]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}, 0x2001) 06:36:11 executing program 3: inotify_init1(0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:36:11 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x600) 06:36:11 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x30, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 06:36:24 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:36:24 executing program 3: inotify_init1(0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:36:24 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000040)=""/23) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000001080)=""/138) r0 = semget$private(0x0, 0x4, 0x410) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/237) io_setup(0x8000, &(0x7f0000001240)) 06:36:24 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x700) 06:36:24 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x3f, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:24 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 06:36:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 06:36:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='keyring\x00', r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r0, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000300)={0x600, {{0x2, 0x4e20, @loopback}}}, 0x88) add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="f5da8f467dc433be9148aa866f313a56692f5964766e6f117b84ff9aee951963a335a782a84aae", 0x27, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={0x0, 0x0, 0x6d}, 0x0, 0x0, &(0x7f0000000180)=""/109) socket$nl_generic(0x10, 0x3, 0x10) 06:36:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 06:36:24 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x58) 06:36:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4105, 0x1009}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',w-\x00fdn', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=none,smackfsfloor=:,seclabel,\x00']) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x3a3, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="1d0001"], 0x340}}, 0x0) 06:36:24 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:24 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x900) 06:36:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 06:36:24 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4, 0x4, &(0x7f0000000440)=[{&(0x7f0000000200)="4a112a74118c3d9e3baeaa5376c4970ddaea8a00a67420ba4da2da039671cabc7b8c7ff19fbaf54f0f7d7753150dece32784eb1a6bdec1f29b13c30cfe031a977caa3f0098505cd1fee72839c0be4c58a058cb29fb0db14e2e8455918c50f046c92084ad93bad67c59a13c1a837933797c4a766e68819c94a385c046a1d58c70a6b6547d8dd93364d09ba896bb0014c70d6393e8d3c8e06580068f0fba89e52237470e1ad2ce8e4b4dcd36452a7f1b71bda353f58d09499ae7877126c91f0d69fcfa48169173ab6c5db1b6916ec168d076515b707326", 0xd6}, {&(0x7f0000000140)="86323e8f1c2897c0b249ea8d6ce219feaed28763725cd35c0135d5be05d7ce43fbf120cf602ae547a83ab7f738163f52f7a874ee38c49c0a54e0bdb3894f77d3ca2ce43e1ae24bfb1b5edfde51671c2f509f926705a4712e6aaca9f1d144625e0f31", 0x62, 0xffffffff}, {&(0x7f0000000300)="9e49bb567e09842a24203bac127f8c2954a3a497e28f2b1b02392bdc2031665a2e507d74847dfcd21454787e757f0e2121f5bc7036ea8ccea72cfde5559acd075b052082023bb3a0ed33ab3027686ce5e939d77c302c4d3e80c1ec5dff4fa458b6fda39602bc0c59f5f254c2d7c7fdce38af5081c12fa910d825e038305624d349b2e988e2a1a81930f14ef8ee481d1933b38065da3d5d70f1584cc270c1ee86dfddeac6ff9c04e6fab438dcfd477079b9be2b6db18f77", 0xb7, 0x2}, {&(0x7f00000003c0)="e2778568771f201d40d72123209f79163452077c817532a7ae4dd393c20fc1b246ea6ffa76ec84e0e5a5a9d756d052bfa2ee03cdc2d2232d0db3d0df19a28f1f6bf78877f77e9958eb346c36540787c74b4e53ce1652b17ddfcf3c4f944d38", 0x5f, 0xc35}], 0x1240000, &(0x7f00000004c0)={[{@shortname_winnt}, {@shortname_winnt}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@shortname_mixed}, {@utf8no}, {@shortname_lower}], [{@dont_hash}, {@dont_appraise}]}) sendfile(r0, r1, 0x0, 0x100000001) [ 719.812811] 9pnet: Insufficient options for proto=fd 06:36:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0xa00) 06:36:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x43f2, 0x4) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="3181", 0x2}], 0x1}}], 0x1, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 06:36:38 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r0, r1, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:36:38 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:36:38 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x8) fstatfs(r0, &(0x7f0000000400)=""/196) rmdir(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0xffffff7f, 0x0, 0x800000000000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 06:36:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 06:36:38 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() 06:36:38 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x1d00) 06:36:38 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 06:36:38 executing program 0: fork() 06:36:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200), 0x120b021, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004034, &(0x7f0000000040)=ANY=[@ANYBLOB]) 06:36:38 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:36:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 06:36:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x4800) 06:36:38 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x2c, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:53 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:36:53 executing program 6: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x9d, 0x5, 0x5, 0x8}, &(0x7f0000001400)={0x0, 0x9, 0x4ffb, 0x7, 0x0, 0x3f, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x4, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r3, &(0x7f0000001380)) fchmod(0xffffffffffffffff, 0x30) close_range(r2, r0, 0x0) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffff, 0x0, 0x1000}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x90841, 0x40) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0xfffffffe, 0x1d}}) unshare(0x48020200) 06:36:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 06:36:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x5}, [{}], {}, [{}], {0x10, 0x4}}, 0x34, 0x0) 06:36:53 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x4c00) 06:36:53 executing program 0: fork() 06:36:53 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x30, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:53 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:36:53 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x60, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x5}, [{}], {}, [{}], {0x10, 0x4}}, 0x34, 0x0) 06:36:53 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x300, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:36:53 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x6800) 06:36:53 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:36:53 executing program 0: fork() 06:36:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 06:36:53 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x2c00, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:06 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:37:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="08021d491bf371171a57c3d17f", @ANYRES16=0x0, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x4001}, 0x404c000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x169}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002e00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "4afaac19f8837c"}) fcntl$setsig(r1, 0xa, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001e00)={{r5, 0x2, 0x3, 0x0, 0x5, 0xff, 0xb6, 0xffffffff, 0x0, 0xd4d, 0x1, 0x101, 0x1f, 0x47d, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "46dacd8396fe92"}) sendmsg$inet6(r3, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) 06:37:06 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) fork() 06:37:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 06:37:06 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:37:06 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x3000, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:06 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f0000000a40)={0x0, 0x2, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) 06:37:06 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x6c00) 06:37:06 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x4000, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:06 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x7400) 06:37:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 06:37:07 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) fork() 06:37:07 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:37:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x1c4, r4, 0x600, 0x70bd2b, 0x800, {{}, {@val={0x8, 0x3, r6}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x8c, 0xfa, "45087337fe9561a17124004354a1326a1d34ba0419c9703e1a48fb20a555c2bd37c3ae32518d0e6395b662610ded69032ea800ad7b33cacca1efa006d1822c3a4c82693f539a974d9a39ec23aad34bad5ea06560a2eb38585ee6a8cf58b8119d29a93bc454724649c1e75d54429107716e13abce0adf9669d375e3c8935992d0c8f583b42cdeda5a"}, @NL80211_ATTR_FILS_ERP_RRK={0x100, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa7f}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "ed7f"}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20040800}, 0x11) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4000004) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="ffff0000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="10005a80f7fd00800600010000000000"], 0x2c}}, 0x0) 06:37:07 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x6000, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 06:37:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3f, &(0x7f0000000180)={0x0, 0x0, 0x100}) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000380)=""/116, 0x74, 0xd349578) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x5, 0x80, 0xd0, 0x80, 0x5, 0x27, 0x0, 0x3ff, 0x110, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x358, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x9, 0xb416, 0x6, 0x1, 0x10001, 0x1, 0x0, 0x7, 0x0, 0xffffffff9ecb05ec}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2603266f3344e76a85441cfe551f239e56667b3e2112124f44add0886658d5e6629c4d7748b47eb8e50be07f332a946bf3034e6a96c70113fdd005dd1fa92302dc820937b469bd5de42e285f9572a5098ed4c821693f5b3f7bce1e51dd4d0304ae074cf1b857fa5042fc13009484299e46da2d1b87db0b54d0f0de6ca52ad735f212e21d62632d13020529f463861ca6c253c935059112160897776a2ca6c6e320e85adc9b2e8deeaa67f241141fa42db0151a2156f158666af3dd2e9d6e94df44944a734750412770aa98393cfd97a19688038d85b248eabe8f45d470be3178", @ANYBLOB="0000000004018e3711ec00c6a113cda922efb701fc27e6610722a9a24768a6e18545686446e6e1363c0946321722463cf93822d0999d72edb7f083d0d1a48f66c137debc7bfe3087d9185acf907a220ea1f4ec8ef426c190be8e3a37c7438346d2a5e4d262e5086d618453288e9c6e5a9aa7c19e5ac80537c6ea1feb07edd79827473b2be499fbafb799625648380000000000008956db1d2c2a0dd0cedc04bb2806eb08b213fd87962abd74b181e34989", @ANYBLOB="81b7a71e652957ed2302955f466e5c6d557e22ea675c4434c5b62afed5124f37cf4c6458799a154f2990a48f27bcd91ca6911a58ae727bc9767d678edf9cc3c6a768d2dfe2ebc032dafc2489993c72e2a567269c1f4a0724f86a28665f09c782e1782235bd7aeb7a90775760792902dcb363e4ea2eea1648c981800753d54fb4c1a4e77c2c7ee0482e48b25d8eb31039a58efc61d2825c79a4e141e551965ddd03f2a082962ad9214e32dadf7af02d9bdf9b8aad479419fa35e08e49b54e4b2ca029d0d67709368d603ee62823a68c9737f8f999c8da77ba0cc9f2ed634580e4c9433879e72844f25dee13d5096f1cf9c82397f7d9ebc8f6feab14b16e4ca875b66234ab8e36cbb77eb12b1360df91d3b0f10162891ead5760419f095f64d69fd9a8631213fc00f709d39772576614fc4048d5fd5fa441de8514f52393f6bcda6a58350689cd039e9922d9ad44783643b76f0163a3dd037ce70c23e21a26e48315c9a4b06d9958b4a4eb1f9cc31252056d6de201622fcd7e040f636fe8bc1efcac4608c6a72f346dc7c779d7249e8a0af05b64149c433408548462108cff2bf900168046df4d7ae012e10e25c42b1b28b6e8e96dde54a3091403f8a0a2748eec464f0527ab881eafc5d60afbcab1ec195af0049e98aa2707f34ecc55b4e761ee5e2f33ff3d2d08529359dd43bdc2d6d3f9256cc4fd2d3fcec810964be677fd9da00c1f5c6702394eb1aa29d860ff4af94aa54dd36c0429a6de8ecd95ca799182b9c93282f796f8f8b4b90ccedae821d49293f3d15187e1eab1c44f1ee645fad7f504607fe8ede36990a983f12bf58a8eaa2efc2055a8e1c7ef86a57363c3566991379849ceea710df4472ffac96be3"], 0x370}}, 0x2000c080) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000700)=0xc) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000001e00)=""/4096, &(0x7f0000000100)=0x1000) read(r4, &(0x7f00000002c0)=""/138, 0x8a) syz_emit_ethernet(0x89, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa31f52699464f08004500007b000000000011907800000000ffffff7f00004e20016790785c25ad596728f7dcb27b87352defa49c41126cbccb9801040000c3771b74097af9cd2bd0e04668cc794b0887d80dd2643c4c3606b6f8ffff624af6b294ab32e2c99a5bfe9c4c548a14726aea46086807f4e012df15a4f18e27948814e80b29a745b86d107c6cc478638a8bbd48"], 0x0) recvmmsg(r3, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 06:37:20 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) fork() 06:37:20 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x7a00) 06:37:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:37:20 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:37:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 06:37:20 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0xffff, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:20 executing program 6: r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000001b40)={0x260000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3c}, &(0x7f0000000500)=""/140, 0x8c, &(0x7f0000000440), &(0x7f0000001b00)=[r0, 0x0, r0, r0, r0, r0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r2 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x4) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 06:37:20 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:20 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0xeffd) 06:37:20 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff3}]}) r0 = getpid() ptrace(0x4207, r0) r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pidfd_getfd(r1, r2, 0x0) 06:37:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:37:20 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0xfdef) 06:37:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 1) 06:37:20 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2c, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 775.538754] FAULT_INJECTION: forcing a failure. [ 775.538754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.539790] CPU: 1 PID: 6446 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 775.540391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 775.541078] Call Trace: [ 775.541306] dump_stack+0x107/0x167 [ 775.541606] should_fail.cold+0x5/0xa [ 775.541931] _copy_from_user+0x2e/0x1b0 [ 775.542263] io_uring_setup+0x91/0x2910 [ 775.542599] ? wait_for_completion_io+0x270/0x270 [ 775.542998] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 775.543422] ? rcu_read_lock_any_held+0x75/0xa0 [ 775.543807] ? vfs_write+0x354/0xb10 [ 775.544121] ? fput_many+0x2f/0x1a0 [ 775.544460] ? ksys_write+0x1a9/0x260 [ 775.544843] ? __ia32_sys_read+0xb0/0xb0 [ 775.545235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 775.545723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 775.546212] do_syscall_64+0x33/0x40 [ 775.546539] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 775.546966] RIP: 0033:0x7fb639313b19 [ 775.547275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 775.548792] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 775.549429] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 775.550019] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 775.550693] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 775.551301] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 775.551886] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:37:20 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x40000) 06:37:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:37:20 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x30, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 2) [ 775.707390] FAULT_INJECTION: forcing a failure. [ 775.707390] name failslab, interval 1, probability 0, space 0, times 0 [ 775.708476] CPU: 0 PID: 6458 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 775.709116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 775.709802] Call Trace: [ 775.710032] dump_stack+0x107/0x167 [ 775.710341] should_fail.cold+0x5/0xa [ 775.710666] ? io_uring_setup+0x23c/0x2910 [ 775.711025] should_failslab+0x5/0x20 [ 775.711347] kmem_cache_alloc_trace+0x55/0x320 [ 775.711735] io_uring_setup+0x23c/0x2910 [ 775.712082] ? wait_for_completion_io+0x270/0x270 [ 775.712527] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 775.712968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 775.713406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 775.713843] do_syscall_64+0x33/0x40 [ 775.714158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 775.714585] RIP: 0033:0x7fb639313b19 [ 775.714899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 775.716439] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 775.717223] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 775.717939] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 775.718636] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 775.719378] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 775.720192] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 788.913216] FAULT_INJECTION: forcing a failure. [ 788.913216] name failslab, interval 1, probability 0, space 0, times 0 [ 788.914785] CPU: 1 PID: 6470 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 788.915419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 788.917409] Call Trace: [ 788.917924] dump_stack+0x107/0x167 [ 788.918567] should_fail.cold+0x5/0xa [ 788.919237] ? copy_process+0x3285/0x7800 [ 788.919953] should_failslab+0x5/0x20 [ 788.920628] kmem_cache_alloc_node+0x55/0x330 [ 788.921409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 788.922317] copy_process+0x3285/0x7800 [ 788.923006] ? __lock_acquire+0xbb1/0x5b00 [ 788.923735] ? lock_downgrade+0x6d0/0x6d0 [ 788.924443] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 788.925393] ? __cleanup_sighand+0xb0/0xb0 [ 788.926136] ? lock_acquire+0x197/0x470 [ 788.926824] ? find_held_lock+0x2c/0x110 [ 788.927527] kernel_clone+0xe7/0x980 [ 788.928159] ? lock_downgrade+0x6d0/0x6d0 [ 788.928972] ? find_held_lock+0x2c/0x110 [ 788.929639] ? create_io_thread+0xf0/0xf0 [ 788.930328] ? ksys_write+0x12d/0x260 [ 788.930966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 788.931492] __do_sys_fork+0x8a/0xc0 [ 788.931830] ? kernel_thread+0xf0/0xf0 [ 788.932154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 788.932592] ? syscall_enter_from_user_mode+0x1d/0x50 [ 788.932997] ? trace_hardirqs_on+0x5b/0x180 [ 788.933338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 788.934225] do_syscall_64+0x33/0x40 [ 788.934838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 788.935689] RIP: 0033:0x7f8f4b3d9b19 [ 788.936304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 788.939583] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 788.940999] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 788.941614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 788.942229] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 788.942837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.943511] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:37:34 executing program 2: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0) r1 = clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x1f, 0x4, @tid=r1}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{r3, r4+10000000}, {0x0, 0x3938700}}, &(0x7f0000000240)) 06:37:34 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x60, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:34 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x30, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:34 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x100000) 06:37:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:37:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 3) 06:37:34 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 1) 06:37:34 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:37:34 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x1000000) 06:37:34 executing program 6: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0200000700000000000000060000000a00000000000000140001"], 0x2c}}, 0x0) syz_io_uring_setup(0x47e8, &(0x7f0000000040)={0x0, 0xa158, 0x1, 0x3, 0x1e8, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x2, 0x6000, @fd=r2, 0x2, &(0x7f0000000400)=[{&(0x7f0000000240)="875d36dc2c1cc14f13464c2d0a5aca9131369ad5f823d33a3106d0112fa1e4be5751e6a6086c333c1ca6b6f1cfe6a8ef61825afaa8c9bdfe0177cb3adb0ff3d6603a8441e9a2a4259841f753e312425ab253aba7526ff9fe484d2aa54caa1777e81ce89d28f88345d91c7be5e1fe1b0e08119d844b18b76d99461b39d0f15b9482258ee3cbc573179b6f243c4bad3c9909f0b681f42849659acfddf38a51f7dcec265b57c6", 0xa5}, {&(0x7f0000000300)="b577291fa23eca4b4d76563cc183fbef7a363e9091e62b10ccd9d1e40f052b1088e82ed0b6d625afe92d82c04b57b16e2c9397a5127a6b0bbc0db451a0ea1a35144a9138b454c29e35a1414a5d1b1fcb8d0e6f9ac89aeb4772bdac70cc3920cf996a6a9aceb6fdd9085581fd5a236d5b8175c1ef6f07eb161041871b771189c95ba624ab11aa1d1e98daaea478ba470ebeb3622ba961a2e85294a37cd79214d179e6dc457595cf2f4d9433807b8a572d4665ad3a93073abbb535ca6768992bf56fe9e5e4f220", 0xc6}], 0x2, 0x8}, 0x9) 06:37:34 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x300, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 789.044562] FAULT_INJECTION: forcing a failure. [ 789.044562] name failslab, interval 1, probability 0, space 0, times 0 [ 789.045848] CPU: 1 PID: 6473 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 789.046432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 789.047132] Call Trace: [ 789.047371] dump_stack+0x107/0x167 [ 789.047694] should_fail.cold+0x5/0xa [ 789.048031] ? create_object.isra.0+0x3a/0xa20 [ 789.048440] should_failslab+0x5/0x20 [ 789.048814] kmem_cache_alloc+0x5b/0x310 [ 789.049177] create_object.isra.0+0x3a/0xa20 [ 789.049560] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 789.050010] kmem_cache_alloc_trace+0x151/0x320 [ 789.050422] io_uring_setup+0x23c/0x2910 [ 789.050781] ? wait_for_completion_io+0x270/0x270 [ 789.051198] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 789.051656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 789.052110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 789.052578] do_syscall_64+0x33/0x40 [ 789.052907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 789.053347] RIP: 0033:0x7fb639313b19 [ 789.053672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.055216] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 789.055867] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 789.056488] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 789.057102] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 789.057792] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 789.058481] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:37:34 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2c00, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:34 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 2) 06:37:34 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x2000000) 06:37:34 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x35408, 0x0, 0xfffffffe, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x401, 0x8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="3e3fc8e89bfda4b10000d9a4d1f6c8fcf98e75bbf9624a5fd593a06ec8b18dec825f90b8d41bfa1c66094c85060e79836ad44bfc0245c602d90afd5289f2ada29b64643020cd5b9db3bd46863ee5ba6a1660d9f15a710e8bd852a62b2b5f815c470b871f7c6610bdee7a541c1001e80f9de5b9960d72f4c70708b51aad3ec98c4d85d0fe25751da2ffe5"], 0xf) fallocate(r1, 0x3, 0x0, 0x18000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105142, 0x80) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) [ 789.224701] FAT-fs (loop3): bogus number of reserved sectors [ 789.226321] FAT-fs (loop3): Can't find a valid FAT filesystem [ 789.233431] FAULT_INJECTION: forcing a failure. [ 789.233431] name failslab, interval 1, probability 0, space 0, times 0 [ 789.235943] CPU: 0 PID: 6499 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 789.237311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 789.238807] Call Trace: [ 789.239285] dump_stack+0x107/0x167 [ 789.239930] should_fail.cold+0x5/0xa [ 789.240662] ? create_object.isra.0+0x3a/0xa20 [ 789.241484] should_failslab+0x5/0x20 [ 789.242176] kmem_cache_alloc+0x5b/0x310 [ 789.242911] create_object.isra.0+0x3a/0xa20 [ 789.243699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 789.244665] kmem_cache_alloc_node+0x169/0x330 [ 789.245681] copy_process+0x3285/0x7800 [ 789.246570] ? __lock_acquire+0xbb1/0x5b00 [ 789.247550] ? lock_downgrade+0x6d0/0x6d0 [ 789.248477] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 789.249556] ? __cleanup_sighand+0xb0/0xb0 [ 789.250320] ? lock_acquire+0x197/0x470 [ 789.251037] ? find_held_lock+0x2c/0x110 [ 789.251759] kernel_clone+0xe7/0x980 [ 789.252408] ? lock_downgrade+0x6d0/0x6d0 [ 789.252809] ? find_held_lock+0x2c/0x110 [ 789.253155] ? create_io_thread+0xf0/0xf0 [ 789.253511] ? ksys_write+0x12d/0x260 [ 789.253845] ? __mutex_unlock_slowpath+0xe1/0x600 [ 789.254262] __do_sys_fork+0x8a/0xc0 [ 789.254580] ? kernel_thread+0xf0/0xf0 [ 789.254927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 789.255371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 789.255808] ? trace_hardirqs_on+0x5b/0x180 [ 789.256176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 789.256673] do_syscall_64+0x33/0x40 [ 789.256992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 789.257424] RIP: 0033:0x7f8f4b3d9b19 [ 789.257740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.259273] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 789.259915] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 789.260543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 789.261145] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 789.261742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.262336] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:37:34 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3000, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:34 executing program 6: syz_emit_ethernet(0x12, &(0x7f0000001680)={@empty, @link_local, @val={@void}, {@generic={0x8100}}}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x9, 0xbf, 0x9, 0x0, 0x10000, 0xa0118, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x10900, 0x81, 0x6, 0x4, 0x2, 0x2d, 0x2cdd, 0x0, 0x100, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xa) utimes(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0) 06:37:34 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:37:34 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x3000000) 06:37:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 4) 06:37:34 