae723a10e862a6f687bac1f1dc84e1688d2567a2b68853463f56052434694a7", 0xf0}, {&(0x7f00000005c0)="aa77026767b96c080b607595e6e7877db4fde488146612fe188bd2b3720eef", 0x1f}, {&(0x7f0000000600)="b7263d576a84", 0x6}, {&(0x7f0000000640)="1d63c04c2c676a1baf5be46ddc046559915915a85f0fbd71cddfa134a712ad9ee28b8d16c3145dc6cc45f9bd9ad692a65d6c863c94285f30ad79a84ef78553fe080484513acdad1c2fe33a416dec712f49f505c90dcd4a2ffb93888002eabc2462ebcf2376f2a325609d45d0ff332ff82b6e6de7d6199cac1ba74b6ae832dcac4497438c6869997747a50b25af28744533", 0x91}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="b66c0575838f09dd4f82b80edb3bed94b79078114b31f7b04b63f515c6600975a1ea1c4d43170250fd1f760ebb28b9654b2a11be86a52e860c27cf41772ec6c4df5605d328e195f215b8d266a3ce0daacdd0516051632967af2645ae6a5c4f241764252719e508363ed545fad95f2c40ff80fe3a40a86a1894580c6637d6379a0a5c65cb6ceda2aed99fe93f0bf675b17b962f2690bd176a6d15ff5dffd01ee87a23fdb5", 0xa4}], 0x7, 0x0, 0x0, {0x3}}, 0x4) fallocate(r1, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x10000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="89072f8f064a24a5b39e291b051da87b2eb55c6db5141300000000580dfa"]) 03:05:07 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600000000000000, 0x0, 0x0) 03:05:07 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x17, "770000000009000000000000e000000100fdff", 0x0, 0x7}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) io_submit(0x0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x26000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffff7fffffd, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x101, r0, &(0x7f0000000240)="977c3a7b7bdeafdf75cd4a6a7081224ee47e8fa24bc768", 0x17, 0x2, 0x0, 0x1}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x27c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x732}, {0xc, 0x90, 0x3f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x87c}, {0xc, 0x90, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x21d958f3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x65}, {0xc, 0x90, 0xec8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fff}, {0xc, 0x90, 0xfff}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000080)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000640)=0x298a, 0x3ff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x40008000) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x80) r2 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x430}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) 03:05:07 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) 03:05:07 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 03:05:07 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e00, 0x0, 0x0, 0x0) 03:05:07 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 03:05:07 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x17, "770000000009000000000000e000000100fdff", 0x0, 0x7}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) io_submit(0x0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x26000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffff7fffffd, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x101, r0, &(0x7f0000000240)="977c3a7b7bdeafdf75cd4a6a7081224ee47e8fa24bc768", 0x17, 0x2, 0x0, 0x1}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x27c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x732}, {0xc, 0x90, 0x3f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x87c}, {0xc, 0x90, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x21d958f3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x65}, {0xc, 0x90, 0xec8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7fff}, {0xc, 0x90, 0xfff}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000080)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000640)=0x298a, 0x3ff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x40008000) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x80) r2 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x430}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) 03:05:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfec4) fallocate(r2, 0x0, 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0x1, 0x10000, 0xfffffffffffffffe, 0x3ff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000280)=""/171, &(0x7f00000001c0)=0xab) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000000)) tee(r0, r1, 0x24cca6a, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) dup(r6) getdents64(r2, &(0x7f0000000080)=""/209, 0xd1) 03:05:07 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 03:05:07 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00000000000000, 0x0, 0x0) 03:05:07 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0d50000000600fe370c17bd03f6ca5d000000000000aaff"], 0x0) 03:05:07 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8e00000000000000, 0x0, 0x0) [ 2552.282246] FAULT_INJECTION: forcing a failure. [ 2552.282246] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.284893] CPU: 0 PID: 12445 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2552.286361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2552.288114] Call Trace: [ 2552.288682] dump_stack+0x107/0x167 [ 2552.289463] should_fail.cold+0x5/0xa [ 2552.290274] ? create_object.isra.0+0x3a/0xa20 [ 2552.291244] should_failslab+0x5/0x20 [ 2552.292052] kmem_cache_alloc+0x5b/0x310 [ 2552.292922] ? io_setup_async_rw+0x180/0x580 [ 2552.293858] create_object.isra.0+0x3a/0xa20 [ 2552.294797] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2552.295876] __kmalloc+0x16e/0x390 [ 2552.296634] io_setup_async_rw+0x180/0x580 [ 2552.297540] ? iov_iter_restore+0x195/0x3a0 [ 2552.298458] io_read+0x775/0x11e0 [ 2552.299199] ? lock_chain_count+0x20/0x20 [ 2552.300095] ? kiocb_done+0xc90/0xc90 [ 2552.300913] ? mark_lock+0xf5/0x2df0 [ 2552.301715] ? lock_chain_count+0x20/0x20 [ 2552.302607] ? mark_held_locks+0x9e/0xe0 [ 2552.303479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2552.304580] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2552.305729] ? trace_hardirqs_on+0x5b/0x180 [ 2552.306637] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2552.307783] ? io_issue_sqe+0x134/0x77b0 [ 2552.308642] io_issue_sqe+0x2e8a/0x77b0 [ 2552.309491] ? find_held_lock+0x2c/0x110 [ 2552.310343] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2552.311443] ? SOFTIRQ_verbose+0x10/0x10 [ 2552.312300] ? mark_held_locks+0x9e/0xe0 [ 2552.313173] ? io_connect+0x610/0x610 [ 2552.313982] ? mark_held_locks+0x9e/0xe0 [ 2552.314830] ? find_held_lock+0x2c/0x110 [ 2552.315687] ? __fget_files+0x2cf/0x520 [ 2552.316521] ? lock_downgrade+0x6d0/0x6d0 [ 2552.317400] __io_queue_sqe+0x90/0x9d0 [ 2552.318216] ? __fget_files+0x39d/0x520 [ 2552.319059] ? io_issue_sqe+0x77b0/0x77b0 [ 2552.319927] ? __fget_files+0x2f8/0x520 [ 2552.320761] ? __io_file_supports_nowait+0x22a/0x510 [ 2552.321843] ? io_prep_rw+0x7f5/0x1050 [ 2552.322667] io_submit_sqes+0x44aa/0x8610 [ 2552.323564] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2552.324608] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2552.325633] ? find_held_lock+0x2c/0x110 [ 2552.326493] ? io_submit_sqes+0x8610/0x8610 [ 2552.327403] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2552.328424] ? wait_for_completion_io+0x270/0x270 [ 2552.329461] ? rcu_read_lock_any_held+0x75/0xa0 [ 2552.330435] ? vfs_write+0x354/0xb10 [ 2552.331230] ? fput_many+0x2f/0x1a0 [ 2552.331993] ? ksys_write+0x1a9/0x260 [ 2552.332791] ? __ia32_sys_read+0xb0/0xb0 [ 2552.333659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2552.334760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.335847] do_syscall_64+0x33/0x40 [ 2552.336631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2552.337717] RIP: 0033:0x7f1e32d62b19 [ 2552.338500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.342336] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2552.343919] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2552.345421] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2552.346900] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.348378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2552.349867] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:05:29 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 03:05:29 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) 03:05:29 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 03:05:29 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) recvmmsg(r0, &(0x7f0000004a80)=[{{&(0x7f0000000000)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/65, 0x41}, 0x20}, {{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f00000014c0)=""/235, 