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x17) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_rm_watch(r0, r1) pwrite64(r2, &(0x7f0000000200)="1e", 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) [ 789.389031] FAT-fs (loop3): bogus number of reserved sectors [ 789.390440] FAT-fs (loop3): Can't find a valid FAT filesystem [ 789.484248] FAULT_INJECTION: forcing a failure. [ 789.484248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 789.487155] CPU: 1 PID: 6522 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 789.488736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 789.490658] Call Trace: [ 789.491270] dump_stack+0x107/0x167 [ 789.492102] should_fail.cold+0x5/0xa [ 789.493111] __alloc_pages_nodemask+0x182/0x600 [ 789.493952] ? lock_release+0x680/0x680 [ 789.494668] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 789.495740] ? lock_downgrade+0x6d0/0x6d0 [ 789.496498] alloc_pages_current+0x187/0x280 [ 789.496914] kmalloc_order+0x35/0x160 [ 789.497245] kmalloc_order_trace+0x14/0xa0 [ 789.497608] io_uring_setup+0x31c/0x2910 [ 789.497961] ? wait_for_completion_io+0x270/0x270 [ 789.498370] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 789.498819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 789.499265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 789.499702] do_syscall_64+0x33/0x40 [ 789.500021] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 789.500527] RIP: 0033:0x7fb639313b19 [ 789.500845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.502389] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 789.503033] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 789.503636] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 789.504239] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 789.504890] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 789.505492] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:37:48 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x4000000) [ 803.884676] FAULT_INJECTION: forcing a failure. [ 803.884676] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.886046] CPU: 0 PID: 6530 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 803.886617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 803.887318] Call Trace: [ 803.887553] dump_stack+0x107/0x167 [ 803.887866] should_fail.cold+0x5/0xa [ 803.888197] __alloc_pages_nodemask+0x182/0x600 [ 803.888602] ? lock_downgrade+0x6d0/0x6d0 [ 803.888965] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 803.889479] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 803.889928] ? kmem_cache_alloc_node+0x2bc/0x330 [ 803.890341] copy_process+0x618/0x7800 [ 803.890677] ? __lock_acquire+0xbb1/0x5b00 [ 803.891053] ? lock_downgrade+0x6d0/0x6d0 [ 803.891412] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 803.891869] ? __cleanup_sighand+0xb0/0xb0 [ 803.892236] ? lock_acquire+0x197/0x470 [ 803.892593] ? find_held_lock+0x2c/0x110 [ 803.892951] kernel_clone+0xe7/0x980 [ 803.893272] ? lock_downgrade+0x6d0/0x6d0 [ 803.893626] ? find_held_lock+0x2c/0x110 [ 803.893974] ? create_io_thread+0xf0/0xf0 [ 803.894333] ? ksys_write+0x12d/0x260 [ 803.894670] ? __mutex_unlock_slowpath+0xe1/0x600 [ 803.895090] __do_sys_fork+0x8a/0xc0 [ 803.895410] ? kernel_thread+0xf0/0xf0 [ 803.895762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 803.896211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 803.896676] ? trace_hardirqs_on+0x5b/0x180 [ 803.897042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 803.897475] do_syscall_64+0x33/0x40 [ 803.897791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.898221] RIP: 0033:0x7f8f4b3d9b19 [ 803.898537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.900077] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 803.900731] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 803.901326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 803.901930] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 803.902529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:37:48 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 3) 06:37:48 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x6000, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:37:49 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) [ 803.903124] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000580)="678e95660bce4368bcb73c916aa86caf146f2fa3279e4e1175e586623031bb3969bc769c9a8205e53791b55e6bdc54cbd2cadbe355a3abc0a1f2f6b21cc8754c4a20968278e5b2d217238f46c20ceedd8a56695206eab4194a26353e4532d1f38d521803cf35fe5cae67b24a0dba88e6a51963ab", 0x74}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf0}}, {{&(0x7f0000000640)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000002f00)="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", 0xaa7}], 0x1, &(0x7f0000000980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}], 0x18}}], 0x2, 0x1) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffffc9, 0xcd08, 0x0, 0xfffffffffffffed7) 06:37:49 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:37:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 5) 06:37:49 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(r0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x406085, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x8, 0x7, 0x3ff, r0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 06:37:49 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) [ 803.942108] FAULT_INJECTION: forcing a failure. [ 803.942108] name failslab, interval 1, probability 0, space 0, times 0 [ 803.943180] CPU: 1 PID: 6542 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 803.943787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 803.944512] Call Trace: [ 803.944801] dump_stack+0x107/0x167 [ 803.945143] should_fail.cold+0x5/0xa [ 803.945503] ? create_object.isra.0+0x3a/0xa20 [ 803.945928] should_failslab+0x5/0x20 [ 803.946285] kmem_cache_alloc+0x5b/0x310 [ 803.946646] create_object.isra.0+0x3a/0xa20 [ 803.947014] ? kasan_unpoison_shadow+0x33/0x50 [ 803.947398] kmalloc_order+0xfe/0x160 [ 803.947731] kmalloc_order_trace+0x14/0xa0 [ 803.948094] io_uring_setup+0x31c/0x2910 [ 803.948453] ? wait_for_completion_io+0x270/0x270 [ 803.948894] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 803.949344] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 803.949784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 803.950219] do_syscall_64+0x33/0x40 [ 803.950534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.950964] RIP: 0033:0x7fb639313b19 [ 803.951279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.952665] FAT-fs (loop3): bogus number of reserved sectors [ 803.952837] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 803.952862] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 803.953374] FAT-fs (loop3): Can't find a valid FAT filesystem [ 803.953997] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 803.954004] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 803.954011] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 803.954025] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:38:02 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x5000000) 06:38:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r2, r1, &(0x7f0000000000)=0x6e, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x4e, 0x8, 0x6, 0x0, 0x80000000, 0x8008, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x800, 0x7fffffff}, 0x88a, 0xffffffff, 0x7595, 0x5, 0x246, 0xc00000, 0x2, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000000000000000000000000000000000000000000000000000000000000000002e27e418504889216b8b6cd50910bba313a43cbeae1324aca75c56c33c514617d2e756005cb826fe7793564669f98dd68a09d1af78c12ded42aa86c9e281da4fb400a35ab1dc1f771b8ce05b33bea8"]}) 06:38:02 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:38:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:02 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xffff, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:02 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 4) 06:38:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 6) 06:38:02 executing program 2: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001880)={&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000017c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xc, 0x2, 0x0, [{}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2840400, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532322c72713d3078303030303030303030303030303430312c74696d656f0000000000000003303030303030303030303030332c666f776e65723c", @ANYRESDEC=r0, @ANYBLOB="2c736d61636b66736861743d2a2523b52c00"]) [ 817.481486] FAT-fs (loop3): bogus number of reserved sectors [ 817.482095] FAT-fs (loop3): Can't find a valid FAT filesystem [ 817.494530] FAULT_INJECTION: forcing a failure. [ 817.494530] name failslab, interval 1, probability 0, space 0, times 0 [ 817.495681] CPU: 1 PID: 6569 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 817.496326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.497125] Call Trace: [ 817.497393] dump_stack+0x107/0x167 [ 817.497741] should_fail.cold+0x5/0xa [ 817.498111] ? prepare_creds+0x25/0x5e0 [ 817.498498] should_failslab+0x5/0x20 [ 817.498867] kmem_cache_alloc+0x5b/0x310 [ 817.499257] ? lock_downgrade+0x6d0/0x6d0 [ 817.499658] prepare_creds+0x25/0x5e0 [ 817.500023] copy_creds+0x72/0x580 [ 817.500375] copy_process+0xfdc/0x7800 [ 817.500751] ? __lock_acquire+0xbb1/0x5b00 [ 817.501123] ? lock_downgrade+0x6d0/0x6d0 [ 817.501480] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 817.501933] ? __cleanup_sighand+0xb0/0xb0 [ 817.502298] ? lock_acquire+0x197/0x470 [ 817.502645] ? find_held_lock+0x2c/0x110 [ 817.502996] kernel_clone+0xe7/0x980 [ 817.503317] ? lock_downgrade+0x6d0/0x6d0 [ 817.503672] ? find_held_lock+0x2c/0x110 [ 817.504017] ? create_io_thread+0xf0/0xf0 [ 817.504375] ? ksys_write+0x12d/0x260 [ 817.504726] ? __mutex_unlock_slowpath+0xe1/0x600 [ 817.505142] __do_sys_fork+0x8a/0xc0 [ 817.505455] ? kernel_thread+0xf0/0xf0 [ 817.505794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 817.506234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 817.506671] ? trace_hardirqs_on+0x5b/0x180 [ 817.507034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 817.507462] do_syscall_64+0x33/0x40 [ 817.507775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 817.508201] RIP: 0033:0x7f8f4b3d9b19 [ 817.508515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.510071] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 817.510712] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 817.511308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.511903] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.512498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.513106] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:38:02 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:02 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x6000000) [ 817.526559] FAULT_INJECTION: forcing a failure. [ 817.526559] name failslab, interval 1, probability 0, space 0, times 0 [ 817.527529] CPU: 1 PID: 6571 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 817.528100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.528807] Call Trace: [ 817.529033] dump_stack+0x107/0x167 [ 817.529342] should_fail.cold+0x5/0xa [ 817.529672] ? io_uring_setup+0x3eb/0x2910 [ 817.530031] should_failslab+0x5/0x20 [ 817.530352] kmem_cache_alloc_trace+0x55/0x320 [ 817.530741] io_uring_setup+0x3eb/0x2910 [ 817.531088] ? wait_for_completion_io+0x270/0x270 [ 817.531495] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 817.531945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 817.532396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 817.532850] do_syscall_64+0x33/0x40 [ 817.533166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 817.533597] RIP: 0033:0x7fb639313b19 [ 817.533912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.535456] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 817.536097] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 817.536714] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 817.537321] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 817.537924] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 817.538535] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:38:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:02 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x7000000) 06:38:02 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r4, &(0x7f0000000000), 0x1b4000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0}}, 0x0) ftruncate(r3, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) sendmsg$nl_generic(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x88, 0x26, 0x300, 0x70bd2c, 0x25dfdbfc, {0x2}, [@nested={0x73, 0x79, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0xd27}, @generic="50263741a468bf0c9b8fbacf8bd54eb239fcb5bb52e66f83de20e05d487575a8650c24f6b9e4e5e5944c87ab544b98dc5dacfc2e4f092ebd827e7557ac7ef7e2a6b328a1e9918c245ce7ff09afbf6a9ee99d5a07474d2b3fb0088594e9f587"]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xacf4ac9b71142229}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 817.601410] FAT-fs (loop3): bogus number of reserved sectors [ 817.601956] FAT-fs (loop3): Can't find a valid FAT filesystem 06:38:16 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:16 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:38:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) 06:38:16 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2204, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x1010, r3, 0x0) syz_io_uring_setup(0x1a7d, &(0x7f0000000080)={0x0, 0x543f, 0x85cc953d1f13d7c9, 0x0, 0x16f, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xac2c3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r7, &(0x7f0000000280)={0x8000, 0x1, 0x1}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 831.805685] FAULT_INJECTION: forcing a failure. [ 831.805685] name failslab, interval 1, probability 0, space 0, times 0 [ 831.806778] CPU: 1 PID: 6608 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 831.807405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 831.808098] Call Trace: [ 831.808382] dump_stack+0x107/0x167 06:38:16 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 5) 06:38:16 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x9000000) 06:38:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 7) [ 831.808698] should_fail.cold+0x5/0xa [ 831.809091] ? create_object.isra.0+0x3a/0xa20 [ 831.809536] should_failslab+0x5/0x20 [ 831.809866] kmem_cache_alloc+0x5b/0x310 [ 831.810218] create_object.isra.0+0x3a/0xa20 [ 831.810670] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 831.811103] kmem_cache_alloc+0x159/0x310 [ 831.811520] prepare_creds+0x25/0x5e0 [ 831.811849] copy_creds+0x72/0x580 [ 831.812159] copy_process+0xfdc/0x7800 [ 831.812546] ? __lock_acquire+0xbb1/0x5b00 [ 831.812960] ? lock_downgrade+0x6d0/0x6d0 [ 831.813368] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 831.813824] ? __cleanup_sighand+0xb0/0xb0 [ 831.814188] ? lock_acquire+0x197/0x470 [ 831.814618] ? find_held_lock+0x2c/0x110 [ 831.814968] kernel_clone+0xe7/0x980 [ 831.815334] ? lock_downgrade+0x6d0/0x6d0 [ 831.815699] ? find_held_lock+0x2c/0x110 [ 831.816045] ? create_io_thread+0xf0/0xf0 [ 831.816452] ? ksys_write+0x12d/0x260 [ 831.816815] ? __mutex_unlock_slowpath+0xe1/0x600 [ 831.817239] __do_sys_fork+0x8a/0xc0 [ 831.817607] ? kernel_thread+0xf0/0xf0 [ 831.817953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 831.818479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 831.818917] ? trace_hardirqs_on+0x5b/0x180 [ 831.819286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 831.819779] do_syscall_64+0x33/0x40 [ 831.820099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 831.820582] RIP: 0033:0x7f8f4b3d9b19 [ 831.820930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 831.822573] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 831.823212] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 831.823861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.824509] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 831.825124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.825766] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 831.834762] FAT-fs (loop3): bogus number of reserved sectors [ 831.835336] FAT-fs (loop3): Can't find a valid FAT filesystem 06:38:16 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x2c, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:17 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0xa000000) [ 831.881339] FAULT_INJECTION: forcing a failure. [ 831.881339] name failslab, interval 1, probability 0, space 0, times 0 [ 831.882334] CPU: 0 PID: 6615 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 831.882918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 831.883617] Call Trace: [ 831.883850] dump_stack+0x107/0x167 [ 831.884164] should_fail.cold+0x5/0xa [ 831.884493] ? create_object.isra.0+0x3a/0xa20 [ 831.884914] should_failslab+0x5/0x20 [ 831.885239] kmem_cache_alloc+0x5b/0x310 [ 831.885588] create_object.isra.0+0x3a/0xa20 [ 831.885959] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 831.886390] kmem_cache_alloc_trace+0x151/0x320 [ 831.886796] io_uring_setup+0x3eb/0x2910 [ 831.887146] ? wait_for_completion_io+0x270/0x270 [ 831.887550] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 831.887995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 831.888434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 831.888888] do_syscall_64+0x33/0x40 [ 831.889204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 831.889634] RIP: 0033:0x7fb639313b19 [ 831.889951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 831.891486] RSP: 002b:00007fb636868108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 831.892128] RAX: ffffffffffffffda RBX: 00007fb639427020 RCX: 00007fb639313b19 [ 831.892733] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 831.893369] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 831.893964] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 831.894562] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:38:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1f, 0x1}, 0xe) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r1, @ANYBLOB="050008"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 06:38:17 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:17 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x30, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:17 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 6) [ 832.027335] FAT-fs (loop3): bogus number of reserved sectors [ 832.027872] FAT-fs (loop3): Can't find a valid FAT filesystem 06:38:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 8) 06:38:17 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x60, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 832.071969] FAULT_INJECTION: forcing a failure. [ 832.071969] name failslab, interval 1, probability 0, space 0, times 0 [ 832.073000] CPU: 1 PID: 6634 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 832.073651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 832.074395] Call Trace: [ 832.074632] dump_stack+0x107/0x167 [ 832.074945] should_fail.cold+0x5/0xa [ 832.075271] ? security_prepare_creds+0x112/0x190 [ 832.075729] should_failslab+0x5/0x20 [ 832.076054] __kmalloc+0x72/0x390 [ 832.076406] security_prepare_creds+0x112/0x190 [ 832.076853] prepare_creds+0x452/0x5e0 [ 832.077186] copy_creds+0x72/0x580 [ 832.077575] copy_process+0xfdc/0x7800 [ 832.077913] ? __lock_acquire+0xbb1/0x5b00 [ 832.078285] ? lock_downgrade+0x6d0/0x6d0 [ 832.078704] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 832.079157] ? __cleanup_sighand+0xb0/0xb0 [ 832.079576] ? lock_acquire+0x197/0x470 [ 832.079922] ? find_held_lock+0x2c/0x110 [ 832.080270] kernel_clone+0xe7/0x980 [ 832.080641] ? lock_downgrade+0x6d0/0x6d0 [ 832.081010] ? find_held_lock+0x2c/0x110 [ 832.081438] ? create_io_thread+0xf0/0xf0 [ 832.091432] ? ksys_write+0x12d/0x260 [ 832.091771] ? __mutex_unlock_slowpath+0xe1/0x600 [ 832.092188] __do_sys_fork+0x8a/0xc0 [ 832.092512] ? kernel_thread+0xf0/0xf0 [ 832.092874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 832.093317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 832.093755] ? trace_hardirqs_on+0x5b/0x180 [ 832.094123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 832.094558] do_syscall_64+0x33/0x40 [ 832.094878] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 832.095310] RIP: 0033:0x7f8f4b3d9b19 [ 832.095629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.097179] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 832.097822] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 832.098422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 832.099026] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 832.099627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.100230] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 832.116018] FAULT_INJECTION: forcing a failure. [ 832.116018] name failslab, interval 1, probability 0, space 0, times 0 [ 832.117093] CPU: 0 PID: 6635 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 832.117698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 832.118422] Call Trace: [ 832.118678] dump_stack+0x107/0x167 [ 832.119021] should_fail.cold+0x5/0xa [ 832.119378] ? create_object.isra.0+0x3a/0xa20 [ 832.119803] should_failslab+0x5/0x20 [ 832.120149] kmem_cache_alloc+0x5b/0x310 [ 832.120496] create_object.isra.0+0x3a/0xa20 [ 832.120889] kmemleak_alloc_percpu+0xa0/0x100 [ 832.121275] pcpu_alloc+0x4e2/0x1240 [ 832.121609] ? io_tctx_exit_cb+0xf0/0xf0 [ 832.121957] percpu_ref_init+0x31/0x3d0 [ 832.122299] io_uring_setup+0x45a/0x2910 [ 832.122651] ? wait_for_completion_io+0x270/0x270 [ 832.123061] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 832.123510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 832.123953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 832.124392] do_syscall_64+0x33/0x40 [ 832.124709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 832.125158] RIP: 0033:0x7fb639313b19 [ 832.125478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.127034] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 832.127683] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 832.128288] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 832.128906] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 832.129511] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 832.130123] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:38:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:30 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xff, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:30 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x1d000000) 06:38:30 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:38:30 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000002400)=[{0x0}], 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x22) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[0x0, 0x0, &(0x7f0000000300)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f0000000400)=']$-\x00'], 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x124, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x7}, 0x0, 0x0, r0, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x4, @mcast1, 0x1f}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x7218, 0x46d, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 845.611118] FAULT_INJECTION: forcing a failure. [ 845.611118] name failslab, interval 1, probability 0, space 0, times 0 [ 845.612286] CPU: 1 PID: 6653 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 845.612988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.613822] Call Trace: [ 845.614107] dump_stack+0x107/0x167 [ 845.614492] should_fail.cold+0x5/0xa [ 845.614902] ? create_object.isra.0+0x3a/0xa20 [ 845.615391] should_failslab+0x5/0x20 [ 845.615415] FAT-fs (loop3): bogus number of reserved sectors [ 845.615764] kmem_cache_alloc+0x5b/0x310 [ 845.616321] FAT-fs (loop3): Can't find a valid FAT filesystem [ 845.616708] create_object.isra.0+0x3a/0xa20 [ 845.617722] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 845.618253] __kmalloc+0x16e/0x390 [ 845.618633] security_prepare_creds+0x112/0x190 [ 845.619122] prepare_creds+0x452/0x5e0 [ 845.619535] copy_creds+0x72/0x580 [ 845.619918] copy_process+0xfdc/0x7800 [ 845.620329] ? __lock_acquire+0xbb1/0x5b00 [ 845.620783] ? lock_downgrade+0x6d0/0x6d0 [ 845.621228] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 845.621784] ? __cleanup_sighand+0xb0/0xb0 [ 845.622224] ? lock_acquire+0x197/0x470 [ 845.622643] ? find_held_lock+0x2c/0x110 [ 845.623076] kernel_clone+0xe7/0x980 [ 845.623463] ? lock_downgrade+0x6d0/0x6d0 [ 845.623901] ? find_held_lock+0x2c/0x110 [ 845.624333] ? create_io_thread+0xf0/0xf0 [ 845.624774] ? ksys_write+0x12d/0x260 [ 845.625198] ? __mutex_unlock_slowpath+0xe1/0x600 [ 845.625702] __do_sys_fork+0x8a/0xc0 [ 845.626090] ? kernel_thread+0xf0/0xf0 [ 845.626512] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 845.627036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.627527] ? trace_hardirqs_on+0x5b/0x180 [ 845.627945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.628448] do_syscall_64+0x33/0x40 [ 845.628812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 845.629317] RIP: 0033:0x7f8f4b3d9b19 [ 845.629684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.631415] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 845.632131] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 845.632810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 845.633511] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 845.634191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.634890] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 845.642122] audit: type=1326 audit(1725863910.762:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 [ 845.644049] audit: type=1326 audit(1725863910.762:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 06:38:30 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x4002, 0x0) ioctl$RTC_AIE_ON(r2, 0x7002) signalfd4(r2, &(0x7f0000000180)={[0x2]}, 0x8, 0x800) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x308}, 0xac1414bb, {0x2, 0x0, @broadcast}}) fallocate(r3, 0x1d, 0xfffffffffffffffe, 0xb35c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @multicast1}, {0x306, @random="67470a9783e5"}, 0x10, {0x2, 0x4e23, @local}, 'erspan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack_expect\x00') ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) setns(r4, 0x4000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x100034, &(0x7f0000000040)=ANY=[]) 06:38:30 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 7) 06:38:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 9) [ 845.687753] audit: type=1326 audit(1725863910.807:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 [ 845.705983] audit: type=1326 audit(1725863910.807:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 [ 845.712379] FAULT_INJECTION: forcing a failure. [ 845.712379] name failslab, interval 1, probability 0, space 0, times 0 [ 845.715433] CPU: 1 PID: 6667 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 845.716087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.716886] Call Trace: [ 845.717147] dump_stack+0x107/0x167 [ 845.717500] should_fail.cold+0x5/0xa [ 845.717873] ? create_object.isra.0+0x3a/0xa20 [ 845.718312] should_failslab+0x5/0x20 [ 845.718696] kmem_cache_alloc+0x5b/0x310 [ 845.719101] create_object.isra.0+0x3a/0xa20 [ 845.719525] kmemleak_alloc_percpu+0xa0/0x100 [ 845.719954] pcpu_alloc+0x4e2/0x1240 [ 845.720335] ? io_tctx_exit_cb+0xf0/0xf0 [ 845.720727] percpu_ref_init+0x31/0x3d0 [ 845.721156] io_uring_setup+0x45a/0x2910 [ 845.721609] ? wait_for_completion_io+0x270/0x270 [ 845.722127] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 845.722685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 845.723255] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.723814] do_syscall_64+0x33/0x40 [ 845.724219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 845.724772] RIP: 0033:0x7fb639313b19 [ 845.725172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:38:30 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:30 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x48000000) [ 845.727037] RSP: 002b:00007fb636868108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 845.733192] RAX: ffffffffffffffda RBX: 00007fb639427020 RCX: 00007fb639313b19 [ 845.733919] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 845.734653] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 845.735382] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 845.736133] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 845.757246] FAT-fs (loop3): bogus number of reserved sectors [ 845.757951] FAT-fs (loop3): Can't find a valid FAT filesystem 06:38:30 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 845.819217] audit: type=1326 audit(1725863910.817:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 [ 845.821622] audit: type=1326 audit(1725863910.817:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 [ 845.837281] audit: type=1326 audit(1725863910.817:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 06:38:30 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x4) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fremovexattr(r3, &(0x7f0000000540)=@known='security.apparmor\x00') ftruncate(r3, 0x53f) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) [ 845.845673] audit: type=1326 audit(1725863910.821:78): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 06:38:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 845.872155] audit: type=1326 audit(1725863910.821:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 06:38:31 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x4c000000) 06:38:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 10) 06:38:31 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 8) [ 845.925623] audit: type=1326 audit(1725863910.821:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6654 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2be77b19 code=0x7ffc0000 [ 845.958811] FAULT_INJECTION: forcing a failure. [ 845.958811] name failslab, interval 1, probability 0, space 0, times 0 [ 845.959843] CPU: 1 PID: 6683 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 845.960453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.961205] Call Trace: [ 845.961453] dump_stack+0x107/0x167 [ 845.961791] should_fail.cold+0x5/0xa [ 845.962147] ? percpu_ref_init+0xd8/0x3d0 [ 845.962528] should_failslab+0x5/0x20 [ 845.962883] kmem_cache_alloc_trace+0x55/0x320 [ 845.963314] ? io_tctx_exit_cb+0xf0/0xf0 [ 845.963688] percpu_ref_init+0xd8/0x3d0 [ 845.964063] io_uring_setup+0x45a/0x2910 [ 845.964448] ? wait_for_completion_io+0x270/0x270 [ 845.964594] FAULT_INJECTION: forcing a failure. [ 845.964594] name failslab, interval 1, probability 0, space 0, times 0 [ 845.964867] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 845.964916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 845.964933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.967129] do_syscall_64+0x33/0x40 [ 845.967445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 845.967877] RIP: 0033:0x7fb639313b19 [ 845.968199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.969754] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 845.970398] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 845.971000] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 845.971600] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 845.972207] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 845.972804] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 845.973436] CPU: 0 PID: 6686 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 845.974064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.974799] Call Trace: [ 845.975046] dump_stack+0x107/0x167 [ 845.975388] should_fail.cold+0x5/0xa [ 845.975744] ? __delayacct_tsk_init+0x1b/0x80 [ 845.976166] should_failslab+0x5/0x20 [ 845.976524] kmem_cache_alloc+0x5b/0x310 [ 845.976912] ? prepare_creds+0x466/0x5e0 [ 845.977302] __delayacct_tsk_init+0x1b/0x80 [ 845.977706] copy_process+0x3319/0x7800 [ 845.978081] ? __lock_acquire+0xbb1/0x5b00 [ 845.978486] ? lock_downgrade+0x6d0/0x6d0 [ 845.978871] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 845.979364] ? __cleanup_sighand+0xb0/0xb0 [ 845.979760] ? lock_acquire+0x197/0x470 [ 845.980139] ? find_held_lock+0x2c/0x110 [ 845.980523] kernel_clone+0xe7/0x980 [ 845.980868] ? lock_downgrade+0x6d0/0x6d0 [ 845.981269] ? find_held_lock+0x2c/0x110 [ 845.981644] ? create_io_thread+0xf0/0xf0 [ 845.982044] ? ksys_write+0x12d/0x260 [ 845.982407] ? __mutex_unlock_slowpath+0xe1/0x600 [ 845.982857] __do_sys_fork+0x8a/0xc0 [ 845.983206] ? kernel_thread+0xf0/0xf0 [ 845.983582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 845.984078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.984555] ? trace_hardirqs_on+0x5b/0x180 [ 845.984979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.985458] do_syscall_64+0x33/0x40 [ 845.985808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 845.986282] RIP: 0033:0x7f8f4b3d9b19 [ 845.986631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.988281] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 845.988998] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 845.989650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 845.990302] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 845.990957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.991603] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 846.011337] FAT-fs (loop3): bogus number of reserved sectors [ 846.011900] FAT-fs (loop3): Can't find a valid FAT filesystem 06:38:44 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:38:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x3}, 0x84000, 0x40000, 0x7, 0x0, 0xc4, 0x0, 0x0, 0x0, 0xfffbfffc, 0x0, 0xfff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f00000005c0)) timer_create(0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={&(0x7f00000002c0)="2e4d27b1ed26baf68c5463d578e9818286fdda38f2f0b90cabac447cd648c600508f4ae35e0e506ee40393bef0f1315e390a95729c09564e2010a43de6e8ebadb5ab87fafbd1b66ca5f01d4975d7961bbee7e8e5ceddb5e27ecd9e2019", &(0x7f0000000340)="9b167464441610cb6c54362e3a52b1b0d9636f9fe03c8ca14560f1978efbe9791e641928fb74b133106c05a246b5ff52302bc7feb1dfbb88fa9cedf24dee2deba26f17441e66b713e91a6b225e56d768866ef65f21c10840f596736b9bb997757f378c9d745452a45a9c49178e42d28be55b3805a7c2f84051c4df7d0687d9a3cddc2ef607733616f2468b4ffbf38290d9852473dcdf43c0eecc9cb140d5594b64b7fbe624fed3dccbf3482f1f129b0edda299b2b0db547d10e918cfecdad6a282d7"}}, &(0x7f0000000240)=0x0) timer_gettime(r0, &(0x7f0000000440)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2649, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001100)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x800) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000080)={{r5, r6+60000000}, {r7, r8+10000000}}, &(0x7f00000000c0)) timer_delete(0x0) [ 859.746692] FAULT_INJECTION: forcing a failure. [ 859.746692] name failslab, interval 1, probability 0, space 0, times 0 [ 859.747717] CPU: 1 PID: 6701 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 859.748291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 859.748983] Call Trace: [ 859.749232] dump_stack+0x107/0x167 [ 859.749544] should_fail.cold+0x5/0xa [ 859.749872] ? create_object.isra.0+0x3a/0xa20 [ 859.750261] should_failslab+0x5/0x20 [ 859.750588] kmem_cache_alloc+0x5b/0x310 [ 859.750936] create_object.isra.0+0x3a/0xa20 [ 859.751313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 859.751749] kmem_cache_alloc_trace+0x151/0x320 [ 859.752153] ? io_tctx_exit_cb+0xf0/0xf0 [ 859.752500] percpu_ref_init+0xd8/0x3d0 06:38:44 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x3, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xffffffffffffffff}, 0x220}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) getdents(r1, &(0x7f0000000000)=""/158, 0x9e) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) 06:38:44 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x68000000) 06:38:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 11) 06:38:44 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:44 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 9) [ 859.752844] io_uring_setup+0x45a/0x2910 [ 859.753213] ? wait_for_completion_io+0x270/0x270 [ 859.753622] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 859.754078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 859.754525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 859.754969] do_syscall_64+0x33/0x40 [ 859.755289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 859.755722] RIP: 0033:0x7fb639313b19 [ 859.756042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 859.762023] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 859.762666] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 859.763264] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 859.763862] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 859.764456] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 859.765067] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 859.789176] FAT-fs (loop3): bogus number of reserved sectors [ 859.789704] FAT-fs (loop3): Can't find a valid FAT filesystem [ 859.790735] FAULT_INJECTION: forcing a failure. [ 859.790735] name failslab, interval 1, probability 0, space 0, times 0 [ 859.791706] CPU: 1 PID: 6712 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 859.792281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 859.792978] Call Trace: 06:38:44 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x6c000000) [ 859.793226] dump_stack+0x107/0x167 [ 859.797233] should_fail.cold+0x5/0xa [ 859.797559] ? create_object.isra.0+0x3a/0xa20 [ 859.797945] should_failslab+0x5/0x20 [ 859.798271] kmem_cache_alloc+0x5b/0x310 [ 859.798618] create_object.isra.0+0x3a/0xa20 [ 859.798987] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 859.799416] kmem_cache_alloc+0x159/0x310 [ 859.799765] ? prepare_creds+0x466/0x5e0 [ 859.800114] __delayacct_tsk_init+0x1b/0x80 [ 859.800477] copy_process+0x3319/0x7800 [ 859.800816] ? __lock_acquire+0xbb1/0x5b00 [ 859.801206] ? lock_downgrade+0x6d0/0x6d0 [ 859.801559] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 859.802008] ? __cleanup_sighand+0xb0/0xb0 [ 859.802371] ? lock_acquire+0x197/0x470 [ 859.802713] ? find_held_lock+0x2c/0x110 [ 859.803064] kernel_clone+0xe7/0x980 [ 859.803385] ? lock_downgrade+0x6d0/0x6d0 [ 859.803733] ? find_held_lock+0x2c/0x110 [ 859.804077] ? create_io_thread+0xf0/0xf0 [ 859.804429] ? ksys_write+0x12d/0x260 [ 859.804761] ? __mutex_unlock_slowpath+0xe1/0x600 [ 859.805200] __do_sys_fork+0x8a/0xc0 [ 859.805516] ? kernel_thread+0xf0/0xf0 [ 859.805859] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 859.806297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 859.806728] ? trace_hardirqs_on+0x5b/0x180 [ 859.807095] ? syscall_enter_from_user_mode+0x1d/0x50 [ 859.807526] do_syscall_64+0x33/0x40 [ 859.807840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 859.808270] RIP: 0033:0x7f8f4b3d9b19 06:38:44 executing program 2: stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x77baea28dc8b509d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) setresuid(r1, r0, 0x0) keyctl$join(0x1, 0x0) keyctl$read(0x12, 0x0, 0x0, 0x0) [ 859.808586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 859.822120] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 859.822759] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 859.823352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 859.823959] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 859.824560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.825166] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:38:45 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x74000000) 06:38:45 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:45 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 12) 06:38:45 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2a7, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r2, 0x2285, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x88042, 0xe) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_enter(r5, 0x5477, 0x8c23, 0x2, &(0x7f0000000180)={[0x6]}, 0x8) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)={0x3b, @rand_addr=0x64010101, 0x4e24, 0x0, 'wrr\x00', 0x10, 0xffff97a5, 0x78}, 0x2c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000140), 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000008e40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}]}}) [ 859.956910] FAT-fs (loop3): bogus number of reserved sectors [ 859.957493] FAT-fs (loop3): Can't find a valid FAT filesystem [ 859.961219] FAULT_INJECTION: forcing a failure. [ 859.961219] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 859.962301] CPU: 1 PID: 6731 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 859.962872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 859.963562] Call Trace: [ 859.963794] dump_stack+0x107/0x167 [ 859.964104] should_fail.cold+0x5/0xa [ 859.964433] __alloc_pages_nodemask+0x182/0x600 [ 859.964828] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 859.965357] ? cap_capable+0x1cd/0x230 [ 859.965691] alloc_pages_current+0x187/0x280 [ 859.966066] __get_free_pages+0xc/0xa0 [ 859.966399] io_uring_setup+0xdfe/0x2910 [ 859.966751] ? wait_for_completion_io+0x270/0x270 [ 859.967160] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 859.967606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 859.968047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 859.968484] do_syscall_64+0x33/0x40 06:38:45 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x3a3, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r0, 0x0, 0x70) fcntl$setown(r0, 0x8, r3) syz_open_procfs(r3, &(0x7f0000000040)='net/nf_conntrack_expect\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x4000010, r1, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) creat(&(0x7f0000000100)='./file0\x00', 0x10) syz_io_uring_submit(r2, r5, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0x8, 0x6, 0x0, {0x0, r6, r7}}, 0x0) close(r4) [ 859.968800] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 859.973285] RIP: 0033:0x7fb639313b19 [ 859.973604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 859.975139] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 859.975777] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 859.976373] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 859.976967] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 859.977579] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 859.978178] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 859.998810] kauditd_printk_skb: 15 callbacks suppressed [ 859.998820] audit: type=1326 audit(1725863925.118:96): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6732 comm="syz-executor.2" exe="/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7901bdb19 code=0x0 [ 860.817631] audit: type=1326 audit(1725863925.937:97): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6732 comm="syz-executor.2" exe="/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7901bdb19 code=0x0 [ 874.138740] FAULT_INJECTION: forcing a failure. [ 874.138740] name failslab, interval 1, probability 0, space 0, times 0 [ 874.139721] CPU: 0 PID: 6750 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 874.140300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 06:38:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x7a000000) 06:38:59 executing program 2: r0 = fsopen(&(0x7f0000002240)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)=']\x00', &(0x7f0000000100)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='@){/&#-\x003*\xad\xf4Hp\xc5.\xac\x8d\xac\xf8p\xba(\xc8![|\x8e-\xd9\x8b\xbb3\t\x18\xf7N\x80j\xb1\\\x17\xc3\xab\x15cn\x88\x16\xa2s\x8c3\x06\xb8\xb9', &(0x7f0000000000)='%\xc0N\xd8\x129\xb3\xeaJF\x84_\xa8\x99\xd1W\xfb;\xc3\xd5\xee\xcb;\x1b', 0x0) 06:38:59 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:38:59 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 10) 06:38:59 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 13) 06:38:59 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:59 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2a7, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r2, 0x2285, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x88042, 0xe) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_enter(r5, 0x5477, 0x8c23, 0x2, &(0x7f0000000180)={[0x6]}, 0x8) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)={0x3b, @rand_addr=0x64010101, 0x4e24, 0x0, 'wrr\x00', 0x10, 0xffff97a5, 0x78}, 0x2c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000140), 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000008e40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}]}}) [ 874.141005] Call Trace: [ 874.145271] dump_stack+0x107/0x167 [ 874.145584] should_fail.cold+0x5/0xa [ 874.145911] ? create_object.isra.0+0x3a/0xa20 [ 874.146304] should_failslab+0x5/0x20 [ 874.146629] kmem_cache_alloc+0x5b/0x310 [ 874.146979] create_object.isra.0+0x3a/0xa20 [ 874.147355] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 874.147787] kmem_cache_alloc+0x159/0x310 [ 874.148137] ? prepare_creds+0x466/0x5e0 [ 874.148490] __delayacct_tsk_init+0x1b/0x80 [ 874.148858] copy_process+0x3319/0x7800 [ 874.149241] ? __lock_acquire+0xbb1/0x5b00 [ 874.149608] ? lock_downgrade+0x6d0/0x6d0 [ 874.149963] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 874.150414] ? __cleanup_sighand+0xb0/0xb0 [ 874.150779] ? lock_acquire+0x197/0x470 [ 874.151128] ? find_held_lock+0x2c/0x110 [ 874.151475] kernel_clone+0xe7/0x980 [ 874.151789] ? lock_downgrade+0x6d0/0x6d0 [ 874.152147] ? find_held_lock+0x2c/0x110 [ 874.152488] ? create_io_thread+0xf0/0xf0 [ 874.152839] ? ksys_write+0x12d/0x260 [ 874.157451] ? __mutex_unlock_slowpath+0xe1/0x600 [ 874.157864] __do_sys_fork+0x8a/0xc0 [ 874.158178] ? kernel_thread+0xf0/0xf0 [ 874.158517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 874.158956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 874.159391] ? trace_hardirqs_on+0x5b/0x180 [ 874.159755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 874.160188] do_syscall_64+0x33/0x40 [ 874.160503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 874.160934] RIP: 0033:0x7f8f4b3d9b19 [ 874.161286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.162811] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 874.163450] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 874.164044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 874.164638] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 874.165277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 874.165876] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:38:59 executing program 2: time(&(0x7f0000000140)) time(&(0x7f0000000080)) time(&(0x7f0000000100)) time(&(0x7f00000001c0)) time(&(0x7f00000000c0)) time(&(0x7f0000000000)) time(&(0x7f0000000040)) [ 874.202630] FAULT_INJECTION: forcing a failure. [ 874.202630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 06:38:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0xeffdffff) [ 874.209727] CPU: 0 PID: 6765 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 874.217646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 874.218331] Call Trace: [ 874.218557] dump_stack+0x107/0x167 [ 874.225356] should_fail.cold+0x5/0xa [ 874.225682] __alloc_pages_nodemask+0x182/0x600 [ 874.226074] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 874.226579] ? cap_capable+0x1cd/0x230 [ 874.226913] alloc_pages_current+0x187/0x280 [ 874.227286] __get_free_pages+0xc/0xa0 [ 874.227615] io_uring_setup+0xf6b/0x2910 [ 874.227963] ? wait_for_completion_io+0x270/0x270 [ 874.228373] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 874.228815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 874.229292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 874.229732] do_syscall_64+0x33/0x40 [ 874.230048] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 874.230478] RIP: 0033:0x7fb639313b19 [ 874.230795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.232334] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 874.232975] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 874.233599] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 874.234197] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 874.234793] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 874.235389] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 874.236779] FAT-fs (loop3): bogus number of reserved sectors [ 874.237439] FAT-fs (loop3): Can't find a valid FAT filesystem [ 874.248669] 9pnet: Insufficient options for proto=fd 06:38:59 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:38:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 14) 06:38:59 executing program 6: perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x42904, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1ff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xf) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) shmctl$IPC_RMID(0x0, 0x3fffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xd5, 0x1f, 0x3, 0x6, 0x0, 0x3f, 0x0, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x4, 0x1f}, 0x40080, 0x8001, 0xf7, 0x9, 0x0, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x6}, r0, 0x10, 0xffffffffffffffff, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r2) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x100d8c6, &(0x7f0000000180)=ANY=[@ANYRESOCT]) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/unix\x00') pread64(r4, &(0x7f0000000280)=""/217, 0xd9, 0x4) creat(&(0x7f00000003c0)='./file1\x00', 0x141) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x105142, 0x0) 06:38:59 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:38:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6(0xa, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) recvfrom(r3, &(0x7f0000000380)=""/175, 0xaf, 0x0, &(0x7f00000002c0)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x2}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES64=r1], 0xfdef) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nf_conntrack_ftp', 0x200, 0x83) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:38:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0xf5ffffff) 06:38:59 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 11) [ 874.369505] FAULT_INJECTION: forcing a failure. [ 874.369505] name failslab, interval 1, probability 0, space 0, times 0 [ 874.370606] CPU: 0 PID: 6786 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 874.371263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 874.372011] Call Trace: [ 874.372265] dump_stack+0x107/0x167 [ 874.372599] should_fail.cold+0x5/0xa [ 874.372995] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 874.373527] should_failslab+0x5/0x20 [ 874.373933] kmem_cache_alloc_trace+0x55/0x320 [ 874.374325] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 874.374830] io_uring_setup+0x14bb/0x2910 [ 874.375189] ? wait_for_completion_io+0x270/0x270 [ 874.375595] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 874.376087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 874.376530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 874.377012] do_syscall_64+0x33/0x40 [ 874.377361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 874.377866] RIP: 0033:0x7fb639313b19 [ 874.378180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.379791] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 874.380432] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 874.381074] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 874.381723] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 874.382384] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 874.383030] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 874.390224] FAULT_INJECTION: forcing a failure. [ 874.390224] name failslab, interval 1, probability 0, space 0, times 0 [ 874.391216] CPU: 1 PID: 6792 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 874.391784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 874.392477] Call Trace: [ 874.392709] dump_stack+0x107/0x167 [ 874.393020] should_fail.cold+0x5/0xa [ 874.393361] ? create_object.isra.0+0x3a/0xa20 [ 874.393750] should_failslab+0x5/0x20 [ 874.394075] kmem_cache_alloc+0x5b/0x310 [ 874.394424] create_object.isra.0+0x3a/0xa20 [ 874.394803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 874.395236] kmem_cache_alloc+0x159/0x310 [ 874.395593] dup_fd+0x89/0xf40 [ 874.395867] ? audit_filter_inodes+0x40/0x40 [ 874.396242] ? security_task_alloc+0xe6/0x260 [ 874.396626] copy_process+0x197e/0x7800 [ 874.396966] ? __lock_acquire+0xbb1/0x5b00 [ 874.397380] ? __cleanup_sighand+0xb0/0xb0 [ 874.397741] ? lock_acquire+0x197/0x470 [ 874.398084] ? find_held_lock+0x2c/0x110 [ 874.398430] kernel_clone+0xe7/0x980 [ 874.398745] ? lock_downgrade+0x6d0/0x6d0 [ 874.399094] ? find_held_lock+0x2c/0x110 [ 874.399435] ? create_io_thread+0xf0/0xf0 [ 874.399787] ? ksys_write+0x12d/0x260 [ 874.400239] ? __mutex_unlock_slowpath+0xe1/0x600 [ 874.400657] __do_sys_fork+0x8a/0xc0 [ 874.400972] ? kernel_thread+0xf0/0xf0 [ 874.401371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 874.401827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 874.402259] ? trace_hardirqs_on+0x5b/0x180 [ 874.402632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 874.403088] do_syscall_64+0x33/0x40 [ 874.403411] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 874.403843] RIP: 0033:0x7f8f4b3d9b19 [ 874.404158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.405694] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 874.406331] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 874.406928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 874.407520] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 874.408115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 874.408707] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 874.412879] FAT-fs (loop3): bogus number of reserved sectors [ 874.413414] FAT-fs (loop3): Can't find a valid FAT filesystem 06:39:14 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:39:14 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:39:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x7, 