0xeb}, {&(0x7f00000015c0)=""/191, 0xbf}, {&(0x7f0000001680)=""/253, 0xfd}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000001780)=""/233, 0xe9}, {&(0x7f0000001880)=""/142, 0x8e}, {&(0x7f0000001940)=""/167, 0xa7}], 0x9, &(0x7f0000001ac0)=""/187, 0xbb}, 0x8}, {{&(0x7f0000001b80)=@phonet, 0x80, &(0x7f0000003d00)=[{&(0x7f0000001c00)=""/4, 0x4}, {&(0x7f0000001c40)=""/154, 0x9a}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x4, &(0x7f0000003d40)=""/87, 0x57}, 0xd2d}, {{&(0x7f0000003dc0)=@can, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e40)=""/57, 0x39}, {&(0x7f0000003e80)=""/190, 0xbe}], 0x2, &(0x7f0000003f80)=""/143, 0x8f}, 0x101}, {{&(0x7f0000004040)=@x25, 0x80, &(0x7f0000004140)=[{&(0x7f00000040c0)=""/116, 0x74}], 0x1, &(0x7f0000004180)=""/245, 0xf5}}, {{&(0x7f0000004280)=@xdp, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004300)=""/35, 0x23}, {&(0x7f0000004340)=""/224, 0xe0}, {&(0x7f0000004440)=""/242, 0xf2}, {&(0x7f0000004540)=""/30, 0x1e}, {&(0x7f0000004580)=""/71, 0x47}, {&(0x7f0000004600)=""/182, 0xb6}, {&(0x7f00000046c0)=""/76, 0x4c}, {&(0x7f0000004740)=""/158, 0x9e}, {&(0x7f0000004800)=""/159, 0x9f}], 0x9, &(0x7f0000004980)=""/235, 0xeb}, 0x2}], 0x6, 0x1, &(0x7f0000004c00)={0x77359400}) 03:05:29 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) 03:05:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88001) dup3(r1, r2, 0x0) dup(r1) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x80000001}) 03:05:29 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) 03:05:29 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) syz_emit_ethernet(0x2c, &(0x7f0000000100)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@arp={0x806, @generic={0x201, 0x2, 0x6, 0x6, 0x8, @random="697f04f4fe2d", "d527850def21", @multicast}}}}, &(0x7f0000000140)={0x0, 0x2, [0x263, 0x895, 0x746, 0x435]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) syz_extract_tcp_res(&(0x7f0000005100)={0x41424344}, 0x9, 0x5) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x88fb}, @val={0x2, 0x80, 0x5, 0x8, 0x3, 0x6}, @ipv6=@tcp={0x8, 0x6, '^i2', 0x1038, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@fragment={0x4, 0x0, 0x4, 0x1, 0x0, 0x9, 0x66}, @fragment={0x2b, 0x0, 0x8, 0x0, 0x0, 0x5, 0x66}], {{0x4e24, 0x4e21, r1, 0x41424344, 0x1, 0x0, 0xa, 0x40, 0x8, 0x0, 0x800, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x10, 0xf989, "321a119af15f9ceee4988de2"}]}}, {"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"}}}}}, 0x106e) syz_emit_ethernet(0x222, &(0x7f00000018c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x8, 0x6, "d635b2", 0x1e8, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, {[@srh={0x87, 0x8, 0x4, 0x4, 0x1f, 0x40, 0xffff, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, @mcast1, @loopback]}, @srh={0x6, 0x2, 0x4, 0x1, 0x81, 0x0, 0x9d47, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x32, 0x0, 0x2, 0x8}, @fragment={0x33, 0x0, 0x40, 0x1, 0x0, 0x5, 0x67}, @routing={0x16, 0x4, 0x1, 0x27, 0x0, [@mcast2, @mcast2]}, @fragment={0x3c, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x66}, @routing={0x2, 0x8, 0x2, 0x1f, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x87, 0xa, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}], {0x4e23, 0x4e21, 0xa8, 0x0, @opaque="bb76f9262b4c9fe389b3809d5be77bc42b305726870aeb898457c32edf4f3ee5d039359a53f98e0285e2679e62bd7a972264e5f088d1dd1e3b99b4088007926528f72ba68f038484559e00d3ebf46bd08311cf80e3f3101fc18bf985487fffb8e0194a978830c2d4eb463f665a6b7a286021d4a9cea945a60da8ba206ceb2d570e28324fc2f86cc310f19bf6cb4d97d2d29462be65a3d1b5ee147cac1c6a04a2"}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x4b6, 0x997, 0x64a, 0x827]}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x730c0, 0x0) write$tun(r3, &(0x7f00000013c0)={@void, @void, @mpls={[{0x200}, {0x8000, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3}, {0x5}, {0x3f}, {0xd7d7}], @generic="776ffaa924cd39192b99cf631ba0303913813aecacb8d43f3ffbe7cd72aae8050e6c5770aab23c8cca705693b4fd84cfb2f2c096e5beffe4ac38f160c24da776ed07b1d3f39cc9692f5dd7fd6d9a01aaacbd826832dda9fe7e3fbb4d58c02b499fe8ee889ee52dbc121f35b3cf701ad4091d7b89d2e57e8b5c3f9aa0268e40262a342c0803aeeceb839a6b29ee51df8e54a3a6cebb8008d584fbcce953dd7b88ce4ba7fd2ceeab4441c6d5"}}, 0xc7) [ 2574.280919] FAULT_INJECTION: forcing a failure. [ 2574.280919] name failslab, interval 1, probability 0, space 0, times 0 [ 2574.282643] CPU: 1 PID: 12464 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2574.283658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2574.284872] Call Trace: [ 2574.285273] dump_stack+0x107/0x167 [ 2574.285814] should_fail.cold+0x5/0xa [ 2574.286373] ? __io_queue_sqe+0x666/0x9d0 [ 2574.286979] should_failslab+0x5/0x20 [ 2574.287541] kmem_cache_alloc_trace+0x55/0x320 [ 2574.288207] ? lock_downgrade+0x6d0/0x6d0 [ 2574.288814] __io_queue_sqe+0x666/0x9d0 [ 2574.289403] ? io_issue_sqe+0x77b0/0x77b0 [ 2574.290007] ? __fget_files+0x2f8/0x520 [ 2574.290596] ? __io_file_supports_nowait+0x22a/0x510 [ 2574.291329] ? io_prep_rw+0x7f5/0x1050 [ 2574.291909] io_submit_sqes+0x44aa/0x8610 [ 2574.292529] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2574.293257] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2574.293948] ? find_held_lock+0x2c/0x110 [ 2574.294541] ? io_submit_sqes+0x8610/0x8610 [ 2574.295170] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2574.295874] ? wait_for_completion_io+0x270/0x270 [ 2574.296569] ? rcu_read_lock_any_held+0x75/0xa0 [ 2574.297251] ? vfs_write+0x354/0xb10 [ 2574.297794] ? fput_many+0x2f/0x1a0 [ 2574.298321] ? ksys_write+0x1a9/0x260 [ 2574.298876] ? __ia32_sys_read+0xb0/0xb0 [ 2574.299473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2574.300234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2574.300980] do_syscall_64+0x33/0x40 [ 2574.301526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2574.302268] RIP: 0033:0x7f1e32d62b19 [ 2574.302804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2574.305412] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2574.306405] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2574.307261] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2574.308063] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.308865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2574.309673] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:05:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x2a1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='nr0\x00', 0x7, 0x100000000, 0x7ff}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x8610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x140, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe805bff798e6d83ecbbf0000000008000"], 0x0) 03:05:29 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:05:30 executing program 3: pipe2(&(0x7f0000000280), 0x80800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56dd, &(0x7f00000001c0)={0x0, 0x770f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') setresuid(0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$unix(0x1, 0x5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x191112, 0xffffffffffffffff, 0x8000000) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4080010, 0xffffffffffffffff, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) write$binfmt_elf64(r5, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x5b, 0x3, 0x3, 0x2, 0x3, 0x617c7a97, 0x2cd, 0x40, 0x2fa, 0x4e8, 0x7016, 0x38, 0x1, 0x0, 0x2ea, 0x8}, [{0x1, 0x19, 0xffffffffffffff3e, 0x100, 0x3, 0x3, 0x200, 0x6}, {0x70000000, 0x1, 0x0, 0xdc, 0x3f, 0x8, 0x0, 0x9}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x5ae) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:05:44 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="df37b2810f3b", @random="74c0ca5fb73b", @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@arp={0x806, @generic={0x101, 0xa01, 0x6, 0x7, 0x9, @local, "6495ad083ee57d", @link_local, "acf561333cc3"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x923, 0x5de, 0x199, 0x72]}) 03:05:44 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e000000, 0x0, 0x0, 0x0) 03:05:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe21, 0x100000001}, 0x41, 0xfffffffffffffffe, 0x4, 0x7, 0x7, 0x0, 0x5d93}, 0x0, 0xfffffffffffffffc, r1, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) pwritev2(r0, &(0x7f0000000840)=[{&(0x7f0000000600)="0f2e77dcfaab8a62c4483508b3378a348a6533e8e4cf677681aa6a01b7c76bff55d684c48837fe381411d14d2c546d56d3753ddda27fe33935ba97eef5c9b406492916e33fa94cb2d918e680487246a58053ffee77dca0fdda3cdd0460bb049291f1d648", 