0x2}, {0x78}]}, 0x14, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800009ab2000000000000000000010000000000000000e000000100000000000000000000000000000000000000000000000000000000fc000000000000000000000000000000000000000000000000000000000000006a6afc8592656a465cd62e58e80c452bbb5bce5536fb87b284b4d9bfd79ac1cdce782ca48e53c7536936cf7f30d9d27a70e19e28e541ad376a9a48c2bcda102578e3ffec1c923fdda1164db5090f9721", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000800cdfe080000000000"], 0x134}}, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x61e, 0x5, 0x200, 0x0, 0xfffffff9}) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 06:39:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 15) 06:39:14 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0xfffffdef) 06:39:14 executing program 6: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000340)='\xad', 0x6) fallocate(r0, 0x40, 0x0, 0x8) r1 = memfd_create(&(0x7f0000000340)='\xad', 0x6) fallocate(r1, 0x40, 0x0, 0x8) r2 = inotify_init() r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x280000) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8120}, {0xffffffffffffffff, 0x1104}, {0xffffffffffffffff, 0x4000}, {r0, 0x5}, {r1, 0x1000}, {r2, 0x2514}, {r3}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x29}], 0x9, 0xffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x29200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x1010, 0x2, 0x0, 0x7, 0x0, 0x10000000}, 0x0, 0xfffffffffffffffb, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff00000000eaffffffffffffffff0200000000000000000000000000010000720ed9a000000a0000002b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000130001000100000000000000ffffff01010000000000000000000000ff020000000000000000b32ed187748c939567000000", @ANYBLOB="4708e824f7b6dbba69ddd123dc7ba941fd61a668b44573a8ca7328cc4f0ba122947b04139d9b0831d5c860fe3341af073501c4e7b4c1533cb13de7425ea5169d6691b474fcecbf83af75686cec606ce5c26337ebf13a684219e524ee36bb448059ed4dc0e160b44222ab8f47e39a231edcc9e92e88abf23a5c46d216213ab67f50", @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x8000) poll(&(0x7f00000002c0), 0x0, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) getpgrp(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x9, 0x4) 06:39:14 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:39:14 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 12) [ 889.440722] FAULT_INJECTION: forcing a failure. [ 889.440722] name failslab, interval 1, probability 0, space 0, times 0 [ 889.441869] CPU: 1 PID: 6809 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 889.442563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 889.443355] Call Trace: [ 889.443606] dump_stack+0x107/0x167 [ 889.443944] should_fail.cold+0x5/0xa [ 889.444247] FAULT_INJECTION: forcing a failure. [ 889.444247] name failslab, interval 1, probability 0, space 0, times 0 [ 889.444350] ? create_object.isra.0+0x3a/0xa20 [ 889.445672] should_failslab+0x5/0x20 [ 889.445998] kmem_cache_alloc+0x5b/0x310 [ 889.446421] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 889.446925] create_object.isra.0+0x3a/0xa20 [ 889.447390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 889.447818] kmem_cache_alloc_trace+0x151/0x320 [ 889.448221] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 889.448928] io_uring_setup+0x14bb/0x2910 [ 889.449381] ? wait_for_completion_io+0x270/0x270 [ 889.449794] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 889.450239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 889.450764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 889.451199] do_syscall_64+0x33/0x40 [ 889.451612] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 889.452040] RIP: 0033:0x7fb639313b19 [ 889.452412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.453982] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 889.454694] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 889.455340] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 889.455932] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 889.456578] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 889.457170] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 889.457857] CPU: 0 PID: 6814 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 889.458486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 889.459227] Call Trace: [ 889.459451] FAT-fs (loop3): bogus number of reserved sectors [ 889.459482] dump_stack+0x107/0x167 [ 889.459970] FAT-fs (loop3): Can't find a valid FAT filesystem [ 889.460255] should_fail.cold+0x5/0xa [ 889.460270] ? alloc_fdtable+0x84/0x280 [ 889.460287] should_failslab+0x5/0x20 [ 889.460301] kmem_cache_alloc_trace+0x55/0x320 [ 889.460315] ? rwlock_bug.part.0+0x90/0x90 [ 889.460335] alloc_fdtable+0x84/0x280 [ 889.462981] dup_fd+0x92e/0xf40 [ 889.463311] copy_process+0x197e/0x7800 [ 889.463689] ? __lock_acquire+0xbb1/0x5b00 [ 889.464101] ? __cleanup_sighand+0xb0/0xb0 [ 889.464524] ? lock_acquire+0x197/0x470 [ 889.464898] ? find_held_lock+0x2c/0x110 [ 889.465294] kernel_clone+0xe7/0x980 [ 889.465656] ? lock_downgrade+0x6d0/0x6d0 [ 889.466037] ? find_held_lock+0x2c/0x110 [ 889.466420] ? create_io_thread+0xf0/0xf0 [ 889.466796] ? ksys_write+0x12d/0x260 [ 889.467141] ? __mutex_unlock_slowpath+0xe1/0x600 [ 889.467573] __do_sys_fork+0x8a/0xc0 [ 889.467887] ? kernel_thread+0xf0/0xf0 [ 889.468223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 889.468669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 889.469099] ? trace_hardirqs_on+0x5b/0x180 [ 889.469493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 889.469920] do_syscall_64+0x33/0x40 [ 889.470229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 889.470666] RIP: 0033:0x7f8f4b3d9b19 [ 889.470977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.472489] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 889.473113] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 889.473730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 889.474327] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 889.474915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 889.475512] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 889.479563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 889.505715] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.6'. 06:39:14 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:39:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 16) 06:39:14 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 889.544348] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.6'. 06:39:14 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0xfffffff5) 06:39:14 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 13) [ 889.596297] FAULT_INJECTION: forcing a failure. [ 889.596297] name failslab, interval 1, probability 0, space 0, times 0 [ 889.601389] CPU: 1 PID: 6827 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 889.602051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 889.602993] Call Trace: [ 889.603331] dump_stack+0x107/0x167 [ 889.603751] should_fail.cold+0x5/0xa [ 889.604194] ? create_object.isra.0+0x3a/0xa20 [ 889.604732] should_failslab+0x5/0x20 [ 889.605164] kmem_cache_alloc+0x5b/0x310 [ 889.609624] create_object.isra.0+0x3a/0xa20 [ 889.613509] kmemleak_alloc_percpu+0xa0/0x100 [ 889.614020] pcpu_alloc+0x4e2/0x1240 [ 889.614496] ? io_async_queue_proc+0x80/0x80 [ 889.614998] percpu_ref_init+0x31/0x3d0 [ 889.615480] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 889.616112] io_uring_setup+0x14bb/0x2910 [ 889.616614] ? wait_for_completion_io+0x270/0x270 [ 889.617185] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 889.623265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 889.623878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 889.624482] do_syscall_64+0x33/0x40 [ 889.624932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 889.625484] RIP: 0033:0x7fb639313b19 [ 889.625869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.645331] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 889.646852] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 889.647505] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 889.648103] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 889.648771] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 889.650420] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 889.668495] FAT-fs (loop3): bogus number of reserved sectors [ 889.669105] FAT-fs (loop3): Can't find a valid FAT filesystem [ 889.682490] FAULT_INJECTION: forcing a failure. [ 889.682490] name failslab, interval 1, probability 0, space 0, times 0 [ 889.683500] CPU: 1 PID: 6835 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 889.684067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 889.684797] Call Trace: [ 889.685026] dump_stack+0x107/0x167 [ 889.685425] should_fail.cold+0x5/0xa [ 889.685749] ? create_object.isra.0+0x3a/0xa20 [ 889.686136] should_failslab+0x5/0x20 [ 889.686507] kmem_cache_alloc+0x5b/0x310 [ 889.686854] create_object.isra.0+0x3a/0xa20 [ 889.687223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 889.687703] kmem_cache_alloc_trace+0x151/0x320 [ 889.688096] ? rwlock_bug.part.0+0x90/0x90 [ 889.688506] alloc_fdtable+0x84/0x280 [ 889.688830] dup_fd+0x92e/0xf40 [ 889.689122] copy_process+0x197e/0x7800 [ 889.689553] ? __lock_acquire+0xbb1/0x5b00 [ 889.689936] ? __cleanup_sighand+0xb0/0xb0 [ 889.690356] ? lock_acquire+0x197/0x470 [ 889.690776] ? find_held_lock+0x2c/0x110 [ 889.691204] kernel_clone+0xe7/0x980 [ 889.691638] ? lock_downgrade+0x6d0/0x6d0 [ 889.692070] ? find_held_lock+0x2c/0x110 [ 889.692546] ? create_io_thread+0xf0/0xf0 [ 889.692986] ? ksys_write+0x12d/0x260 [ 889.693475] ? __mutex_unlock_slowpath+0xe1/0x600 [ 889.693982] __do_sys_fork+0x8a/0xc0 [ 889.694400] ? kernel_thread+0xf0/0xf0 [ 889.694825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 889.695423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 889.695958] ? trace_hardirqs_on+0x5b/0x180 [ 889.696457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 889.696985] do_syscall_64+0x33/0x40 [ 889.697458] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 889.697987] RIP: 0033:0x7f8f4b3d9b19 [ 889.698404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.700394] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 889.701187] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 889.701937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 889.702696] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 889.703489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 889.704656] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:39:14 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:39:14 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0xffffffff) 06:39:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\tK?', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "051f63", 0x0, 0x21, 0x0, @private2, @mcast1, [], "36bda4284b16c494"}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x9, 0xff, 0x3f, 0x5, 0x0, 0x669f97dd, 0x2010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x800, 0x1, 0x7, 0x3, 0x5, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x400}, 0xffffffffffffffff, 0xd, r0, 0xa) 06:39:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x7, 0x2}, {0x78}]}, 0x14, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800009ab2000000000000000000010000000000000000e000000100000000000000000000000000000000000000000000000000000000fc000000000000000000000000000000000000000000000000000000000000006a6afc8592656a465cd62e58e80c452bbb5bce5536fb87b284b4d9bfd79ac1cdce782ca48e53c7536936cf7f30d9d27a70e19e28e541ad376a9a48c2bcda102578e3ffec1c923fdda1164db5090f9721", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000800cdfe080000000000"], 0x134}}, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x61e, 0x5, 0x200, 0x0, 0xfffffff9}) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 889.840995] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 06:39:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 17) 06:39:28 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2b, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:39:28 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x7, 0xc4) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r0, 0x80, &(0x7f00000000c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x0, 0x0, 0x1}, 0x7) 06:39:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:39:28 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:39:28 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(0xffffffffffffffff, 0x0, 0x0) r4 = fcntl$getown(r3, 0x9) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x81, 0x9, 0x9, 0x0, 0x6, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp, 0x200, 0x1, 0x6, 0x7, 0x3, 0x7ff, 0x6, 0x0, 0xcf72, 0x0, 0x4ea}, r4, 0x1, r0, 0xa) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x3491, 0x0, 0x0, 0x0, 0x0) 06:39:28 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 14) 06:39:28 executing program 6: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)=0x7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000240)="782cd02563ad3e5a90b28d655468762f571d4f39be6cb8df0c3d72e85e0254419bb62e02c6cae3e0bc7a21098465313e787b91b4", 0x34, 0x100000001, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f00000002c0)="72fdabd559c9b3ec82a4d8fc3d38fb63a38f261ef67f591875861d5c0679662f0280c5417d5392d8768603930352a897b0e726974333bb1c5adcbdbea288464f842b5b2e95d3a27ee3fa25e2b2e8333d6c7beb605612be96363777cd290c9b06211d6f418c75a31fdb1b8b16b9e0e7e2be7e8de46dd12932d7f62f6940e9461c7db1b4a329397fd3402643af208df2c0992ccf1a12301c016e37efb1062b6b47c865b34012d3b55d249f78c9de9994cd1369431132f1db82", 0xb8, 0x96c}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000000480)="ec9f0af6bbdfdfbb1bb2d460741f284bd4eed0a89487a3129ae083f1afa9277a39be82cf7e4c767cd6de32ff1b157fef5f27fda6871282dc750b063c2af4015e9b97a26fb614bbe3f9b774959ba82108ce0c9518dadacbf1fdaf225d30538f54f57aaf6e435dcafbddb3512586413a94eb44b7b949415b20681503667d52668ddf41310be7a3b9b5d8a8c330ff852c6fc4ac27eae8912ed49593b29802448793dbf6d26970f07360f62ef30b9abb9a62de1acbb5c31f2bf1de83f7b656cf78a7d27352316878dbfc61e4944418fa7b", 0xcf, 0xf7, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x9651, r2, &(0x7f0000000600)="cbb25a0fb5bfe0595676880e8dda40d85822453dce9899269ab91ea3f882ef1dbb58c2515217f6b5550cfd621b2ba9278970777144df7ad49a73bd111b548548bdf9b746a804038cfb8aec8440fee2cf7ab69e6caeb59093e2b552b6a14455e2c74edec64c2f4722a8f2722a19dbd9368f56bc700e6ec627b65b76d1377d041209e61391297db31decd1813f5f945d7ef3d884eae6bb973bea247ef656fb5509", 0xa0, 0x1, 0x0, 0x3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000740)="a0008274db67162c82ed8bade276eb67a88c44a6c481c62a20b7", 0x1a, 0x5, 0x0, 0x1}]) sched_getattr(0x0, &(0x7f000000bb40)={0x38}, 0x38, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000", 0x0, 0x3}) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x0, 0x8, 0x9}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c, r6}) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x7, 0x7, "3b6589ea086f7dd493ad034825fe29c3b869ba", 0x3, 0xc0}) openat(r4, &(0x7f00000003c0)='./file0/file0\x00', 0x100, 0x1d1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x8000, 0x8, 0x1f, 0xa6, 0x89, "fd0ac8760c2123c0200feeb5463a043c13b934", 0xc823, 0x1000}) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000007ffffffc) [ 902.999432] FAULT_INJECTION: forcing a failure. [ 902.999432] name failslab, interval 1, probability 0, space 0, times 0 [ 902.999446] CPU: 1 PID: 6864 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 902.999453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.999457] Call Trace: [ 902.999475] dump_stack+0x107/0x167 [ 902.999587] should_fail.cold+0x5/0xa [ 902.999603] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 902.999617] should_failslab+0x5/0x20 [ 902.999629] __kmalloc_node+0x76/0x420 [ 902.999643] ? lock_downgrade+0x6d0/0x6d0 [ 902.999656] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 902.999669] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 902.999681] ? trace_hardirqs_on+0x5b/0x180 [ 902.999696] kmem_cache_alloc_trace+0x169/0x320 [ 902.999707] ? rwlock_bug.part.0+0x90/0x90 [ 902.999723] alloc_fdtable+0x84/0x280 [ 902.999735] dup_fd+0x92e/0xf40 [ 902.999758] copy_process+0x197e/0x7800 [ 902.999770] ? __lock_acquire+0xbb1/0x5b00 [ 902.999803] ? __cleanup_sighand+0xb0/0xb0 [ 902.999822] ? lock_acquire+0x197/0x470 [ 902.999838] ? find_held_lock+0x2c/0x110 [ 902.999854] kernel_clone+0xe7/0x980 [ 902.999866] ? lock_downgrade+0x6d0/0x6d0 [ 902.999875] ? find_held_lock+0x2c/0x110 [ 902.999886] ? create_io_thread+0xf0/0xf0 [ 902.999900] ? ksys_write+0x12d/0x260 [ 902.999918] ? __mutex_unlock_slowpath+0xe1/0x600 [ 902.999934] __do_sys_fork+0x8a/0xc0 [ 902.999945] ? kernel_thread+0xf0/0xf0 [ 902.999965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 902.999976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 902.999986] ? trace_hardirqs_on+0x5b/0x180 [ 902.999997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.000008] do_syscall_64+0x33/0x40 [ 903.000018] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 903.000026] RIP: 0033:0x7f8f4b3d9b19 [ 903.000037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.000043] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 903.000057] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 903.000064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 903.000070] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.000077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 903.000084] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 903.006318] FAULT_INJECTION: forcing a failure. [ 903.006318] name failslab, interval 1, probability 0, space 0, times 0 [ 903.035242] CPU: 0 PID: 6861 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 903.035250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.035254] Call Trace: [ 903.035276] dump_stack+0x107/0x167 [ 903.035292] should_fail.cold+0x5/0xa [ 903.035308] ? create_object.isra.0+0x3a/0xa20 [ 903.035325] should_failslab+0x5/0x20 [ 903.035338] kmem_cache_alloc+0x5b/0x310 06:39:28 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2c, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 903.035355] create_object.isra.0+0x3a/0xa20 [ 903.035374] kmemleak_alloc_percpu+0xa0/0x100 [ 903.035392] pcpu_alloc+0x4e2/0x1240 [ 903.035422] ? io_async_queue_proc+0x80/0x80 [ 903.035435] percpu_ref_init+0x31/0x3d0 [ 903.035451] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 903.035465] io_uring_setup+0x14bb/0x2910 [ 903.035483] ? wait_for_completion_io+0x270/0x270 [ 903.035496] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 903.035528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 903.035541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.035556] do_syscall_64+0x33/0x40 [ 903.035568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 903.035577] RIP: 0033:0x7fb639313b19 [ 903.035590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:39:28 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) [ 903.035597] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 903.035612] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 903.035620] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 903.035627] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 903.035635] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 903.035643] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 903.038693] FAT-fs (loop3): bogus number of reserved sectors [ 903.038703] FAT-fs (loop3): Can't find a valid FAT filesystem 06:39:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 18) 06:39:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:39:28 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 15) 06:39:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x88) fstatfs(r1, &(0x7f0000000000)=""/46) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x0) [ 903.184433] FAULT_INJECTION: forcing a failure. [ 903.184433] name failslab, interval 1, probability 0, space 0, times 0 [ 903.185445] CPU: 1 PID: 6890 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 903.186032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.186724] Call Trace: [ 903.186968] dump_stack+0x107/0x167 [ 903.187282] should_fail.cold+0x5/0xa [ 903.187611] ? create_object.isra.0+0x3a/0xa20 [ 903.188014] should_failslab+0x5/0x20 [ 903.188342] kmem_cache_alloc+0x5b/0x310 [ 903.188686] ? create_object.isra.0+0x3ad/0xa20 [ 903.189099] create_object.isra.0+0x3a/0xa20 [ 903.189488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 903.189923] __kmalloc_node+0x1ae/0x420 [ 903.190281] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 903.190714] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 903.191148] ? trace_hardirqs_on+0x5b/0x180 [ 903.191520] kmem_cache_alloc_trace+0x169/0x320 [ 903.191915] ? rwlock_bug.part.0+0x90/0x90 [ 903.192289] alloc_fdtable+0x84/0x280 [ 903.192613] dup_fd+0x92e/0xf40 [ 903.192912] copy_process+0x197e/0x7800 [ 903.193261] ? __lock_acquire+0xbb1/0x5b00 [ 903.193658] ? __cleanup_sighand+0xb0/0xb0 [ 903.194026] ? lock_acquire+0x197/0x470 [ 903.194384] ? find_held_lock+0x2c/0x110 [ 903.194734] kernel_clone+0xe7/0x980 [ 903.195053] ? lock_downgrade+0x6d0/0x6d0 [ 903.195414] ? find_held_lock+0x2c/0x110 [ 903.195757] ? create_io_thread+0xf0/0xf0 [ 903.196114] ? ksys_write+0x12d/0x260 [ 903.196457] ? __mutex_unlock_slowpath+0xe1/0x600 [ 903.196875] __do_sys_fork+0x8a/0xc0 [ 903.197191] ? kernel_thread+0xf0/0xf0 [ 903.197559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 903.198006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.198451] ? trace_hardirqs_on+0x5b/0x180 [ 903.198818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.199254] do_syscall_64+0x33/0x40 [ 903.199584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 903.200019] RIP: 0033:0x7f8f4b3d9b19 [ 903.200337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.201904] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 903.202549] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 903.203160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 903.203766] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.204364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 903.204972] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 903.226330] FAT-fs (loop3): bogus number of reserved sectors [ 903.226934] FAT-fs (loop3): Can't find a valid FAT filesystem [ 903.242463] FAULT_INJECTION: forcing a failure. [ 903.242463] name failslab, interval 1, probability 0, space 0, times 0 [ 903.243454] CPU: 1 PID: 6893 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 903.244038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.244727] Call Trace: [ 903.244965] dump_stack+0x107/0x167 [ 903.245276] should_fail.cold+0x5/0xa [ 903.245643] ? percpu_ref_init+0xd8/0x3d0 [ 903.246010] should_failslab+0x5/0x20 [ 903.246335] kmem_cache_alloc_trace+0x55/0x320 [ 903.246727] ? io_async_queue_proc+0x80/0x80 [ 903.247113] percpu_ref_init+0xd8/0x3d0 [ 903.247456] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 903.247915] io_uring_setup+0x14bb/0x2910 [ 903.248284] ? wait_for_completion_io+0x270/0x270 [ 903.248691] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 903.249140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 903.249675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.250115] do_syscall_64+0x33/0x40 [ 903.250443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 903.250873] RIP: 0033:0x7fb639313b19 [ 903.251189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.252737] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 903.253394] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 903.253996] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 903.254605] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 903.255204] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 903.255811] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:39:42 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 916.997751] FAULT_INJECTION: forcing a failure. [ 916.997751] name failslab, interval 1, probability 0, space 0, times 0 [ 916.998749] CPU: 0 PID: 6910 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 916.999331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 917.000037] Call Trace: [ 917.000273] dump_stack+0x107/0x167 [ 917.000589] should_fail.cold+0x5/0xa [ 917.000923] ? kvmalloc_node+0x119/0x170 [ 917.001277] should_failslab+0x5/0x20 [ 917.001621] __kmalloc_node+0x76/0x420 [ 917.001967] kvmalloc_node+0x119/0x170 [ 917.002305] alloc_fdtable+0xd3/0x280 [ 917.002634] dup_fd+0x92e/0xf40 [ 917.002935] copy_process+0x197e/0x7800 [ 917.003279] ? __lock_acquire+0xbb1/0x5b00 [ 917.003667] ? __cleanup_sighand+0xb0/0xb0 [ 917.004037] ? lock_acquire+0x197/0x470 [ 917.004386] ? find_held_lock+0x2c/0x110 [ 917.004741] kernel_clone+0xe7/0x980 [ 917.005062] ? lock_downgrade+0x6d0/0x6d0 [ 917.005418] ? find_held_lock+0x2c/0x110 [ 917.005797] ? create_io_thread+0xf0/0xf0 [ 917.006157] ? ksys_write+0x12d/0x260 [ 917.006492] ? __mutex_unlock_slowpath+0xe1/0x600 [ 917.006913] __do_sys_fork+0x8a/0xc0 [ 917.007233] ? kernel_thread+0xf0/0xf0 [ 917.007582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 917.008032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 917.008472] ? trace_hardirqs_on+0x5b/0x180 [ 917.008843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 917.009281] do_syscall_64+0x33/0x40 [ 917.009622] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 917.010088] RIP: 0033:0x7f8f4b3d9b19 [ 917.010420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 917.011980] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 917.012633] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 917.013243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 917.013880] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 917.014490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 917.015096] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:39:42 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:39:42 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 16) 06:39:42 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x800, 0x2}) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r3, r2, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) pipe2(&(0x7f0000000540), 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, &(0x7f0000000400)="fd5b8f80afe333e7302b6557a3f9b7837d9f43ec2048b74a29799a5ad38ed07801eeaf9ec02d6f0ee624e84e3cd4968b5ccba49ee7de9862c343c684d98eafa37e5d1034a6f2332e1f33d0884bdc1fd7f3dd50c590183c91f46d19df20c431f8ee417a7bd5b801d418e94f348e", 0x6d, 0x12, 0x1}, 0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000}) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) fsmount(r6, 0x1, 0x94cafd964ceee1e0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) 06:39:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x13, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, 0x0, 0x120) ioctl$FITRIM(r2, 0xc0185879, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x410200, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "49a5365e7fc0560e", "49a33e76a57170739dd1058a02b8750b1323cc97f5c4cec5bb8c52ae0b8a825e", "f2ddec13", "550336991a91f845"}, 0x38) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x4, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:39:42 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) preadv(r0, &(0x7f0000000080), 0x0, 0x400, 0x7ff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x7f) 06:39:42 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:39:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 19) [ 917.041052] FAT-fs (loop3): invalid media value (0x00) [ 917.041538] FAT-fs (loop3): Can't find a valid FAT filesystem 06:39:42 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x3a, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 917.058024] FAULT_INJECTION: forcing a failure. [ 917.058024] name failslab, interval 1, probability 0, space 0, times 0 [ 917.058999] CPU: 0 PID: 6919 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 917.059581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 917.060290] Call Trace: [ 917.060523] dump_stack+0x107/0x167 [ 917.060841] should_fail.cold+0x5/0xa [ 917.061174] ? create_object.isra.0+0x3a/0xa20 [ 917.061590] should_failslab+0x5/0x20 [ 917.061919] kmem_cache_alloc+0x5b/0x310 [ 917.062273] create_object.isra.0+0x3a/0xa20 [ 917.062648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 917.063092] kmem_cache_alloc_trace+0x151/0x320 [ 917.063500] ? io_async_queue_proc+0x80/0x80 [ 917.063878] percpu_ref_init+0xd8/0x3d0 [ 917.064223] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 917.064686] io_uring_setup+0x14bb/0x2910 [ 917.065048] ? wait_for_completion_io+0x270/0x270 06:39:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffffffd}}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x8) r0 = memfd_create(&(0x7f0000000080)='\xdf\x93\xc5,GwD\x80\xae~\xd6&\xeah\x81\xad\xad\x0eq\xcc\xfcE\xe6\x04\x10(\x02x+\xc6\xe5\x1e5U\xf7WD\x16\x9e\x81pqv\xe2\'Z(\x94\x92\x9b=\xde@Eus\xbfP\x18\x15:cs\x0e\xcbA3\xb7,\xa8\xa8\xd6\xbcLC\xc8<\xa5\xdc\x89\xa8\xb5?