0x64}, {&(0x7f0000000680)="4c9e128147dc4f52d917e30c23204ccd68a8d5148594237abd7672dc1069a69e7dd2a4ebe2b4197eb0ac98c78c4421beaa29c002d75ae9e3420577abd63565e4f2260cf68a4663a2c7b650b86d595dc5630a008a520b48ab8f630350d740b97b13575d0a97fae32b33fb000ac83d4fb3cfbbbdc30c88f0cfe65757654809", 0x7e}, {&(0x7f0000000700)="07ade260a1737ec7d3e20350520e04b822c52746fb88b4f5a947b585272a9a0fb3988475c72dd225", 0x28}, {&(0x7f0000000740)="202b35583c36823dfe03096aa06c597752dbe6a1055dc7f0d0b06fce6884bae6fa6ce8dd8493e2af5b5b032317ed75512f4bdf65944d20090f0fcb6d18630a1ed9e7c2e535e2e0995aee1210581edadf10ccecac33892f382f10450eb90e20ebf9c4f079b123fd023530a95f9197ac4248338796bb2e91545cd79c59d819b078189e293840b8e97cde70afdec7f7fd1f3b19f7f593fca240c1384ac4e286d62aec786b4794db6981f59d96a3a259cdfdabb1c94025bd3091ffd5ca376cac7b0454b8ae376569422a434277b194f0b1e0840d9f704c72", 0xd6}], 0x4, 0x4, 0x4, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000080)=0xc0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {&(0x7f0000000440)="ffdd14b2d545b969616d54fa413948ca8c884e05a5e0b29fda45678de5b6ea9b32040cfbe28f87c93cf898c2624a360384a71f96dc79194b8c9cf744da855ca0b5aaf22f51db7f7c1cf4850f245977421e5f993e2c5e97146ac61139caedb63455f06e0ac29e00f522a151c2774de3ac62b0621adbe8f1cfca71952a01bd410dbd0731eb96367acfaef362026b898c9311a95951a302f26d1b3d3c6fb59470b3ce9e99d98277d23940f8e92a64207f20951d9407895b748c482f265db1", 0xbd, 0x5}], 0x1, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) dup3(0xffffffffffffffff, r6, 0x80000) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000100)) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000005c0)='./file0\x00', 0x50) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 03:05:44 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) 03:05:44 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc) 03:05:44 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) 03:05:44 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 03:05:44 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) [ 2588.729016] loop3: detected capacity change from 0 to 8388096 [ 2588.730297] nfs: Unknown parameter '-$' 03:05:44 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xffffffdffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x41, 0x1, 0x70bd27, 0x25dfdbfe, {0x11}, [@typed={0x14, 0x38, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x2400c0c0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) [ 2588.803724] FAULT_INJECTION: forcing a failure. [ 2588.803724] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.806337] CPU: 1 PID: 12520 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2588.807889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2588.809729] Call Trace: [ 2588.810318] dump_stack+0x107/0x167 [ 2588.811128] should_fail.cold+0x5/0xa [ 2588.811975] ? create_object.isra.0+0x3a/0xa20 [ 2588.812981] should_failslab+0x5/0x20 [ 2588.813835] kmem_cache_alloc+0x5b/0x310 [ 2588.814742] create_object.isra.0+0x3a/0xa20 [ 2588.815712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2588.816845] kmem_cache_alloc_trace+0x151/0x320 [ 2588.817890] ? lock_downgrade+0x6d0/0x6d0 [ 2588.818816] __io_queue_sqe+0x666/0x9d0 [ 2588.819703] ? io_issue_sqe+0x77b0/0x77b0 [ 2588.820621] ? __fget_files+0x2f8/0x520 [ 2588.821507] ? __io_file_supports_nowait+0x22a/0x510 [ 2588.822631] ? io_prep_rw+0x7f5/0x1050 [ 2588.823501] io_submit_sqes+0x44aa/0x8610 [ 2588.824451] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2588.825561] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2588.826635] ? find_held_lock+0x2c/0x110 [ 2588.827539] ? io_submit_sqes+0x8610/0x8610 [ 2588.828500] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2588.829578] ? wait_for_completion_io+0x270/0x270 [ 2588.830647] ? rcu_read_lock_any_held+0x75/0xa0 [ 2588.831672] ? vfs_write+0x354/0xb10 [ 2588.832497] ? fput_many+0x2f/0x1a0 [ 2588.833312] ? ksys_write+0x1a9/0x260 [ 2588.834158] ? __ia32_sys_read+0xb0/0xb0 [ 2588.835061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.836220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2588.837373] do_syscall_64+0x33/0x40 [ 2588.838199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2588.839332] RIP: 0033:0x7f1e32d62b19 [ 2588.840154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2588.844232] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2588.845929] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2588.847508] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2588.849087] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2588.850676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2588.852259] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:05:44 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x2c, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x66}, 0x8) r2 = openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000100)={0xe0, 0x6}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) 03:05:44 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0xcf, 0xffff, 0x2, 0x2, 0x1, [{0x5, 0x256, 0x7, '\x00', 0x4}]}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2, 0x6, 0x6, 0x4, 0x0, 0x8, 0x9084, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x10601, 0x4, 0x4, 0x5, 0x1, 0x8, 0x7ff, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000020c45ac15f6c0086dd60d0ff47000206e7fd80000000000000000000"], 0x0) 03:05:44 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10) 03:05:44 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 03:05:44 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x72, 0x0, 0x1, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') 03:05:44 executing program 4: r0 = syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xc0, 0xc3, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x40, 0x3, 0x36}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0xf, 0x5, 0x10, 0x9}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x50, 0x2, 0x9, 0x4}]}, 0x6, [{0x9c, &(0x7f0000000100)=@string={0x9c, 0x3, "2bed94a412cef6fe01607616ec5cf14802162f32264aff89104d969eaf80d9c09731526c30dce83d97cf4d67d3947dbe0533a9d25c8e643f04678d9fa8d46cb38121957dbe5a745b8c58300246d5348c28439c1e394e1b22faa7b1d0679e08b7d72542f4e0341bdd4b5fa3f5a38c3a5b9c2af973a7e1fb3107e7d911ef08f8a28040141b8df53cee8c6850a65f29623b4409f6f781c7f7ec9490"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x7, &(0x7f0000000200)=@string={0x7, 0x3, "46a829813d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c01}}, {0x32, &(0x7f00000002c0)=@string={0x32, 0x3, "5bab2242765d346479f961e84241063a4fd8c2f031e7eb680f9b6842d978074ea125d7aff6c044193fc7f5592099fa82"}}]}) syz_usb_ep_read(r0, 0x7f, 0x46, &(0x7f0000000380)=""/70) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa000086dd60d0ff47000200aaff"], 0x0) 03:06:01 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x40, 0x800, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe80e4ffffffffffffff0000000000aaff"], 0x0) 03:06:01 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@canfd={0xd, {{0x4, 0x1, 0x1, 0x1}, 0x10, 0x1, 0x0, 0x0, "b5093fb35d643e6084898126d4c9fdd9fe607ff43312916227b4036bff2fbbe93da45b9b314f119b8e6bf50cc213b28367599a055031996bf1c6f9b718bcf9ce"}}}}, &(0x7f0000000080)={0x0, 0x3, [0xd37, 0x85a, 0xd71, 0xcad]}) 03:06:01 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 03:06:01 executing program 7: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000280)=""/172, &(0x7f00000001c0)=0xac) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000040), 0x80800) pipe(&(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 03:06:01 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r1}, &(0x7f0000000300)=0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x41, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000003ad5f80b2cd17e491e611791cd6120b1e47e45236aaf5d00"/43], 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r3, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) read(0xffffffffffffffff, &(0x7f0000000540)=""/102, 0x66) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000340)) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:06:01 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x12) 03:06:01 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8e00, 0x0, 0x0, 0x0) 03:06:01 executing program 2: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) [ 2606.359398] FAULT_INJECTION: forcing a failure. [ 2606.359398] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.361904] CPU: 1 PID: 12573 Comm: syz-executor.7 Not tainted 5.10.240 #1 [ 