\xfa\x8a\xf4\xd8', 0x7) lseek(r0, 0x0, 0x0) 06:39:42 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1, 0x400, 0x0) [ 917.065459] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 917.065935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 917.066383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 917.073639] do_syscall_64+0x33/0x40 [ 917.073963] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 917.074392] RIP: 0033:0x7fb639313b19 [ 917.074710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 917.076242] RSP: 002b:00007fb636868108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 917.076880] RAX: ffffffffffffffda RBX: 00007fb639427020 RCX: 00007fb639313b19 [ 917.077484] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 917.078102] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 917.078698] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 917.079305] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:39:42 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 17) 06:39:42 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 917.198674] FAT-fs (loop3): invalid media value (0x00) [ 917.199174] FAT-fs (loop3): Can't find a valid FAT filesystem [ 917.203303] FAULT_INJECTION: forcing a failure. [ 917.203303] name failslab, interval 1, probability 0, space 0, times 0 [ 917.204326] CPU: 1 PID: 6931 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 917.204905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 917.209864] Call Trace: [ 917.210107] dump_stack+0x107/0x167 [ 917.210427] should_fail.cold+0x5/0xa [ 917.210754] ? create_object.isra.0+0x3a/0xa20 [ 917.211159] should_failslab+0x5/0x20 [ 917.211491] kmem_cache_alloc+0x5b/0x310 [ 917.211844] create_object.isra.0+0x3a/0xa20 [ 917.212223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 917.212660] __kmalloc_node+0x1ae/0x420 [ 917.213011] kvmalloc_node+0x119/0x170 [ 917.213354] alloc_fdtable+0x13f/0x280 [ 917.213704] dup_fd+0x92e/0xf40 [ 917.214006] copy_process+0x197e/0x7800 [ 917.214364] ? __lock_acquire+0xbb1/0x5b00 [ 917.214767] ? __cleanup_sighand+0xb0/0xb0 [ 917.215142] ? lock_acquire+0x197/0x470 [ 917.215493] ? find_held_lock+0x2c/0x110 [ 917.215851] kernel_clone+0xe7/0x980 [ 917.216182] ? lock_downgrade+0x6d0/0x6d0 [ 917.216541] ? find_held_lock+0x2c/0x110 [ 917.216903] ? create_io_thread+0xf0/0xf0 [ 917.217262] ? ksys_write+0x12d/0x260 [ 917.217620] ? __mutex_unlock_slowpath+0xe1/0x600 [ 917.218047] __do_sys_fork+0x8a/0xc0 [ 917.218371] ? kernel_thread+0xf0/0xf0 [ 917.218719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 917.219164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 917.219599] ? trace_hardirqs_on+0x5b/0x180 [ 917.219967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 917.220398] do_syscall_64+0x33/0x40 [ 917.220712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 917.221142] RIP: 0033:0x7f8f4b3d9b19 [ 917.221459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 917.223025] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 917.223676] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 917.224280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 917.224886] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 917.225492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 917.226096] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:39:42 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:39:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 20) 06:39:42 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x3c, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 917.360760] FAULT_INJECTION: forcing a failure. [ 917.360760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.361854] CPU: 1 PID: 6940 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 917.362426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 917.363121] Call Trace: [ 917.363354] dump_stack+0x107/0x167 [ 917.363667] should_fail.cold+0x5/0xa [ 917.363999] _copy_to_user+0x2e/0x180 [ 917.364334] io_uring_setup+0x117d/0x2910 [ 917.364702] ? wait_for_completion_io+0x270/0x270 [ 917.365116] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 917.365588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 917.366036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 917.366480] do_syscall_64+0x33/0x40 [ 917.366800] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 917.367238] RIP: 0033:0x7fb639313b19 [ 917.367558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 917.369125] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 917.373796] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 917.374396] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 917.374997] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 917.375596] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 917.376193] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:39:55 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r3 = timerfd_create(0x9, 0x800) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r4, 0x8, 0x9, 0x80000001}) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup3(r5, r1, 0x80000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040), &(0x7f00000000c0)={'L-', 0xff}, 0x16, 0x1) sendfile(r0, r1, &(0x7f0000000000)=0x7, 0x7ea9) io_uring_enter(r0, 0x6b98, 0xfd3c, 0x2, &(0x7f0000000180)={[0xff6]}, 0x8) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:39:55 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:39:55 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 18) 06:39:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffffffd}}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x8) r0 = memfd_create(&(0x7f0000000080)='\xdf\x93\xc5,GwD\x80\xae~\xd6&\xeah\x81\xad\xad\x0eq\xcc\xfcE\xe6\x04\x10(\x02x+\xc6\xe5\x1e5U\xf7WD\x16\x9e\x81pqv\xe2\'Z(\x94\x92\x9b=\xde@Eus\xbfP\x18\x15:cs\x0e\xcbA3\xb7,\xa8\xa8\xd6\xbcLC\xc8<\xa5\xdc\x89\xa8\xb5?\xfa\x8a\xf4\xd8', 0x7) lseek(r0, 0x0, 0x0) 06:39:55 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x3a, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:39:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:39:55 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:39:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 21) [ 930.806576] FAULT_INJECTION: forcing a failure. [ 930.806576] name failslab, interval 1, probability 0, space 0, times 0 [ 930.807566] CPU: 1 PID: 6953 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 930.808143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 930.808840] Call Trace: [ 930.809072] dump_stack+0x107/0x167 [ 930.809387] should_fail.cold+0x5/0xa [ 930.809736] ? copy_fs_struct+0x45/0x340 [ 930.810086] should_failslab+0x5/0x20 [ 930.810412] kmem_cache_alloc+0x5b/0x310 [ 930.810764] copy_fs_struct+0x45/0x340 [ 930.811103] copy_process+0x3435/0x7800 [ 930.811448] ? __lock_acquire+0xbb1/0x5b00 [ 930.811830] ? __cleanup_sighand+0xb0/0xb0 [ 930.812197] ? lock_acquire+0x197/0x470 [ 930.812542] ? find_held_lock+0x2c/0x110 [ 930.812893] kernel_clone+0xe7/0x980 [ 930.813213] ? lock_downgrade+0x6d0/0x6d0 [ 930.813566] ? find_held_lock+0x2c/0x110 [ 930.814443] FAT-fs (loop3): invalid media value (0x00) [ 930.817932] ? create_io_thread+0xf0/0xf0 [ 930.817949] ? ksys_write+0x12d/0x260 [ 930.817970] ? __mutex_unlock_slowpath+0xe1/0x600 [ 930.817991] __do_sys_fork+0x8a/0xc0 [ 930.818450] FAT-fs (loop3): Can't find a valid FAT filesystem [ 930.818794] ? kernel_thread+0xf0/0xf0 [ 930.820617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 930.821056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 930.821487] ? trace_hardirqs_on+0x5b/0x180 [ 930.821882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 930.822329] do_syscall_64+0x33/0x40 [ 930.822647] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 930.823078] RIP: 0033:0x7f8f4b3d9b19 [ 930.823394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 930.824923] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 930.825569] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 930.826187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 930.826787] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 930.827388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 930.827996] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 930.845128] FAULT_INJECTION: forcing a failure. [ 930.845128] name failslab, interval 1, probability 0, space 0, times 0 [ 930.850232] CPU: 0 PID: 6965 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 930.850839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 930.851563] Call Trace: [ 930.851800] dump_stack+0x107/0x167 [ 930.852109] should_fail.cold+0x5/0xa [ 930.852434] ? __d_alloc+0x2a/0x990 [ 930.852746] should_failslab+0x5/0x20 [ 930.853071] kmem_cache_alloc+0x5b/0x310 [ 930.853421] __d_alloc+0x2a/0x990 [ 930.853729] ? find_held_lock+0x2c/0x110 [ 930.854088] d_alloc_pseudo+0x19/0x70 [ 930.854410] alloc_file_pseudo+0xce/0x250 [ 930.854760] ? trace_hardirqs_on+0x5b/0x180 [ 930.855122] ? alloc_file+0x5a0/0x5a0 [ 930.855460] anon_inode_getfile+0xc8/0x1f0 [ 930.855824] io_uring_setup+0x1350/0x2910 [ 930.856182] ? wait_for_completion_io+0x270/0x270 [ 930.856590] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 930.857042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 930.857483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 930.857937] do_syscall_64+0x33/0x40 [ 930.858254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 930.858686] RIP: 0033:0x7fb639313b19 [ 930.859005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 930.860547] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 930.861189] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 930.861801] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 930.862397] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 930.862993] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 930.863596] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:39:56 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010103, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:39:56 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:39:56 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) unlinkat(r0, &(0x7f0000000180)='./mnt\x00', 0x200) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./mnt\x00', 0x0) 06:39:56 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) syncfs(r0) 06:39:56 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008800000d00000006000a00000000000600080000000000"], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)={0x14, r5, 0x70c, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x240000e0}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000054eb00000a00090000000c0006000000000000000000d2710300", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r4) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000640)=ANY=[], 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x15104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3ff}, 0x60a0, 0x0, 0x0, 0x6, 0x3, 0x4, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r6, &(0x7f0000004d00), 0x400000000000070, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) 06:39:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 22) 06:39:56 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 19) [ 931.002196] FAT-fs (loop3): invalid media value (0x00) [ 931.002679] FAT-fs (loop3): Can't find a valid FAT filesystem [ 931.019291] FAULT_INJECTION: forcing a failure. [ 931.019291] name failslab, interval 1, probability 0, space 0, times 0 [ 931.020295] CPU: 0 PID: 6981 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 931.020870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.021564] Call Trace: [ 931.025818] dump_stack+0x107/0x167 [ 931.026130] should_fail.cold+0x5/0xa [ 931.026455] ? create_object.isra.0+0x3a/0xa20 [ 931.026850] should_failslab+0x5/0x20 [ 931.027180] kmem_cache_alloc+0x5b/0x310 [ 931.027533] create_object.isra.0+0x3a/0xa20 [ 931.027906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 931.028341] kmem_cache_alloc+0x159/0x310 [ 931.028700] __d_alloc+0x2a/0x990 [ 931.028998] ? find_held_lock+0x2c/0x110 [ 931.029347] d_alloc_pseudo+0x19/0x70 [ 931.033697] alloc_file_pseudo+0xce/0x250 [ 931.034050] ? trace_hardirqs_on+0x5b/0x180 [ 931.034417] ? alloc_file+0x5a0/0x5a0 [ 931.034764] anon_inode_getfile+0xc8/0x1f0 [ 931.035128] io_uring_setup+0x1350/0x2910 [ 931.035487] ? wait_for_completion_io+0x270/0x270 [ 931.035894] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 931.036339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 931.036779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 931.037215] do_syscall_64+0x33/0x40 [ 931.037529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 931.037978] RIP: 0033:0x7fb639313b19 [ 931.038294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.039827] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 931.040476] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 931.041075] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 931.041689] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 931.042285] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 931.042883] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:39:56 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x80000) syz_io_uring_setup(0x6df6, &(0x7f0000000000)={0x0, 0x2f82, 0x2, 0x2, 0x2f0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 06:39:56 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010104, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 931.062086] FAULT_INJECTION: forcing a failure. [ 931.062086] name failslab, interval 1, probability 0, space 0, times 0 [ 931.063116] CPU: 1 PID: 6986 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 931.063694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.064402] Call Trace: [ 931.064638] dump_stack+0x107/0x167 [ 931.064952] should_fail.cold+0x5/0xa [ 931.065282] ? create_object.isra.0+0x3a/0xa20 [ 931.065713] should_failslab+0x5/0x20 [ 931.066042] kmem_cache_alloc+0x5b/0x310 [ 931.066394] create_object.isra.0+0x3a/0xa20 [ 931.066769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 931.067205] kmem_cache_alloc+0x159/0x310 [ 931.067568] copy_fs_struct+0x45/0x340 [ 931.067906] copy_process+0x3435/0x7800 [ 931.068249] ? __lock_acquire+0xbb1/0x5b00 [ 931.068633] ? __cleanup_sighand+0xb0/0xb0 [ 931.069000] ? lock_acquire+0x197/0x470 [ 931.069345] ? find_held_lock+0x2c/0x110 [ 931.069736] kernel_clone+0xe7/0x980 [ 931.070057] ? lock_downgrade+0x6d0/0x6d0 [ 931.070407] ? find_held_lock+0x2c/0x110 [ 931.070753] ? create_io_thread+0xf0/0xf0 [ 931.071112] ? ksys_write+0x12d/0x260 [ 931.071450] ? __mutex_unlock_slowpath+0xe1/0x600 [ 931.071866] __do_sys_fork+0x8a/0xc0 [ 931.072182] ? kernel_thread+0xf0/0xf0 [ 931.072515] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 931.072913] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 931.073354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 931.073802] ? trace_hardirqs_on+0x5b/0x180 [ 931.074167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 931.074599] do_syscall_64+0x33/0x40 [ 931.074916] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 931.075346] RIP: 0033:0x7f8f4b3d9b19 [ 931.075664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 931.077194] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 931.077850] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 931.078448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 931.079049] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 931.079648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 931.080245] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:40:09 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:40:09 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010105, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:40:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400", 0x15}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:40:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001180)="f2c0b00a0a73e255b2c66a3b572734f9f2960489bcfd1baa89d409e4b00ba17439ba84201bd4ee5ec6fa3255c411066d8d4158cb9c5c939f34cece2183a114d70870", 0x42}, {&(0x7f0000000140)="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", 0xfc0}, {&(0x7f0000001200)="7da9545f34e5d591", 0x8}], 0x3, 0xff7, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xffffffffffff3200, 0x20000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001100)=ANY=[@ANYBLOB="010000001500000018000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) sendfile(r2, r0, 0x0, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) read$snapshot(r4, &(0x7f0000001240)=""/103, 0x67) 06:40:09 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0294", 0x67, 0x400}], 0x0, &(0x7f0000012b00)=ANY=[]) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@ceph_nfs_confh={0x10, 0x2, {0x2, 0x7}}, &(0x7f0000000180), 0x400) 06:40:09 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfff, 0x24000) fchmod(r0, 0x41) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x8, &(0x7f0000000040)=[{0xff, 0x3, 0x5, 0x3}, {0x7f, 0x5, 0x0, 0x4}, {0x26, 0x7, 0x4, 0x100}, {0x1, 0x0, 0x3f, 0x65c0}, {0x100, 0x9, 0x8, 0x7ff}, {0xc05d, 0x7, 0xf8, 0x80000000}, {0x0, 0x4, 0x9, 0x3}, {0x1000, 0x1f, 0xf9, 0x54}]}) 06:40:09 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 20) 06:40:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 23) [ 944.671327] FAULT_INJECTION: forcing a failure. [ 944.671327] name failslab, interval 1, probability 0, space 0, times 0 [ 944.673140] CPU: 0 PID: 7011 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 944.673738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.674507] Call Trace: [ 944.674738] dump_stack+0x107/0x167 [ 944.675049] should_fail.cold+0x5/0xa [ 944.675376] ? copy_process+0x1add/0x7800 [ 944.675733] should_failslab+0x5/0x20 [ 944.676057] kmem_cache_alloc+0x5b/0x310 [ 944.676400] ? _raw_spin_unlock+0x1a/0x30 [ 944.676755] copy_process+0x1add/0x7800 [ 944.677098] ? __lock_acquire+0xbb1/0x5b00 [ 944.677479] ? __cleanup_sighand+0xb0/0xb0 [ 944.677925] ? lock_acquire+0x197/0x470 [ 944.678272] ? find_held_lock+0x2c/0x110 [ 944.678625] kernel_clone+0xe7/0x980 [ 944.678944] ? lock_downgrade+0x6d0/0x6d0 [ 944.679296] ? find_held_lock+0x2c/0x110 [ 944.679643] ? create_io_thread+0xf0/0xf0 [ 944.680004] ? ksys_write+0x12d/0x260 [ 944.680339] ? __mutex_unlock_slowpath+0xe1/0x600 [ 944.680756] __do_sys_fork+0x8a/0xc0 [ 944.681073] ? kernel_thread+0xf0/0xf0 [ 944.681418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.681931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.683058] ? trace_hardirqs_on+0x5b/0x180 [ 944.683429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.683863] do_syscall_64+0x33/0x40 [ 944.684180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.684611] RIP: 0033:0x7f8f4b3d9b19 [ 944.684930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.686475] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 944.687120] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 944.687721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 944.688324] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.688926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.689527] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 944.691593] FAT-fs (loop3): invalid media value (0x00) [ 944.692098] FAT-fs (loop3): Can't find a valid FAT filesystem 06:40:09 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000400)={0x3, 0x5a4, 0x3, 0x7fff, 0xa6bb, 0x3}) syz_emit_ethernet(0xbe, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@val={0x9100, 0x1, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x80, 0x3a, 0xff, @empty, @dev={0xfe, 0x80, '\x00', 0x26}, {[@hopopts={0x2b, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x8000000}, @ra={0x5, 0x2, 0x7}, @pad1, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x4e92}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x9e8, [0x3, 0x10000]}}, @generic={0x0, 0x14, "146893d7bf51da4032793b7821d59fe07db9da30"}]}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58) sendfile(r1, r2, &(0x7f00000003c0)=0x10000, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) 06:40:09 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 21) [ 944.731594] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 06:40:09 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010106, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:40:09 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sctp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) [ 944.753292] FAULT_INJECTION: forcing a failure. [ 944.753292] name failslab, interval 1, probability 0, space 0, times 0 [ 944.754370] CPU: 0 PID: 7013 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 944.755032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.755756] Call Trace: [ 944.756014] dump_stack+0x107/0x167 [ 944.756358] should_fail.cold+0x5/0xa [ 944.756719] ? __alloc_file+0x21/0x320 [ 944.757087] should_failslab+0x5/0x20 [ 944.757443] kmem_cache_alloc+0x5b/0x310 [ 944.757848] __alloc_file+0x21/0x320 [ 944.758197] alloc_empty_file+0x6d/0x170 [ 944.758573] alloc_file+0x5e/0x5a0 [ 944.758910] alloc_file_pseudo+0x16a/0x250 [ 944.759297] ? alloc_file+0x5a0/0x5a0 [ 944.759672] anon_inode_getfile+0xc8/0x1f0 [ 944.760071] io_uring_setup+0x1350/0x2910 [ 944.760470] ? wait_for_completion_io+0x270/0x270 [ 944.760914] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 944.761402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.761906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.762477] do_syscall_64+0x33/0x40 [ 944.762879] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.763422] RIP: 0033:0x7fb639313b19 [ 944.763839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.765780] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 944.766469] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 944.767101] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 944.767734] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 944.768373] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 944.769010] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:40:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 944.866961] FAULT_INJECTION: forcing a failure. [ 944.866961] name failslab, interval 1, probability 0, space 0, times 0 [ 944.868023] CPU: 0 PID: 7023 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 944.868619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.869335] Call Trace: [ 944.869572] dump_stack+0x107/0x167 [ 944.869916] should_fail.cold+0x5/0xa [ 944.870263] ? create_object.isra.0+0x3a/0xa20 [ 944.870665] should_failslab+0x5/0x20 [ 944.870999] kmem_cache_alloc+0x5b/0x310 [ 944.871354] create_object.isra.0+0x3a/0xa20 [ 944.871729] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 944.872166] kmem_cache_alloc+0x159/0x310 [ 944.872524] ? _raw_spin_unlock+0x1a/0x30 [ 944.872882] copy_process+0x1add/0x7800 [ 944.873224] ? __lock_acquire+0xbb1/0x5b00 [ 944.873605] ? __cleanup_sighand+0xb0/0xb0 [ 944.873987] ? lock_acquire+0x197/0x470 [ 944.874333] ? find_held_lock+0x2c/0x110 [ 944.874688] kernel_clone+0xe7/0x980 [ 944.875005] ? lock_downgrade+0x6d0/0x6d0 [ 944.875354] ? find_held_lock+0x2c/0x110 [ 944.875700] ? create_io_thread+0xf0/0xf0 [ 944.876054] ? ksys_write+0x12d/0x260 [ 944.876386] ? __mutex_unlock_slowpath+0xe1/0x600 [ 944.876800] __do_sys_fork+0x8a/0xc0 [ 944.877117] ? kernel_thread+0xf0/0xf0 [ 944.877461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.877936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.878372] ? trace_hardirqs_on+0x5b/0x180 [ 944.878739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.879175] do_syscall_64+0x33/0x40 [ 944.879496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.879930] RIP: 0033:0x7f8f4b3d9b19 [ 944.880246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.881807] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 944.882452] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 944.883051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 944.883650] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.884251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.884851] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:40:10 executing program 6: mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x20) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006c80)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/152, 0x98}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f00000002c0)=""/137, 0x89}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000000600)=""/180, 0xb4}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/141, 0x8d}, {&(0x7f0000001900)=""/58, 0x3a}, {&(0x7f0000001940)=""/151, 0x97}, {&(0x7f0000001a00)=""/95, 0x5f}], 0x4}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001cc0)=""/115, 0x73}, {&(0x7f0000001d40)=""/3, 0x3}, {&(0x7f0000001d80)=""/178, 0xb2}, {&(0x7f0000001e40)=""/33, 0x21}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x5, &(0x7f0000002f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000003040), 0x6e, &(0x7f00000032c0)=[{&(0x7f00000030c0)=""/97, 0x61}, {&(0x7f0000003140)=""/101, 0x65}, {&(0x7f00000031c0)=""/232, 0xe8}], 0x3, &(0x7f0000003300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003340), 0x6e, &(0x7f0000004500)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/155, 0x9b}, {&(0x7f0000004480)=""/68, 0x44}], 0x3}}, {{&(0x7f0000004540), 0x6e, &(0x7f0000005940)=[{&(0x7f00000045c0)=""/206, 0xce}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/171, 0xab}, {&(0x7f0000005780)=""/251, 0xfb}, {&(0x7f0000005880)=""/152, 0x98}], 0x5, &(0x7f00000059c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000005b00)=@abs, 0x6e, &(0x7f0000006b80)=[{&(0x7f0000005b80)=""/4096, 0x1000}], 0x1, &(0x7f0000006bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x8, 0x10001, &(0x7f0000006e80)={0x0, 0x989680}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x1) r14 = socket$inet(0x2, 0x800, 0xfffffff8) fcntl$setstatus(r14, 0x4, 0x400) r15 = syz_mount_image$tmpfs(&(0x7f0000006ec0), &(0x7f0000006f00)='.\x00', 0x80000000, 0x0, &(0x7f0000006f40), 0x2020, &(0x7f0000006f80)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x65, 0x67, 0x37, 0x39, 0x74]}}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x78, 0x65, 0x34, 0x30]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x2d, 0x39, 0x32, 0x38, 0x35, 0x34, 0x0, 0x37]}}}}], [{@euid_gt={'euid>', r0}}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}) poll(&(0x7f0000007040)=[{r15, 0x400}, {r6, 0x5000}, {r4, 0x80}, {r9, 0x41}], 0x4, 0xffff) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) getsockopt$inet_int(r3, 0x0, 0x4, &(0x7f0000007080), &(0x7f00000070c0)=0x4) ioctl$FITHAW(r5, 0xc0045878) r16 = openat$full(0xffffffffffffff9c, &(0x7f0000007100), 0x400002, 0x0) io_uring_enter(r16, 0xef7, 0x5ef6, 0x3, &(0x7f0000007140)={[0x4]}, 0x8) r17 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r12, 0x0) r18 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x10000000) syz_io_uring_submit(r17, r18, &(0x7f0000007180)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffff, 0x3, 0x0, {0x0, 0x0, r8}}, 0x81) write$binfmt_elf64(r7, &(0x7f00000071c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2, 0xbf, 0x7, 0x100000001, 0x2, 0x6, 0xffff0001, 0x72, 0x40, 0x197, 0xfff, 0x0, 0x38, 0x2, 0x1ff, 0x6, 0x4}, [{0x60000000, 0x8000, 0x100, 0xfffffffffffffffa, 0x2, 0xd28b, 0x1ff, 0xf27d}, {0x6474e551, 0x8, 0x3ff, 0xc5, 0x6, 0x1000, 0x3, 0x86df}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x16b0) connect$inet(r10, &(0x7f0000008880)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) socket$inet(0x2, 0x5, 0x6a1c) fcntl$F_SET_RW_HINT(r13, 0x40c, &(0x7f00000088c0)=0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r14, 0xc0389424, &(0x7f0000008940)={0x10001, 0x20, '\x00', 0x0, &(0x7f0000008900)=[0x0, 0x0, 0x0, 0x0]}) [ 944.962795] FAT-fs (loop3): bogus number of FAT sectors [ 944.963364] FAT-fs (loop3): Can't find a valid FAT filesystem 06:40:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 24) 06:40:10 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x6401010f, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 945.027432] FAULT_INJECTION: forcing a failure. [ 945.027432] name failslab, interval 1, probability 0, space 0, times 0 [ 945.028438] CPU: 0 PID: 7040 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 945.029014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 945.029714] Call Trace: [ 945.029956] dump_stack+0x107/0x167 [ 945.030268] should_fail.cold+0x5/0xa [ 945.030595] ? create_object.isra.0+0x3a/0xa20 [ 945.030985] should_failslab+0x5/0x20 [ 945.031310] kmem_cache_alloc+0x5b/0x310 [ 945.031658] create_object.isra.0+0x3a/0xa20 [ 945.032033] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 945.032468] kmem_cache_alloc+0x159/0x310 [ 945.032829] __alloc_file+0x21/0x320 [ 945.033149] alloc_empty_file+0x6d/0x170 [ 945.033496] alloc_file+0x5e/0x5a0 [ 945.033821] alloc_file_pseudo+0x16a/0x250 [ 945.034182] ? alloc_file+0x5a0/0x5a0 [ 945.034520] anon_inode_getfile+0xc8/0x1f0 [ 945.034886] io_uring_setup+0x1350/0x2910 [ 945.035248] ? wait_for_completion_io+0x270/0x270 [ 945.035659] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 945.036109] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 945.036553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 945.036993] do_syscall_64+0x33/0x40 [ 945.037309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 945.037756] RIP: 0033:0x7fb639313b19 [ 945.038075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 945.039623] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 945.040270] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 945.040870] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 945.041469] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 945.042085] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 945.042687] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:40:24 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 22) 06:40:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01fc0000010000000000"]) write(r0, &(0x7f0000001500)="1b8e95c8287306eea698e4ff21d9c2d3f3e21fb0287018267b06e0aed7fea740b18ff3fb5802da8abd77cc1c87a6392d5f8ee0da53901d882bb871279e3f90e35ac46433e4677e388795897b440603ec4a40c6f178c99d253e864e5b026cbc8d202700c87c49d8c6a461c05e174be34eba55e36183b3bbcf76e0e074f6d31b698ea9435f3b5804284c432a6e2e0a709c7154d44f2395a1e62d6ad538fc1e55abbaacc36dddbc66db46f292a4613f7970c1bd539ea3cf53a7bbdc845534c2", 0xbe) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = gettid() recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/68, 0x44}], 0x3, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000640)=""/143, 0x8f}], 0x2, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/173, 0xad}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/212, 0xd4}, {&(0x7f0000000a00)=""/169, 0xa9}], 0x4, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000bc0), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/233, 0xe9}, {&(0x7f0000000d40)=""/138, 0x8a}], 0x2, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000f00)=""/194, 0xc2}, {&(0x7f0000001000)=""/252, 0xfc}, {&(0x7f0000001100)=""/200, 0xc8}], 0x3, &(0x7f0000001240)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x40012043, &(0x7f00000013c0)={0x0, 0x3938700}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001400)=0x0) r4 = getpid() clone3(&(0x7f0000001480)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x22}, &(0x7f00000000c0)=""/126, 0x7e, &(0x7f0000000140)=""/245, &(0x7f0000001440)=[r1, 0xffffffffffffffff, r2, 0x0, 0xffffffffffffffff, r3, r4], 0x7}, 0x58) sync() 06:40:24 executing program 5: sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="14315b8934e086c195da801b6b4ad25aaf4651c588a1aa4e7808fb55600ff660f0e0adaed252eb03ccc572a68bff0eb2af658b32b2dd5987fed01c06f063e896112225ae68dd401292eeb63514d7619f73485b991df7e04e4735b1828502a29f4e0e75c24564ef3209186c6b39abf97b66a348fedbb69114bee15d", 0x7b, 0x10, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:40:24 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:40:24 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010111, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:40:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 25) 06:40:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2, 0x9}}, './file1\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)) pwrite64(r2, &(0x7f0000000140)="2e8dd36668546dd997206b2859557e735264ced0deb8cee8c6ac3eeb0c82b26de730c40b71aa813353ec11c53101d8766b97d7b3aa47b88f94bc33129125f54f8f7d3de1bb79d819ca0f496ba1bdfe3315b26c8f6326f6d59cfd71ad81403b289fab4b4b4e29266cce0a7954cbdacdd4e65b0de4e5332396d38290546bbf90c6d8", 0x81, 0xffff) [ 959.274132] FAULT_INJECTION: forcing a failure. [ 959.274132] name failslab, interval 1, probability 0, space 0, times 0 [ 959.275189] CPU: 0 PID: 7055 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 959.275768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 959.276469] Call Trace: [ 959.276702] dump_stack+0x107/0x167 [ 959.277010] should_fail.cold+0x5/0xa [ 959.277337] ? security_file_alloc+0x34/0x170 [ 959.277729] should_failslab+0x5/0x20 [ 959.278077] kmem_cache_alloc+0x5b/0x310 [ 959.278427] security_file_alloc+0x34/0x170 [ 959.278811] __alloc_file+0xb7/0x320 [ 959.279130] alloc_empty_file+0x6d/0x170 [ 959.279474] alloc_file+0x5e/0x5a0 [ 959.279800] alloc_file_pseudo+0x16a/0x250 [ 959.280158] ? alloc_file+0x5a0/0x5a0 [ 959.280498] anon_inode_getfile+0xc8/0x1f0 [ 959.280878] io_uring_setup+0x1350/0x2910 [ 959.281239] ? wait_for_completion_io+0x270/0x270 [ 959.281647] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 959.282136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 959.282862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 959.283373] do_syscall_64+0x33/0x40 [ 959.284323] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 959.285652] RIP: 0033:0x7fb639313b19 [ 959.286689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 959.291713] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 959.293568] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 959.295304] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 959.297042] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 959.298792] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 959.300515] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 959.322114] FAULT_INJECTION: forcing a failure. [ 959.322114] name failslab, interval 1, probability 0, space 0, times 0 [ 959.325359] CPU: 1 PID: 7062 Comm: syz-executor.0 Not tainted 5.10.225 #1 06:40:24 executing program 1: syz_open_dev$evdev(0x0, 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:40:24 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x4, 0x100000000, 0xffff, r2}) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:40:24 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010129, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 959.327116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 959.330813] Call Trace: [ 959.331112] dump_stack+0x107/0x167 [ 959.331498] should_fail.cold+0x5/0xa [ 959.332006] ? copy_process+0x1c5b/0x7800 [ 959.332451] should_failslab+0x5/0x20 [ 959.332908] kmem_cache_alloc+0x5b/0x310 [ 959.333345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 959.333956] copy_process+0x1c5b/0x7800 [ 959.334387] ? __lock_acquire+0xbb1/0x5b00 [ 959.334922] ? __cleanup_sighand+0xb0/0xb0 [ 959.335368] ? lock_acquire+0x197/0x470 [ 959.335846] ? find_held_lock+0x2c/0x110 [ 959.336278] kernel_clone+0xe7/0x980 [ 959.336679] ? lock_downgrade+0x6d0/0x6d0 [ 959.337207] ? find_held_lock+0x2c/0x110 [ 959.337636] ? create_io_thread+0xf0/0xf0 [ 959.339399] ? ksys_write+0x12d/0x260 [ 959.340766] ? __mutex_unlock_slowpath+0xe1/0x600 [ 959.342009] __do_sys_fork+0x8a/0xc0 [ 959.342929] ? kernel_thread+0xf0/0xf0 [ 959.343904] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 959.345182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 959.346470] ? trace_hardirqs_on+0x5b/0x180 [ 959.347522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 959.348810] do_syscall_64+0x33/0x40 [ 959.349679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 959.351004] RIP: 0033:0x7f8f4b3d9b19 [ 959.351896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 959.356394] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 959.358269] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 959.360021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.361778] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 959.363495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 959.365257] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 959.373880] FAT-fs (loop3): bogus number of FAT sectors [ 959.374600] FAT-fs (loop3): Can't find a valid FAT filesystem 06:40:24 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 23) 06:40:24 executing program 5: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x6, 0x0, 0x0, 0xff, 0x84, "b1467ac66311aefe0000000000f5008000", 0x4, 0x4e9}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000003c0)={0x9, 0x68d5, 0x4, 0x5, 0x6, [{0x10001, 0x3f, 0x4, '\x00', 0x2284}, {0x400, 0x9, 0x2, '\x00', 0x1905}, {0xffff, 0x7, 0x3c76, '\x00', 0x1000}, {0xc2c4, 0x7, 0x6, '\x00', 0x220c}, {0x40, 0x4, 0x4}, {0x8, 0xffffffffffff32bc, 0x2, '\x00', 0x1102}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) [ 959.672254] FAULT_INJECTION: forcing a failure. [ 959.672254] name failslab, interval 1, probability 0, space 0, times 0 [ 959.673382] CPU: 0 PID: 7083 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 959.678011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 959.678793] Call Trace: [ 959.679050] dump_stack+0x107/0x167 [ 959.679402] should_fail.cold+0x5/0xa [ 959.679773] ? create_object.isra.0+0x3a/0xa20 [ 959.680211] should_failslab+0x5/0x20 [ 959.680580] kmem_cache_alloc+0x5b/0x310 [ 959.680981] create_object.isra.0+0x3a/0xa20 [ 959.681406] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 959.681891] kmem_cache_alloc+0x159/0x310 [ 959.682302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 959.682799] copy_process+0x1c5b/0x7800 [ 959.683184] ? __lock_acquire+0xbb1/0x5b00 [ 959.683623] ? __cleanup_sighand+0xb0/0xb0 [ 959.684028] ? __lockdep_reset_lock+0x180/0x180 [ 959.684490] ? find_held_lock+0x2c/0x110 [ 959.684871] kernel_clone+0xe7/0x980 [ 959.685218] ? lock_downgrade+0x6d0/0x6d0 [ 959.685626] ? find_held_lock+0x2c/0x110 [ 959.686021] ? create_io_thread+0xf0/0xf0 [ 959.686437] ? ksys_write+0x12d/0x260 [ 959.686808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 959.687269] __do_sys_fork+0x8a/0xc0 [ 959.687623] ? kernel_thread+0xf0/0xf0 [ 959.688001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 959.688497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 959.688920] ? syscall_trace_enter.constprop.0+0x10d/0x1e0 [ 959.689351] do_syscall_64+0x33/0x40 [ 959.689644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 959.690135] RIP: 0033:0x7f8f4b3d9b19 [ 959.690489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 959.691913] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 959.692493] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 959.693052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.693709] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 959.694391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 959.695041] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:40:40 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x6401012b, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:40:40 executing program 1: syz_open_dev$evdev(0x0, 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:40:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xd4, 0x3ed, 0x200, 0x70bd26, 0x25dfdbfe, "15f676366fe5d32ff6299fe7c5e02fd8121f7843af61b4719bf9e180fb487729221031d03053032df4c814fd547270a15f1dab314815ab7c1587928a346dbf750559874f3dec4de660c8a90b9c4e5e46522008ec5ab3ceef3580e411d47a347b59fe8afb971b7c1546ca94e165b932b860d7b458f2017b2f1c1af1d417344dfd2ad5e1ebf235f4ff8af4118c992891af65e75ddde2f1b2f6dca00353bebe21aab276177762e90f5b78a793c0dd9470f128e894226f3441834caa1e4d378915906a31976e", ["", "", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000050) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00852e000000000000000600000000080000000000000008000c", @ANYRES32=0x0, @ANYBLOB="d8000000"], 0x28}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) 06:40:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f0000000000)=""/38, 0x26}], 0x2, 0xfffffff9, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x800) 06:40:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f8", 0x16}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:40:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 26) 06:40:40 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0xc045}, 0x80000) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080062f80b7c91c31497ad9f812ed94e074500003000000000008890780a010101ac1414aa050090780a0101014500000000"], 0x0) 06:40:40 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 24) 06:40:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x24f1b96e, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/72, 0x48}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f00000013c0)=""/232, 0xe8}], 0x7, 0x9, 0x3) [ 975.197755] FAT-fs (loop3): bogus number of FAT sectors [ 975.198343] FAT-fs (loop3): Can't find a valid FAT filesystem [ 975.199161] FAULT_INJECTION: forcing a failure. [ 975.199161] name failslab, interval 1, probability 0, space 0, times 0 [ 975.200134] CPU: 0 PID: 7102 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 975.200720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 975.201431] Call Trace: [ 975.201665] dump_stack+0x107/0x167 [ 975.201987] should_fail.cold+0x5/0xa [ 975.202324] ? copy_process+0x1add/0x7800 [ 975.202693] should_failslab+0x5/0x20 [ 975.203020] kmem_cache_alloc+0x5b/0x310 [ 975.203362] ? _raw_spin_unlock+0x1a/0x30 [ 975.203731] copy_process+0x1add/0x7800 [ 975.204074] ? __lock_acquire+0xbb1/0x5b00 [ 975.204457] ? __cleanup_sighand+0xb0/0xb0 [ 975.204834] ? lock_acquire+0x197/0x470 [ 975.205177] ? find_held_lock+0x2c/0x110 [ 975.205523] kernel_clone+0xe7/0x980 [ 975.205853] ? lock_downgrade+0x6d0/0x6d0 [ 975.206224] ? find_held_lock+0x2c/0x110 [ 975.206567] ? create_io_thread+0xf0/0xf0 [ 975.206937] ? ksys_write+0x12d/0x260 [ 975.207269] ? __mutex_unlock_slowpath+0xe1/0x600 [ 975.207687] __do_sys_fork+0x8a/0xc0 [ 975.208013] ? kernel_thread+0xf0/0xf0 [ 975.208357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 975.208814] ? syscall_enter_from_user_mode+0x1d/0x50 [ 975.209249] ? trace_hardirqs_on+0x5b/0x180 [ 975.209615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 975.210080] do_syscall_64+0x33/0x40 [ 975.210399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 975.210834] RIP: 0033:0x7f8f4b3d9b19 [ 975.211163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 975.212701] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 975.213355] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 975.213955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 975.214578] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 975.215189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 975.215787] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 975.219303] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 975.220193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 975.235396] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 975.236115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 975.245398] FAULT_INJECTION: forcing a failure. 06:40:40 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x6401012c, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 975.245398] name failslab, interval 1, probability 0, space 0, times 0 [ 975.246479] CPU: 0 PID: 7115 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 975.247072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 975.247767] Call Trace: [ 975.247997] dump_stack+0x107/0x167 [ 975.248322] should_fail.cold+0x5/0xa [ 975.262221] ? create_object.isra.0+0x3a/0xa20 [ 975.262617] should_failslab+0x5/0x20 [ 975.262944] kmem_cache_alloc+0x5b/0x310 [ 975.263291] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 975.263759] create_object.isra.0+0x3a/0xa20 [ 975.264134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 975.264569] kmem_cache_alloc+0x159/0x310 [ 975.264930] security_file_alloc+0x34/0x170 [ 975.265300] __alloc_file+0xb7/0x320 [ 975.265619] alloc_empty_file+0x6d/0x170 [ 975.265965] alloc_file+0x5e/0x5a0 [ 975.266290] alloc_file_pseudo+0x16a/0x250 [ 975.266646] ? alloc_file+0x5a0/0x5a0 [ 975.266984] anon_inode_getfile+0xc8/0x1f0 [ 975.267347] io_uring_setup+0x1350/0x2910 [ 975.267708] ? wait_for_completion_io+0x270/0x270 [ 975.268120] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 975.268567] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 975.269008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 975.269446] do_syscall_64+0x33/0x40 [ 975.269763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 975.270210] RIP: 0033:0x7fb639313b19 [ 975.270529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 975.272070] RSP: 002b:00007fb636868108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 975.272712] RAX: ffffffffffffffda RBX: 00007fb639427020 RCX: 00007fb639313b19 [ 975.273309] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 975.273907] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 975.274524] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 975.275121] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:40:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x9) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:40:40 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 25) 06:40:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x100, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xd, 0x12, r1, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x8000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x6404, 0x8641, 0x6, &(0x7f0000000380)={[0x8]}, 0x8) openat(r1, &(0x7f0000000040)='./file1\x00', 0x4201, 0x49) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[r4], 0x1, 0x0, 0x1}, 0x1) r5 = getpid() process_vm_readv(r5, &(0x7f0000000240)=[{&(0x7f0000000140)=""/193, 0xc1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000003300)=""/4096, 0x1000}], 0x1, 0x0) 06:40:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 975.378776] FAULT_INJECTION: forcing a failure. [ 975.378776] name failslab, interval 1, probability 0, space 0, times 0 [ 975.379919] CPU: 1 PID: 7125 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 975.380543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 975.381290] Call Trace: [ 975.381544] dump_stack+0x107/0x167 [ 975.381884] should_fail.cold+0x5/0xa [ 975.382263] ? create_object.isra.0+0x3a/0xa20 [ 975.382689] should_failslab+0x5/0x20 [ 975.383048] kmem_cache_alloc+0x5b/0x310 [ 975.383433] create_object.isra.0+0x3a/0xa20 [ 975.383844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 975.384310] kmem_cache_alloc+0x159/0x310 [ 975.384700] copy_process+0x24f5/0x7800 [ 975.385072] ? __lock_acquire+0xbb1/0x5b00 [ 975.385487] ? __cleanup_sighand+0xb0/0xb0 [ 975.385890] ? lock_acquire+0x197/0x470 [ 975.386283] ? find_held_lock+0x2c/0x110 [ 975.386667] kernel_clone+0xe7/0x980 [ 975.387014] ? lock_downgrade+0x6d0/0x6d0 [ 975.387399] ? find_held_lock+0x2c/0x110 [ 975.387776] ? create_io_thread+0xf0/0xf0 [ 975.388168] ? ksys_write+0x12d/0x260 [ 975.388536] ? __mutex_unlock_slowpath+0xe1/0x600 [ 975.388996] __do_sys_fork+0x8a/0xc0 [ 975.389332] ? kernel_thread+0xf0/0xf0 [ 975.389695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 975.390210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 975.390687] ? trace_hardirqs_on+0x5b/0x180 [ 975.391084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 975.391559] do_syscall_64+0x33/0x40 [ 975.391909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 975.392380] RIP: 0033:0x7f8f4b3d9b19 [ 975.392729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 975.398409] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 975.399095] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 975.399706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 975.400346] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 975.400984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 975.401614] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:40:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 990.017227] FAULT_INJECTION: forcing a failure. [ 990.017227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 990.018237] CPU: 0 PID: 7149 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 990.018796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.019472] Call Trace: [ 990.019699] dump_stack+0x107/0x167 [ 990.020009] should_fail.cold+0x5/0xa [ 990.020336] __alloc_pages_nodemask+0x182/0x600 [ 990.020725] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 990.021158] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 990.021652] alloc_pages_current+0x187/0x280 [ 990.022007] __get_free_pages+0xc/0xa0 [ 990.022327] pgd_alloc+0x84/0x4e0 [ 990.022606] ? pgd_page_get_mm+0x40/0x40 [ 990.022931] ? lockdep_init_map_type+0x2c7/0x780 [ 990.023311] ? lockdep_init_map_type+0x2c7/0x780 [ 990.023698] mm_init+0x670/0xab0 [ 990.023974] copy_process+0x254d/0x7800 [ 990.024293] ? __lock_acquire+0xbb1/0x5b00 [ 990.024651] ? __cleanup_sighand+0xb0/0xb0 [ 990.024995] ? lock_acquire+0x197/0x470 [ 990.025320] ? find_held_lock+0x2c/0x110 [ 990.025648] kernel_clone+0xe7/0x980 [ 990.025947] ? lock_downgrade+0x6d0/0x6d0 [ 990.030333] ? find_held_lock+0x2c/0x110 [ 990.030665] ? create_io_thread+0xf0/0xf0 [ 990.030998] ? ksys_write+0x12d/0x260 [ 990.031305] ? __mutex_unlock_slowpath+0xe1/0x600 [ 990.031689] __do_sys_fork+0x8a/0xc0 [ 990.031984] ? kernel_thread+0xf0/0xf0 [ 990.032304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.032716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.033121] ? trace_hardirqs_on+0x5b/0x180 [ 990.033462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.033867] do_syscall_64+0x33/0x40 [ 990.034177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.034581] RIP: 0033:0x7f8f4b3d9b19 [ 990.034877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.036313] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 990.036912] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 990.037471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 06:40:55 executing program 1: syz_open_dev$evdev(0x0, 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:40:55 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 26) 06:40:55 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d, 0xfff7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x1274, 0x0) r5 = dup2(r1, r1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x50, r4, 0x0) r7 = syz_io_uring_complete(r6) r8 = io_uring_setup(0x1b33, &(0x7f00000003c0)={0x0, 0xc7e7, 0x20, 0x3, 0x175, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) write$binfmt_elf64(r5, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x2, 0x6, 0x0, 0xea5, 0x2, 0x3e, 0x1800, 0x0, 0x40, 0x31e, 0x6, 0x201, 0x38, 0x1, 0x1f32, 0x1, 0x100}, [{0x0, 0x3, 0x5, 0xff, 0xa0, 0xdd7, 0x1000000003, 0xffff}], "5563cd9a58df47eb7fe1862c4d6716e03dda73ad79bdf1e9a003bcf3986c50d4e8aa28c957fb3d2f3a377ec19cccee4be2003b4f8551fca880d37a4b11600af6227109e9493fb7702e12a94b4c79f4", ['\x00', '\x00', '\x00']}, 0x3c7) pipe(&(0x7f0000000280)={0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r7) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, 0xffffffffffffffff, r5, r1, r10, 0xffffffffffffffff, r11, r1], 0x8) clone3(&(0x7f0000000200)={0x451a6100, &(0x7f00000000c0), 0x0, &(0x7f0000000100), {0x16}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 06:40:55 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x6401012f, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:40:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x82}) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) get_robust_list(r0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r2 = getpgid(0x0) rt_tgsigqueueinfo(r2, r2, 0x0, &(0x7f0000000700)) rt_sigqueueinfo(r2, 0x38, &(0x7f0000000280)={0x1b, 0x8001, 0x200}) memfd_create(0x0, 0x8) ftruncate(r1, 0x8800000) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000080)=""/200, 0x20000148}], 0x1, 0x0, 0x0) getpgrp(0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) 06:40:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 27) 06:40:55 