2606.363212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.364799] Call Trace: [ 2606.365384] dump_stack+0x107/0x167 [ 2606.366089] should_fail.cold+0x5/0xa [ 2606.366908] should_failslab+0x5/0x20 [ 2606.367721] kmem_cache_alloc_bulk+0x4b/0x320 [ 2606.368707] io_submit_sqes+0x6fe6/0x8610 [ 2606.369519] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.370576] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.371585] ? find_held_lock+0x2c/0x110 [ 2606.372480] ? io_submit_sqes+0x8610/0x8610 [ 2606.373439] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2606.374489] ? wait_for_completion_io+0x270/0x270 [ 2606.375352] ? rcu_read_lock_any_held+0x75/0xa0 [ 2606.376347] ? vfs_write+0x354/0xb10 [ 2606.377027] ? fput_many+0x2f/0x1a0 [ 2606.377841] ? ksys_write+0x1a9/0x260 [ 2606.378542] ? __ia32_sys_read+0xb0/0xb0 [ 2606.379285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.380239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.381162] do_syscall_64+0x33/0x40 [ 2606.381977] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.382899] RIP: 0033:0x7f1e32d62b19 [ 2606.383577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.387506] RSP: 002b:00007f1e302d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2606.389053] RAX: ffffffffffffffda RBX: 00007f1e32e75f60 RCX: 00007f1e32d62b19 [ 2606.390411] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2606.391659] RBP: 00007f1e302d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.392940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.394172] R13: 00007ffcc97037ef R14: 00007f1e302d8300 R15: 0000000000022000 03:06:02 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x40200000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/146, 0x92, &(0x7f0000000280)=""/175, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x1, 0x53, 0x40, 0x0, 0x8001, 0x5480, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0xffffffff, 0xfff, 0x5, 0xe5d, 0x9, 0x142f, 0x0, 0x2, 0x0, 0x8}, r1, 0x4, r0, 0xa) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff"], 0x0) 03:06:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18000, 0x1) 03:06:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x10000}) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x510}}, 0x41) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaa6aaaaaac100000000000086dd60d0ff4700008000000000000100000000000000aaff02000000"], 0x0) 03:06:02 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x18) 03:06:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d0ff4700020600fe8000000000000000000000000000aaff02"], 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x10, 0xffffffffffffffff, 0x8000000) 03:06:02 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1fe}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xdfa}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x10000000, 0x0, 0x0, 0x0) 03:06:02 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7022, &(0x7f0000000680)={0x0, 0xfaca}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x80800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e) 03:06:02 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80024, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000040c6dd60d0ff4704020600a0c55755664d3230fe800000000000afe4d2"], 0x0) VM DIAGNOSIS: 03:11:03 Registers: info registers vcpu 0 RAX=ffffffff83e953c0 RBX=0000000000000000 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff85980258 CR3=000000001b834000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041700d9380000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e953c0 RBX=0000000000000001 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff8597e000 CR3=000000001b834000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000030000000200000000 XMM02=6465657320636578650a0a0100010101 XMM03=7473657220726f747563657865110073 XMM04=09006e65672063657865080073747261 XMM05=20636578650e007a7a75662063657865 XMM06=20636578650d006574616469646e6163 XMM07=7420636578650a00657a696d696e696d XMM08=726f7475636578651100736465657320 XMM09=20636578650800737472617473657220 XMM10=0e007a7a7566206365786509006e6567 XMM11=0d006574616469646e61632063657865 XMM12=650a00657a696d696e696d2063657865 XMM13=20636578650b006c61746f7420636578 XMM14=616d7320636578650a00656761697274 XMM15=000073746e696820636578650a006873