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) [ 990.042225] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.046680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.047235] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 990.061415] FAULT_INJECTION: forcing a failure. [ 990.061415] name failslab, interval 1, probability 0, space 0, times 0 [ 990.062390] CPU: 0 PID: 7154 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 990.062957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.063633] Call Trace: [ 990.063873] dump_stack+0x107/0x167 [ 990.064195] should_fail.cold+0x5/0xa [ 990.064535] ? io_uring_alloc_task_context+0x99/0x6a0 [ 990.064978] should_failslab+0x5/0x20 [ 990.065282] kmem_cache_alloc_trace+0x55/0x320 [ 990.065646] io_uring_alloc_task_context+0x99/0x6a0 [ 990.066040] ? io_import_iovec+0x1120/0x1120 [ 990.066429] ? lock_downgrade+0x6d0/0x6d0 [ 990.066759] ? do_raw_spin_lock+0x121/0x260 [ 990.067101] ? rwlock_bug.part.0+0x90/0x90 [ 990.067440] __io_uring_add_tctx_node+0x2c6/0x520 [ 990.067820] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 990.068230] ? alloc_fd+0x2e7/0x670 [ 990.068531] io_uring_setup+0x1f6a/0x2910 [ 990.068866] ? wait_for_completion_io+0x270/0x270 [ 990.069253] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 990.069672] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.070095] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.070529] do_syscall_64+0x33/0x40 [ 990.070830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.071240] RIP: 0033:0x7fb639313b19 [ 990.071537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.072988] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 990.073591] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 990.074179] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 990.078578] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 990.079137] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 990.079693] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:40:55 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 27) 06:40:55 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x6401013a, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:40:55 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000003c0)=[0x401, 0xff]) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5b13, 0xc0100) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000001000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`p\x00'/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28, @ANYRES32=r2, @ANYBLOB="000000001f00"/28, @ANYRES32=r3, @ANYBLOB="00000000e400"/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28, @ANYRES32=r5, @ANYBLOB="000000000600"/28, @ANYRES32=r6, @ANYBLOB="000000008000"/28, @ANYRES32, @ANYBLOB="00000000ba00"/28, @ANYRES32, @ANYBLOB="000000000c0100"/28]) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:40:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:40:55 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x6401013c, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 990.207880] FAULT_INJECTION: forcing a failure. [ 990.207880] name failslab, interval 1, probability 0, space 0, times 0 [ 990.209182] CPU: 1 PID: 7170 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 990.209761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.210481] Call Trace: [ 990.210718] dump_stack+0x107/0x167 [ 990.211037] should_fail.cold+0x5/0xa [ 990.211370] ? vm_area_dup+0x78/0x290 [ 990.211701] should_failslab+0x5/0x20 [ 990.212030] kmem_cache_alloc+0x5b/0x310 [ 990.212387] vm_area_dup+0x78/0x290 [ 990.212712] ? __lock_acquire+0xbb1/0x5b00 [ 990.213095] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 990.213547] ? lock_acquire+0x197/0x470 [ 990.213888] ? copy_process+0x25d6/0x7800 [ 990.214268] ? vm_area_alloc+0x110/0x110 [ 990.214615] ? find_held_lock+0x2c/0x110 [ 990.214967] ? get_mm_exe_file+0x139/0x310 [ 990.215328] ? lock_downgrade+0x6d0/0x6d0 [ 990.215684] ? down_write_nested+0xe4/0x160 [ 990.216053] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 990.216494] ? get_mm_exe_file+0x162/0x310 [ 990.216861] copy_process+0x291b/0x7800 [ 990.217209] ? __lock_acquire+0xbb1/0x5b00 [ 990.217616] ? __cleanup_sighand+0xb0/0xb0 [ 990.217982] ? lock_acquire+0x197/0x470 [ 990.218335] ? find_held_lock+0x2c/0x110 [ 990.218687] kernel_clone+0xe7/0x980 [ 990.219004] ? lock_downgrade+0x6d0/0x6d0 [ 990.219357] ? find_held_lock+0x2c/0x110 [ 990.219702] ? create_io_thread+0xf0/0xf0 [ 990.220060] ? ksys_write+0x12d/0x260 [ 990.220395] ? __mutex_unlock_slowpath+0xe1/0x600 [ 990.220812] __do_sys_fork+0x8a/0xc0 [ 990.221130] ? kernel_thread+0xf0/0xf0 [ 990.221475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.221919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.222631] ? trace_hardirqs_on+0x5b/0x180 [ 990.223366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.224239] do_syscall_64+0x33/0x40 [ 990.224865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.225728] RIP: 0033:0x7f8f4b3d9b19 [ 990.226457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.229663] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 990.235269] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 990.236474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 990.237676] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.238515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.239115] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:40:55 executing program 2: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) semctl$SEM_STAT(0xffffffffffffffff, 0x4, 0x12, &(0x7f0000000000)=""/4096) semop(0x0, &(0x7f0000001000)=[{0x3, 0x8, 0x800}, {0x2, 0xfffc, 0x1000}, {0x3, 0x5d6b}, {0x0, 0x3, 0x800}, {0x0, 0x5, 0x800}, {0x3, 0x1, 0x1000}, {0x0, 0x9e35, 0x1800}, {0x2, 0x800, 0x1800}], 0x8) r0 = semget$private(0x0, 0x0, 0x406) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001040)={0x0, 0x0, 0x0}, &(0x7f0000001080)=0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000010c0)={{0x3, 0xee01, r2, 0xee00, 0xffffffffffffffff, 0x88, 0xe2b}, 0x7fff, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x8000}) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000001140)=""/10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000011c0)={0x2, &(0x7f0000001180)=[{0x0, 0x81, 0x6, 0x3}, {0x1, 0x87}]}, 0x10) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000001200)=""/174) r3 = semget$private(0x0, 0x1, 0x84) semop(r3, &(0x7f00000012c0)=[{0x2, 0x2}, {0x2, 0x5, 0x800}, {0x0, 0xffff}, {0x4, 0xfd9e, 0x1800}, {0x3, 0x2, 0x800}], 0x5) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000001300)=""/69) r4 = semget$private(0x0, 0x3, 0x404) semctl$SEM_STAT(r3, 0x3, 0x12, &(0x7f0000001380)) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000013c0)={{0x1, 0xee00, r2, r1, 0xffffffffffffffff, 0x194}, 0xffffffffffff0001, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x800}) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000001440)=""/71) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000014c0)=""/107) semop(r0, &(0x7f0000001540)=[{0x3, 0x8, 0x800}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000001580)=""/210) 06:40:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 28) 06:40:55 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x3, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:40:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 990.312581] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 990.312581] The task syz-executor.2 (7180) triggered the difference, watch for misbehavior. [ 990.324246] FAULT_INJECTION: forcing a failure. [ 990.324246] name failslab, interval 1, probability 0, space 0, times 0 [ 990.325292] CPU: 1 PID: 7179 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 990.325872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.326590] Call Trace: [ 990.326831] dump_stack+0x107/0x167 [ 990.327146] should_fail.cold+0x5/0xa [ 990.327474] ? create_object.isra.0+0x3a/0xa20 [ 990.327868] should_failslab+0x5/0x20 [ 990.328195] kmem_cache_alloc+0x5b/0x310 [ 990.328543] create_object.isra.0+0x3a/0xa20 [ 990.328921] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.329360] kmem_cache_alloc_trace+0x151/0x320 [ 990.329766] io_uring_alloc_task_context+0x99/0x6a0 [ 990.330215] ? io_import_iovec+0x1120/0x1120 [ 990.330596] ? lock_downgrade+0x6d0/0x6d0 [ 990.330960] ? do_raw_spin_lock+0x121/0x260 [ 990.331334] ? rwlock_bug.part.0+0x90/0x90 [ 990.331706] __io_uring_add_tctx_node+0x2c6/0x520 [ 990.332123] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 990.332582] ? alloc_fd+0x2e7/0x670 [ 990.332912] io_uring_setup+0x1f6a/0x2910 [ 990.333278] ? wait_for_completion_io+0x270/0x270 [ 990.333697] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 990.334166] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.334619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.335063] do_syscall_64+0x33/0x40 [ 990.335384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.335827] RIP: 0033:0x7fb639313b19 [ 990.336151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.337705] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 990.338370] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 990.338986] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 990.339592] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 990.340202] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 990.340809] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:41:09 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0xb, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:09 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:41:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 29) 06:41:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 1004.104729] FAULT_INJECTION: forcing a failure. [ 1004.104729] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.105729] CPU: 0 PID: 7203 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1004.106336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.107038] Call Trace: [ 1004.107272] dump_stack+0x107/0x167 [ 1004.107587] should_fail.cold+0x5/0xa [ 1004.107920] ? create_object.isra.0+0x3a/0xa20 [ 1004.108319] should_failslab+0x5/0x20 [ 1004.114521] kmem_cache_alloc+0x5b/0x310 [ 1004.114871] create_object.isra.0+0x3a/0xa20 [ 1004.115241] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1004.115670] kmem_cache_alloc+0x159/0x310 [ 1004.116028] vm_area_dup+0x78/0x290 [ 1004.116351] ? __lock_acquire+0xbb1/0x5b00 [ 1004.116727] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1004.117172] ? lock_acquire+0x197/0x470 [ 1004.117508] ? copy_process+0x25d6/0x7800 [ 1004.117867] ? vm_area_alloc+0x110/0x110 [ 1004.118208] ? find_held_lock+0x2c/0x110 [ 1004.118571] ? get_mm_exe_file+0x139/0x310 [ 1004.118929] ? lock_downgrade+0x6d0/0x6d0 [ 1004.119280] ? down_write_nested+0xe4/0x160 [ 1004.119643] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1004.120077] ? get_mm_exe_file+0x162/0x310 [ 1004.120434] copy_process+0x291b/0x7800 [ 1004.120771] ? __lock_acquire+0xbb1/0x5b00 [ 1004.121153] ? __cleanup_sighand+0xb0/0xb0 [ 1004.121515] ? lock_acquire+0x197/0x470 [ 1004.121857] ? find_held_lock+0x2c/0x110 [ 1004.122206] kernel_clone+0xe7/0x980 [ 1004.122539] ? lock_downgrade+0x6d0/0x6d0 [ 1004.122889] ? find_held_lock+0x2c/0x110 [ 1004.123232] ? create_io_thread+0xf0/0xf0 [ 1004.123586] ? ksys_write+0x12d/0x260 [ 1004.123919] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1004.124335] __do_sys_fork+0x8a/0xc0 [ 1004.124650] ? kernel_thread+0xf0/0xf0 [ 1004.124993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1004.125435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.125869] ? trace_hardirqs_on+0x5b/0x180 [ 1004.126241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.126681] do_syscall_64+0x33/0x40 [ 1004.126997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.127430] RIP: 0033:0x7f8f4b3d9b19 [ 1004.127750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.129312] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1004.129967] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1004.130587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.131195] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.131799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.132410] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1004.140789] FAULT_INJECTION: forcing a failure. [ 1004.140789] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.141762] CPU: 1 PID: 7208 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1004.142355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.143047] Call Trace: [ 1004.143280] dump_stack+0x107/0x167 [ 1004.143592] should_fail.cold+0x5/0xa [ 1004.143921] ? create_object.isra.0+0x3a/0xa20 [ 1004.144311] should_failslab+0x5/0x20 [ 1004.144636] kmem_cache_alloc+0x5b/0x310 [ 1004.144985] create_object.isra.0+0x3a/0xa20 [ 1004.145369] kmemleak_alloc_percpu+0xa0/0x100 [ 1004.145751] pcpu_alloc+0x4e2/0x1240 [ 1004.146080] __percpu_counter_init+0x10d/0x2d0 [ 1004.146898] io_uring_alloc_task_context+0xcc/0x6a0 [ 1004.147321] ? io_import_iovec+0x1120/0x1120 [ 1004.147694] ? lock_downgrade+0x6d0/0x6d0 [ 1004.148046] ? do_raw_spin_lock+0x121/0x260 [ 1004.148410] ? rwlock_bug.part.0+0x90/0x90 [ 1004.148769] __io_uring_add_tctx_node+0x2c6/0x520 [ 1004.149177] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1004.149616] ? alloc_fd+0x2e7/0x670 [ 1004.149931] io_uring_setup+0x1f6a/0x2910 [ 1004.150438] ? wait_for_completion_io+0x270/0x270 [ 1004.151252] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1004.152122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1004.153008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.153878] do_syscall_64+0x33/0x40 06:41:09 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r2, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="0904"]) 06:41:09 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 28) 06:41:09 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000100)=0x10000, 0x8, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(0xffffffffffffffff, r1, 0x0, 0x9bbb) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000180)=0x80000000, 0x4) 06:41:09 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e0, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000025) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="000828bd7000fbdbdf250200000024000380060007004e22000008000100020000000800030001000000060007004e21000008000500ff7f000030000280080004000700000014000100fc010000000000000000000000000001080004000900000008000600fc44f9a0f67d14000280060002004e22000008000700000800"/137], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) r4 = signalfd(r2, &(0x7f0000000400)={[0x8]}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x9a1c1000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000001b40)={0x260000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3c}, &(0x7f0000000500)=""/140, 0x8c, &(0x7f0000000440), &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r5}}, 0x58) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x77baea28dc8b509d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r6, r7, 0x1000) r8 = openat$cgroup_subtree(r4, &(0x7f0000007840), 0x2, 0x0) r9 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r9, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1004.162620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.163053] RIP: 0033:0x7fb639313b19 [ 1004.163369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007980)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000006c0)="2642e06d68ee60962753d0e4f8a850c18a0a40255f78619477542e06ebe3475c35fb5df9196807ab62f82c47aa40b9ca19332785cbddb3e360938c86b3bd5ddaeba4b16e09e38653afc010d559", 0x4d}], 0x1, &(0x7f0000000740), 0x0, 0x4081}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000800)="528bcb1af23c8c677f4c54d2af13a591c40d6b378fd7da57986e4845d5de6a8aecf846b3a09d61f5a4f53fc4f9da1880595ae671d477330d2faa4808ee4ba560a28e76d10e0cfa5437fb7028ba17f0208a38d436e0e6cf445ba0994d4b4b3a08e9b77d73eb7177af643a388f83efcc806c2b85b693487deb2450acbf71202fd255fda77671a99de37631d70226dd6806b85d389e3739a431730cc58ffec9b338a0f60e40e46f0bce1bbd38d5cf7a96feb9cb2e498b", 0xb5}, {&(0x7f00000008c0)="730256ced2e55589683c1a2bcc7c0c971abdd269b525d4f3779580f73ed12376f83538aac7158b903bf4e1a6e5654704cd2235104f79743ca65419579112ad6d830cd436ebcd3f13d496c127438a9528c69e667f8543f1572c0b0c9fa5efc505962f10bd458493d44e1a04455d1f0cb0602a34b2fe269efd77f583076bb985f338c44002a446", 0x86}, {&(0x7f0000000980)="5eaf198203dff3bc694673a941dc169dd26b0ab3a6e9e05bd6a09fc2f84e7577dc175483fad71e8bdf2b2f27a0dec3a2fac18e0b57351ffefd3cbe0e8b172d5be75123dc5179f91f88a1e4f277070e55ab335879f4bc48e0bb2afb04205553fcd192df2ddafd4335e3bdafece92086cdaf62ef4983bf714d129d4378ff15fccbd3a1b3cb57a2fd5f51850d1047faece2f34278ce0f8b6d74bf515d654bde23f0627b8f451ec3cf52152e592c6bd408f56182e2f40ba82871351096a777cc44219ffd69181b1ded93e38436cb62216d1abf7a09847885f321df076d2be83c1d9fd64bc669bf22ed8b610dc3a1a618205a02d7622048c3be1f690dbb05", 0xfc}], 0x3, &(0x7f0000000b40)=[@rights={{0x20, 0x1, 0x1, [r2, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x40, 0x850}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="024e2e595616c631c068d41be2c9742443720e1b1d49b6d3a501d066038457c0f531ec3a04d1cb4bddf9dd9ab8dbfe9f50c19e598d419ec3fbf09c671c7b4e64a0fe80abb23144cb3328", 0x4a}, {&(0x7f0000000c00)="b46bda9b7c60dcdded296a2bd46a673e91ed0ced742c1056cc6a44a2d9001ad5b7985cf22d2a35ca580db0e86bb349c3273df8cd9abbe407df7b6e58d8f6acc7e30e31d2c73db96f2e6da9612acc5375d71acb2b185389a3cf283b74c218ac077a565c329b529ecc27d41cd225d8212407fcad123213d2364e10ba4745d56d3b6deab46db14f29a14d8597ec90ccb195202c75829ce4d5edffd18122d2ca278c4fbcea2b6141f28451d623b864fb14124f55dd7cde904a9d997a5cc0a3015b353aa97f5003c41dfec1ba5f6f3a669a774652ccb3a732417480221871d9b532cc3da46c55", 0xe4}, {&(0x7f0000000d00)="3e27102e7bd5d665e0bde574d9f7dbfb42e56c54cb342edc7abc64c0775ca6196d03942fd5ab2ebbf79e0f89eefb7e4071b1a31e01b543cb68f6f18b4572a2672d3cb7b8fe50ad519489858f44f9cc5df6335ebb05a7c265302cb8d72bb7f260e9cd7982649ce0c44df9dd9377c8cbf9031caaf6ed077eda928e1b486607b587a3feded7e8d573e80a73624a8b1696633f33b355701c2423eeeed116f9a5faabc3811d4217230b426fce6bb6d76776", 0xaf}], 0x3, &(0x7f0000003480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x40, 0x2000c800}}, {{&(0x7f00000034c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004900)=[{&(0x7f0000003540)="cba8b77de04d3475e918376c823442d6e2aa2307f9a79c5b110fb678738a9ebe14fe0e24e667cbecd5d1a65bf75b8a1e15b3e71f0ab08cc3db39256fb92cf8a4c7f408e027525cb9e9e6afacfd00b2d770623c70b7f657f5b56cb9fc93f6580bee3feaab411c352d0989ffd7197d59d33405be696642f39f9cc60ec61b4d2ffdeadaac4d439f29df5bd2cea4df28202b02e9521ab1917279dd756cdd82316a0a806e7f0d1fb09ef067e64ec2fb91b4b9ab09a46c81927ba1d886d2c188047b8d4d3fd1ec60a72b20234213388d1dffb59bec88b5cbeea7dfeed74eb507eed0513e6604f87e2a1ee92024a5171966663fbde52f6faf1505c0", 0xf8}, {&(0x7f0000003640)="fbadb5f962daa734a8430205811daf", 0xf}, {&(0x7f0000003680)="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", 0xfb}, {&(0x7f0000003780)="625884b700dedb97707ff640d0545a66d92f6796c099502d25", 0x19}, {&(0x7f00000037c0)="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", 0x1000}, {&(0x7f00000047c0)="2119872a0e280bf957867f90b6be0f7b42270455d15da2cd0ead8ea7dac4f88177a4f6d07f8761ce0662b1a02a2d290117701d21fb7ab9055f75101b0281869eb3", 0x41}, {&(0x7f0000004840)="b5a5601e1bb5ef8c70b0c57455596d9cf5ef88891bfefad281e3ab75217a78ff6c0d02907a56616408debbfb54eb9278997144e02e3001c650db16bf1a269d4509b231c48f0728f97462c2830fb0dfbf2caaf6835c15fa60bd1bbc087c024b3e955a5d629b9264bf7ec346703e5e9988a4cb386609f5a72e76e8d1d60799cbf434e07c5618d0fa1f9ab722650ae7de4a622b026962a3eb7ba54fc809ebda9bf635720a7d692c1ee85d97eb6fb5fda5db6b7a13f9f6e098898d28cd15ca6b8d", 0xbf}], 0x7, &(0x7f0000004a40)=[@rights={{0x28, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r3, r4, r2]}}, @rights={{0x24, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0, 0x4048800}}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000004b00)="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", 0x1000}, {&(0x7f0000005b00)="2f3232d541ae8238841d93bd42b56c18d384e390bff628176bbdeb0ebda6ed6d8159b928d5893c4cc67b0a61ca16ba46ad925a39138038a01b0f58a4568501a83340b0e1aaadbb1b78a4f524428d483125a0faf6cc1427245762c32e0ae78f4160b49029fef67ab7e9ac276191f667b52b249c0dde063355b7c5a03950ae839c957320b517c5c0e12d2835f936ca9fee1ff198dc2a23bed6f2cab91af7324994a2960750b5ba809c5c9c59915529f7c8364aa8400f7e3902dc2ad531617a42f0cbf1bf3ff4bfc49b1dc73e423a", 0xcd}, {&(0x7f0000005c00)="ad145aed20c22cbce71382f4543573a459ca94396a2d6d358cc901e32cb7204e652568b77070f5045d9ed55d059fba525a2ee16899f7aabae7430b21f56062f53cacd0f763cc86835e0536a0fdac826080b1ece116e1ff9602fdc1a018aef3e11b317c76d4d514ad5c0bb455761ddc1a1c60a29236aaf8ba9f9de69d0d428a683029d9a7920703063d500087529ba440a923f610d978f62cc5d9f2c067cbeb930038aea4929e3e08979b29729b0e7f878cf1195966", 0xb5}, {&(0x7f0000005cc0)="6cb58fdf9b1798af37bea29dc85bc593eb3485f9b63d558711f4bb028c993541b881f11af42909b567653baa93153601182878dcc37ab09d65591c3855cfbc66babc661c7228d2f20b76fda8d717f14cf289b1f8dddca8fa8bc05d1e561165c12c6a533f32d4405982d7c9ddc9225c5577219a0b37e2465944fd7faa6b3fd758fdc6ff7a58842cb67f7bfb4179ce4718e307b390eca61744b3bc8b2848911aee3cf24e1f1903b7c1cd4de9976dc1b5bf482a42aa44549a52aab8e7e979fcab64d26068ae", 0xc4}], 0x4, &(0x7f0000007880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r0]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r8, r4, r9]}}], 0xe8, 0x8008001}}], 0x5, 0x20000840) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) [ 1004.164890] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1004.174753] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1004.175344] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1004.175933] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1004.176527] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1004.177116] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:41:09 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:09 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0x2, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(0x0) creat(&(0x7f0000000600)='./file1\x00', 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:41:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 30) 06:41:09 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 29) 06:41:09 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:09 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x400, 0x0) [ 1004.374623] FAULT_INJECTION: forcing a failure. [ 1004.374623] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.375670] CPU: 1 PID: 7230 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1004.376254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.376960] Call Trace: [ 1004.377193] dump_stack+0x107/0x167 [ 1004.377511] should_fail.cold+0x5/0xa [ 1004.377842] ? vm_area_dup+0x78/0x290 [ 1004.378172] should_failslab+0x5/0x20 [ 1004.378511] kmem_cache_alloc+0x5b/0x310 [ 1004.378871] vm_area_dup+0x78/0x290 [ 1004.379190] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1004.379589] ? lock_downgrade+0x6d0/0x6d0 [ 1004.379944] ? copy_page_range+0x24e9/0x3810 [ 1004.380334] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1004.380734] ? avc_has_extended_perms+0xf40/0xf40 [ 1004.381154] ? vm_area_alloc+0x110/0x110 [ 1004.381501] ? find_held_lock+0x2c/0x110 [ 1004.381865] ? selinux_vm_enough_memory+0x114/0x180 [ 1004.382309] ? selinux_sb_statfs+0x250/0x250 [ 1004.382702] ? percpu_counter_add_batch+0x8b/0x140 [ 1004.383128] ? __vm_enough_memory+0x184/0x360 [ 1004.383513] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1004.383957] copy_process+0x291b/0x7800 [ 1004.384331] ? __cleanup_sighand+0xb0/0xb0 [ 1004.384698] ? lock_acquire+0x197/0x470 [ 1004.385044] ? find_held_lock+0x2c/0x110 [ 1004.385395] kernel_clone+0xe7/0x980 [ 1004.385712] ? lock_downgrade+0x6d0/0x6d0 [ 1004.386065] ? find_held_lock+0x2c/0x110 [ 1004.386433] ? create_io_thread+0xf0/0xf0 [ 1004.386791] ? ksys_write+0x12d/0x260 [ 1004.387126] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1004.387539] __do_sys_fork+0x8a/0xc0 [ 1004.387854] ? kernel_thread+0xf0/0xf0 [ 1004.388201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1004.388642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.389080] ? trace_hardirqs_on+0x5b/0x180 [ 1004.389446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.389884] do_syscall_64+0x33/0x40 [ 1004.390199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.390645] RIP: 0033:0x7f8f4b3d9b19 [ 1004.390961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.392498] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1004.393137] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1004.393732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.394338] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.394939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:41:09 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0x7, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1004.395533] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1004.423293] FAULT_INJECTION: forcing a failure. [ 1004.423293] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.424335] CPU: 0 PID: 7235 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1004.424949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.425677] Call Trace: [ 1004.425939] dump_stack+0x107/0x167 [ 1004.426296] should_fail.cold+0x5/0xa [ 1004.426670] ? create_object.isra.0+0x3a/0xa20 [ 1004.427092] should_failslab+0x5/0x20 [ 1004.427418] kmem_cache_alloc+0x5b/0x310 [ 1004.427768] create_object.isra.0+0x3a/0xa20 [ 1004.428149] kmemleak_alloc_percpu+0xa0/0x100 [ 1004.428537] pcpu_alloc+0x4e2/0x1240 [ 1004.428877] __percpu_counter_init+0x10d/0x2d0 [ 1004.429270] io_uring_alloc_task_context+0xcc/0x6a0 [ 1004.429695] ? io_import_iovec+0x1120/0x1120 06:41:09 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r2, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="0904"]) [ 1004.430073] ? lock_downgrade+0x6d0/0x6d0 [ 1004.430447] ? do_raw_spin_lock+0x121/0x260 [ 1004.430813] ? rwlock_bug.part.0+0x90/0x90 [ 1004.431175] __io_uring_add_tctx_node+0x2c6/0x520 [ 1004.431581] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1004.432023] ? alloc_fd+0x2e7/0x670 [ 1004.438473] io_uring_setup+0x1f6a/0x2910 [ 1004.438828] ? wait_for_completion_io+0x270/0x270 [ 1004.439231] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1004.439671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1004.440112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.440547] do_syscall_64+0x33/0x40 [ 1004.440863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.441290] RIP: 0033:0x7fb639313b19 [ 1004.441606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.443148] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1004.443790] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1004.444388] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1004.444986] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1004.445584] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1004.446181] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:41:09 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:22 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:41:22 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xa, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:22 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/226, 0xe2}, {&(0x7f0000000000)=""/124, 0x7c}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000280)=""/114, 0x72}], 0x4, 0x400, 0x0) 06:41:22 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r2, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="0904"]) 06:41:22 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(0x0, 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:41:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 31) 06:41:22 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 30) 06:41:22 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:22 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xe, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1017.740566] FAULT_INJECTION: forcing a failure. [ 1017.740566] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.742735] CPU: 1 PID: 7262 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1017.743685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1017.745634] Call Trace: [ 1017.746266] dump_stack+0x107/0x167 [ 1017.747148] should_fail.cold+0x5/0xa [ 1017.748069] ? create_object.isra.0+0x3a/0xa20 [ 1017.749126] should_failslab+0x5/0x20 [ 1017.750024] kmem_cache_alloc+0x5b/0x310 [ 1017.751039] create_object.isra.0+0x3a/0xa20 [ 1017.752080] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1017.753255] kmem_cache_alloc+0x159/0x310 [ 1017.754223] vm_area_dup+0x78/0x290 [ 1017.755102] ? __lock_acquire+0xbb1/0x5b00 [ 1017.756130] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1017.757331] ? lock_acquire+0x197/0x470 [ 1017.758208] ? copy_process+0x25d6/0x7800 [ 1017.759138] ? vm_area_alloc+0x110/0x110 [ 1017.760033] ? find_held_lock+0x2c/0x110 [ 1017.760925] ? get_mm_exe_file+0x139/0x310 [ 1017.761849] ? lock_downgrade+0x6d0/0x6d0 [ 1017.762780] ? down_write_nested+0xe4/0x160 [ 1017.763733] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1017.764849] ? get_mm_exe_file+0x162/0x310 [ 1017.765787] copy_process+0x291b/0x7800 [ 1017.766687] ? __lock_acquire+0xbb1/0x5b00 [ 1017.767651] ? __cleanup_sighand+0xb0/0xb0 [ 1017.768581] ? lock_acquire+0x197/0x470 [ 1017.769457] ? find_held_lock+0x2c/0x110 [ 1017.770371] kernel_clone+0xe7/0x980 [ 1017.771201] ? lock_downgrade+0x6d0/0x6d0 [ 1017.772106] ? find_held_lock+0x2c/0x110 [ 1017.772996] ? create_io_thread+0xf0/0xf0 [ 1017.773899] ? ksys_write+0x12d/0x260 [ 1017.774688] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1017.775767] __do_sys_fork+0x8a/0xc0 [ 1017.776594] ? kernel_thread+0xf0/0xf0 [ 1017.777471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1017.778639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.779782] ? trace_hardirqs_on+0x5b/0x180 [ 1017.780742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.781884] do_syscall_64+0x33/0x40 [ 1017.782725] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1017.783860] RIP: 0033:0x7f8f4b3d9b19 [ 1017.784698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.788763] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1017.790441] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1017.791996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.793555] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.795124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.796691] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1017.801042] FAULT_INJECTION: forcing a failure. [ 1017.801042] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.803841] CPU: 1 PID: 7268 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1017.805348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1017.807191] Call Trace: [ 1017.807771] dump_stack+0x107/0x167 [ 1017.808567] should_fail.cold+0x5/0xa [ 1017.809386] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 1017.810542] should_failslab+0x5/0x20 [ 1017.811361] kmem_cache_alloc_trace+0x55/0x320 [ 1017.812357] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1017.813473] ? io_import_iovec+0x1120/0x1120 [ 1017.814477] ? lock_downgrade+0x6d0/0x6d0 [ 1017.815390] ? do_raw_spin_lock+0x121/0x260 [ 1017.816339] ? rwlock_bug.part.0+0x90/0x90 [ 1017.817271] __io_uring_add_tctx_node+0x2c6/0x520 [ 1017.818329] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1017.823523] ? alloc_fd+0x2e7/0x670 [ 1017.824346] io_uring_setup+0x1f6a/0x2910 [ 1017.825273] ? wait_for_completion_io+0x270/0x270 [ 1017.826327] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1017.827468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1017.828612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.829738] do_syscall_64+0x33/0x40 [ 1017.830574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1017.831697] RIP: 0033:0x7fb639313b19 [ 1017.832510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.836604] RSP: 002b:00007fb636868108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1017.838266] RAX: ffffffffffffffda RBX: 00007fb639427020 RCX: 00007fb639313b19 [ 1017.839831] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1017.841395] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1017.842978] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1017.844536] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:41:23 executing program 6: syz_emit_ethernet(0x0, 0x0, 0x0) 06:41:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(0x0, 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:41:23 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0x10, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:23 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 31) 06:41:23 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x3, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:23 executing program 6: syz_emit_ethernet(0x0, 0x0, 0x0) 06:41:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(0x0, 0x44) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 1017.997630] FAULT_INJECTION: forcing a failure. [ 1017.997630] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.999732] CPU: 0 PID: 7286 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1018.000435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1018.002276] Call Trace: [ 1018.002870] dump_stack+0x107/0x167 [ 1018.003666] should_fail.cold+0x5/0xa [ 1018.004501] ? vm_area_dup+0x78/0x290 [ 1018.005333] should_failslab+0x5/0x20 [ 1018.006158] kmem_cache_alloc+0x5b/0x310 [ 1018.007088] vm_area_dup+0x78/0x290 [ 1018.007887] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1018.008910] ? lock_downgrade+0x6d0/0x6d0 [ 1018.009811] ? copy_page_range+0x24e9/0x3810 [ 1018.010794] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1018.011809] ? avc_has_extended_perms+0xf40/0xf40 [ 1018.012864] ? vm_area_alloc+0x110/0x110 [ 1018.013743] ? find_held_lock+0x2c/0x110 [ 1018.014650] ? selinux_vm_enough_memory+0x114/0x180 [ 1018.015735] ? selinux_sb_statfs+0x250/0x250 [ 1018.016694] ? percpu_counter_add_batch+0x8b/0x140 [ 1018.017763] ? __vm_enough_memory+0x184/0x360 [ 1018.018755] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1018.019879] copy_process+0x291b/0x7800 [ 1018.020776] ? __cleanup_sighand+0xb0/0xb0 [ 1018.021699] ? lock_acquire+0x197/0x470 [ 1018.022584] ? find_held_lock+0x2c/0x110 [ 1018.023472] kernel_clone+0xe7/0x980 [ 1018.024281] ? lock_downgrade+0x6d0/0x6d0 [ 1018.025177] ? find_held_lock+0x2c/0x110 [ 1018.026058] ? create_io_thread+0xf0/0xf0 [ 1018.026977] ? ksys_write+0x12d/0x260 [ 1018.027813] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1018.028870] __do_sys_fork+0x8a/0xc0 [ 1018.029679] ? kernel_thread+0xf0/0xf0 [ 1018.030550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1018.031693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1018.032811] ? trace_hardirqs_on+0x5b/0x180 [ 1018.033748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1018.034883] do_syscall_64+0x33/0x40 [ 1018.035689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1018.036805] RIP: 0033:0x7f8f4b3d9b19 [ 1018.037612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1018.041671] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1018.043336] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1018.044885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1018.046449] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.047997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1018.049546] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:41:36 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 32) 06:41:36 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:41:36 executing program 6: syz_emit_ethernet(0x0, 0x0, 0x0) 06:41:36 executing program 2: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r2, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="0904"]) 06:41:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 32) 06:41:36 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0xb, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:36 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:41:36 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x6, 0x5b, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x1f, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "0249ea6845"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x20, 0x63}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x2, 0xfe}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xff, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x4, 0x91}}}}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x0, 0x4, 0xc0, 0x10, 0x80}, 0xd4, &(0x7f0000002400)={0x5, 0xf, 0xd4, 0x2, [@generic={0xbb, 0x10, 0x3, "d34697522fbef0b80cd5700013cbef470ee57fae7050ae7b78b58cdce3691af11c4ace6b4ad426338846902c7f6264df810110867a29ad096f02f14c64f98f3c630ea1b96e7129b9df7ccc83970cbfa85fbbabc1f3e6ebcb4b4fef1b30e0ce9c6487b1a7d27b483993a9093006948d22d30033b51a3bee1f24ff71472da22c7f9d058639c5ccba3f0d485f85dc991287c0b43bf2d3b9f4b485f698c27fe1e037e5b6bc3d1280b01d0e78960b6654e9abc4b5707fe001a3d0"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x9, 0xff00, 0x8000, [0xff000f, 0xffc0f0]}]}, 0x4, [{0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x820}}, {0x78, &(0x7f00000015c0)=@string={0x78, 0x3, "26cd7ad857be95d7f9a5ed49c94afdfea13364803a57e3d422c7c30cd2f88ad7bd9236f7b541ba2a86cc3c38bd92ecce582d966d1f146f9a9fa72ed22cb841a73fbc027be3e68ba3325657dd3e1d0d748b99bd2293f7f7e0d8a6375fdaecdf7c0c964c157d0e9ebf002819336ec183c5062ace6cc491"}}, {0xb0, &(0x7f0000002200)=ANY=[@ANYBLOB="b003c620a442ed4ea031b38ad1dbc72e9aa4a106cc8630763d693c4b6d367f935fc192d6145f33011e8ea2f183d7f324bee2135f40095c20df1ee17e15dfddcf25615c730a391c74997caf3d4049d8bafe72fe38bf30fc285bfa8ac9037d25338bca7ff52072fd7aa141e290240624ee7ed208a05dc45ee4831fa5df918c1b42e188639dce52ca6661b61371157c9c25026dc5078ecef1746b852729a8e586c2bf5162d503da3848fd1bfd4e23678469bdd37dbfb2c190dbea9cdf79e7d8c0b61b6cc61a0ccdb01bc31c383593ecda794bab8f7394ad25d8b22e915cf2445c60a7f9b9296aa08b"]}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001900)={0x14, &(0x7f00000017c0)={0x0, 0x11, 0xbb, {0xbb, 0xf, "7f450211215e5a03e563ed646c43794c4ced21f77bbbee6836cb7f3e37f2743c8b65e3e232542f0cc4a7431ab9f8d2d66a1445dc17eccff6af482b1419b2df3d37c1c7fadabc389add8a2c883eabe8eb5bb6160e8794bb18d255acb11608d547b67ee29ec5ca77138a26e704669bada34ba751a7d8f864e65471f97701dce8a89ab17013f668a12403f3f9c225598806505145ec5e7255981ce9f428c855928189014f9fc385b067ce48ed0780a1d7bddcf6e69845a3c3e455"}}, &(0x7f00000018c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a80)={0x1c, &(0x7f0000001940)={0x20, 0x16, 0x87, "13b1c5f4287027803481bd59e1a119a350de92fb5000a346154afecb0d1ec340ce5968c63f5b8e60ef1500f62e5a01fc8fbb73babaf60ecbc9e0cdb0a7ce27da628e30f2ab5ba78fb59c1dbe3134096a27b8ea1e7ac8396946c72544df8d53b493567f95c93b3593a7a00ba03bc50777f6d0d1793ca591b6650d62c9879641739c33e706be00e7"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x1f}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x3a3, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r2, 0x0, 0x70) fcntl$setown(r2, 0x8, r3) capset(&(0x7f0000001540)={0x20071026, r3}, &(0x7f0000001640)={0x52c8, 0x40, 0x401, 0x3, 0x6, 0xfffffffc}) syz_usb_control_io(r0, &(0x7f0000001cc0)={0x2c, &(0x7f0000001ac0)={0x20, 0x0, 0xe7, {0xe7, 0xb, "1d4ae901d4e4e2a743f061245f4698f98d0088dfbbfac6e21377077501f36a22dab1c9149e0512a7283703dc17c825a1ef3dbeefc0aff8ccd0eac54dbcd542180f28601e0166b3a3f64b7fe7696f38c882c668f726249daa62613f35c7b3e823b0740d38ff628d9b19b130fb9a2b7ad4a2c3ddcbba80fccba110d5c8ce8a44f6cc99d95de7b159080131f8911a347eef7b62c313177f54f24fe886ad4234ea69bbeaf1cec0fd260df06baf8fd4add12f6d947ef1ad48b9aed4cbef4eecc5141573e5b95499a4747e90c29d5ac4a24a709952c5264611f0c503cdd883613d6b74b5d24c150e"}}, &(0x7f0000001bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000001c00)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x3, 0x6}]}}, &(0x7f0000001c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe0, 0x18, 0x6, 0x5, "1257363d", "8ea8d52c"}}, &(0x7f0000001c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0x23, 0x4, 0x4, 0x1155, 0x3f}}}, &(0x7f0000002140)={0x84, &(0x7f0000001d00)={0x20, 0x15, 0x60, "56ee9d9d26c062d41f1cf3bfdff8030d454513d1522c30550d26a36dd05d59ea94eb6bf71c590d8013f08bb7059310137e54a360748b533babc51486e0dd898916e5f71791d7bef863441248de54a102984f069b5ab995befd1b81df1a3fe87e"}, &(0x7f0000001d80)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000001dc0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000001e00)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001e40)={0x20, 0x0, 0x8, {0x1c00, 0x80, [0xf0]}}, &(0x7f0000001e80)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000001ec0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000001f00)={0x40, 0xb, 0x2, "71b5"}, &(0x7f0000001f40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001f80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f0000001fc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000002000)={0x40, 0x19, 0x2, 'im'}, &(0x7f0000002040)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000002080)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000020c0)={0x40, 0x1e, 0x1, 0x32}, &(0x7f0000002100)={0x40, 0x21, 0x1, 0x5}}) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x5) [ 1031.388752] FAULT_INJECTION: forcing a failure. [ 1031.388752] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.391327] CPU: 0 PID: 7300 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1031.392828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.394659] Call Trace: [ 1031.395234] dump_stack+0x107/0x167 [ 1031.396032] should_fail.cold+0x5/0xa [ 1031.396879] ? create_object.isra.0+0x3a/0xa20 [ 1031.397877] should_failslab+0x5/0x20 [ 1031.398718] kmem_cache_alloc+0x5b/0x310 [ 1031.399610] create_object.isra.0+0x3a/0xa20 [ 1031.400569] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1031.401647] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure [ 1031.401683] kmem_cache_alloc+0x159/0x310 [ 1031.404951] vm_area_dup+0x78/0x290 [ 1031.405761] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1031.406793] ? lock_downgrade+0x6d0/0x6d0 [ 1031.407701] ? copy_page_range+0x24e9/0x3810 [ 1031.408686] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1031.409725] ? avc_has_extended_perms+0xf40/0xf40 [ 1031.410807] ? vm_area_alloc+0x110/0x110 [ 1031.411699] ? find_held_lock+0x2c/0x110 [ 1031.412592] ? selinux_vm_enough_memory+0x114/0x180 [ 1031.413687] ? selinux_sb_statfs+0x250/0x250 [ 1031.414670] ? percpu_counter_add_batch+0x8b/0x140 [ 1031.415750] ? __vm_enough_memory+0x184/0x360 [ 1031.416734] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1031.417862] copy_process+0x291b/0x7800 [ 1031.418767] ? __cleanup_sighand+0xb0/0xb0 [ 1031.419873] ? lock_acquire+0x197/0x470 [ 1031.420876] ? find_held_lock+0x2c/0x110 [ 1031.421563] kernel_clone+0xe7/0x980 [ 1031.422188] ? lock_downgrade+0x6d0/0x6d0 [ 1031.422895] ? find_held_lock+0x2c/0x110 [ 1031.423689] ? create_io_thread+0xf0/0xf0 [ 1031.424388] ? ksys_write+0x12d/0x260 [ 1031.425034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1031.425850] __do_sys_fork+0x8a/0xc0 [ 1031.426473] ? kernel_thread+0xf0/0xf0 [ 1031.427370] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1031.428515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1031.429709] ? trace_hardirqs_on+0x5b/0x180 [ 1031.430668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1031.431835] do_syscall_64+0x33/0x40 [ 1031.432659] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1031.433782] RIP: 0033:0x7f8f4b3d9b19 [ 1031.434608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.438676] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1031.440354] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1031.441906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1031.443473] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.445042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1031.446632] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1031.450931] FAULT_INJECTION: forcing a failure. [ 1031.450931] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.453408] CPU: 0 PID: 7310 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1031.457708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.459884] Call Trace: [ 1031.460586] dump_stack+0x107/0x167 [ 1031.461598] should_fail.cold+0x5/0xa [ 1031.462440] ? create_object.isra.0+0x3a/0xa20 [ 1031.463455] should_failslab+0x5/0x20 [ 1031.464286] kmem_cache_alloc+0x5b/0x310 [ 1031.465178] create_object.isra.0+0x3a/0xa20 [ 1031.466140] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1031.467262] kmem_cache_alloc_trace+0x151/0x320 [ 1031.468283] io_uring_alloc_task_context+0x4a3/0x6a0 [ 1031.469388] ? io_import_iovec+0x1120/0x1120 [ 1031.470347] ? lock_downgrade+0x6d0/0x6d0 [ 1031.471272] ? do_raw_spin_lock+0x121/0x260 [ 1031.472215] ? rwlock_bug.part.0+0x90/0x90 [ 1031.473143] __io_uring_add_tctx_node+0x2c6/0x520 [ 1031.474192] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1031.475344] ? alloc_fd+0x2e7/0x670 [ 1031.476148] io_uring_setup+0x1f6a/0x2910 [ 1031.477157] ? wait_for_completion_io+0x270/0x270 [ 1031.478379] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1031.479601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1031.480819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1031.482073] do_syscall_64+0x33/0x40 [ 1031.483075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1031.484364] RIP: 0033:0x7fb639313b19 06:41:36 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(0xffffffffffffffff, &(0x7f0000000540)=""/126, 0x7e) [ 1031.485181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.488913] RSP: 002b:00007fb636868108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1031.490593] RAX: ffffffffffffffda RBX: 00007fb639427020 RCX: 00007fb639313b19 [ 1031.491833] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1031.493142] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1031.494365] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1031.496069] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:41:36 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x44, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:36 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:36 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:36 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 33) 06:41:36 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(0xffffffffffffffff, &(0x7f0000000540)=""/126, 0x7e) 06:41:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 33) [ 1031.733523] FAULT_INJECTION: forcing a failure. [ 1031.733523] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1031.734752] CPU: 1 PID: 7333 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1031.736255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.738084] Call Trace: [ 1031.738677] dump_stack+0x107/0x167 [ 1031.739470] should_fail.cold+0x5/0xa [ 1031.740309] __alloc_pages_nodemask+0x182/0x600 [ 1031.741325] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1031.742668] alloc_pages_current+0x187/0x280 [ 1031.743633] allocate_slab+0x26f/0x380 [ 1031.744484] ___slab_alloc+0x470/0x700 [ 1031.745338] ? vm_area_dup+0x78/0x290 [ 1031.746172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1031.747333] ? obj_cgroup_charge+0xc6/0x490 [ 1031.748280] ? trace_hardirqs_on+0x5b/0x180 [ 1031.749215] ? vm_area_dup+0x78/0x290 [ 1031.750053] ? kmem_cache_alloc+0x301/0x310 [ 1031.750996] ? vm_area_dup+0x78/0x290 [ 1031.751820] kmem_cache_alloc+0x301/0x310 [ 1031.752728] vm_area_dup+0x78/0x290 [ 1031.753529] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1031.754555] ? lock_downgrade+0x6d0/0x6d0 [ 1031.755456] ? copy_page_range+0x24e9/0x3810 [ 1031.756433] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1031.757447] ? avc_has_extended_perms+0xf40/0xf40 [ 1031.758511] ? vm_area_alloc+0x110/0x110 [ 1031.759449] ? find_held_lock+0x2c/0x110 [ 1031.760343] ? selinux_vm_enough_memory+0x114/0x180 [ 1031.761430] ? selinux_sb_statfs+0x250/0x250 [ 1031.762390] ? percpu_counter_add_batch+0x8b/0x140 [ 1031.763473] ? __vm_enough_memory+0x184/0x360 [ 1031.764453] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1031.765588] copy_process+0x291b/0x7800 [ 1031.766497] ? __cleanup_sighand+0xb0/0xb0 [ 1031.767426] ? lock_acquire+0x197/0x470 [ 1031.768299] ? find_held_lock+0x2c/0x110 [ 1031.769184] kernel_clone+0xe7/0x980 [ 1031.769993] ? lock_downgrade+0x6d0/0x6d0 [ 1031.770901] ? find_held_lock+0x2c/0x110 [ 1031.771781] ? create_io_thread+0xf0/0xf0 [ 1031.772688] ? ksys_write+0x12d/0x260 [ 1031.773531] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1031.774600] __do_sys_fork+0x8a/0xc0 [ 1031.775412] ? kernel_thread+0xf0/0xf0 [ 1031.776272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1031.777412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1031.778540] ? trace_hardirqs_on+0x5b/0x180 [ 1031.779480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1031.780599] do_syscall_64+0x33/0x40 [ 1031.781405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1031.782537] RIP: 0033:0x7f8f4b3d9b19 [ 1031.783346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.787411] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1031.789073] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1031.790635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1031.792186] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.793735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1031.795306] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1031.805717] FAULT_INJECTION: forcing a failure. [ 1031.805717] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.808311] CPU: 1 PID: 7331 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1031.809796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.811633] Call Trace: [ 1031.812210] dump_stack+0x107/0x167 [ 1031.812995] should_fail.cold+0x5/0xa [ 1031.813825] ? io_wq_create+0xeb/0xc00 [ 1031.814679] should_failslab+0x5/0x20 [ 1031.815511] __kmalloc+0x72/0x390 [ 1031.816263] io_wq_create+0xeb/0xc00 [ 1031.817084] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1031.818193] ? io_import_iovec+0x1120/0x1120 [ 1031.819168] ? io_apoll_task_func+0x2d0/0x2d0 [ 1031.820138] ? __io_req_find_next+0x300/0x300 [ 1031.821120] ? do_raw_spin_lock+0x121/0x260 [ 1031.822075] ? rwlock_bug.part.0+0x90/0x90 [ 1031.823017] __io_uring_add_tctx_node+0x2c6/0x520 [ 1031.824082] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1031.825238] ? alloc_fd+0x2e7/0x670 [ 1031.826049] io_uring_setup+0x1f6a/0x2910 [ 1031.826976] ? wait_for_completion_io+0x270/0x270 [ 1031.828030] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1031.829160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1031.830296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1031.831452] do_syscall_64+0x33/0x40 [ 1031.832273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1031.833392] RIP: 0033:0x7fb639313b19 [ 1031.834199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.838270] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1031.839950] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1031.841497] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1031.843061] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1031.844643] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1031.846214] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:41:51 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x3, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:51 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:41:51 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x3f0, 0x10, 0x10, 0x70bd28, 0x25dfdbfb, {0x1e}, [@generic, @nested={0x236, 0x6e, 0x0, 0x1, [@generic="3f22c4361277d3bd05709eb29a701fe5d20d830ba497fd1804f43bd8c0a8e03d3ba209f5000b521c21932c1c5af08178ba47c6281ba9c3d884ba3c5333404f92f13a031ccdd60e746043f3cb595e49a50d15f81280349de800b67cf7953dea31df2e74c7d743a12058b3cc272e2cfacd9fc8ad3069aefb23fbb5211d0fab574092fc1a51ac7ca095849d0ac9326a9de1258eb851a45aa8eae7ada542725a20e1368fc073475c5fa08e7e3f3b72d560b761f34ba4c6dcfa11fdab34b74d144e8037d9f3", @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@broadcast}, @generic="5f667cbe1befdfe8b0cfb9974bf1b180b7af6b88477982eebb2e05614c91be9dd7f100aabf89e220618afb2d58378bbf5441549689ef4572cfdce25c762debb3c512b0923f53ae1f99df031189d2041f9f15164327fd0037cfacd74dd20f6bad035e8a09daeb737868b4ec645672b232898814eff56fb4474d128e23cf875643e8a3f72f7ce3785361dbd73d402edcb4d5834216caea915366db1aa3b66a9d2a46a4fe2c60d9fa4205", @typed={0x4, 0x10}, @generic="3c928e9328682642bd5e7b89a6b74263f9ae9d8a0dcdb11f6421fc1606e99912f56eb7bf7d431f4cbcd26318c1c4fb7cf3d20880d89130d2527eb050ed6dd16040ffaf98010e24813b50eb19d8f2b1e7ce7b3cb6a73ee982675d3153386a351b928df4e02b7d38735976b2e082d05bbf26ea08c40e7c1feff81ef1094c2b812111bc666e0be400400da492d5fd654d04500798dcfd5d38ac0df7417b6405c9a4876be2a0810114762d19", @typed={0x6, 0x96, 0x0, 0x0, @str='}.'}, @typed={0x8, 0x51, 0x0, 0x0, @u32}]}, @nested={0x20, 0x8d, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @uid}, @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0x15d, 0x44, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}, @generic="9c8d014e0765d8790e9b268444d49d2b875486c06c1585303feff0f64a929bb5b042402bf64e33d26dfc1829a1d2fccaeaad8bc516bfedf5e20a5c4fc8f40af4074c99926c4e0ad796abc456fdc91cb45373da9814e8f5f21bf4a5bc7788de5469d5581901f5c925c0993fd0a149965ab51741d4271f9e310e777e5cee03b1f8427a1c539bede0f24b1e9c159539eb9950ec895cf0af", @typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x16}, @typed={0x8, 0x68, 0x0, 0x0, @fd=r1}, @generic="a0edf7090dd6c92833da74d7bd433d3006ae790375560a4b9e1105aa508a3bbcf9d5db4cc4dd6fa3781aa5bc3cb8af4b79d65a81ef4fc29372b636a826bb183072034a2d3e56b9e5bb991adfa4cc3999b93f55283fdceee1ffe3d08580e79a66578bc7ba677c409f12cccf2d02edf901eecb1058a755bc3066253310f04923924893ac246e56fd667e17c1b86cfdb4696511c02fbdbac4b5899af8", @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x26, 0x0, 0x0, @u32=0xfffffff8}]}, @generic="13397624c05e4cd72ab958372cfc83b0cc40195d813a2fa38a1a1717895fe2d2a28f8a9f"]}, 0x3f0}, 0x1, 0x0, 0x0, 0x24008884}, 0x4040801) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1520774a) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xbe}]}, 0x2c}}, 0x2000005) 06:41:52 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}]}}, @info_reply}}}}, 0x0) 06:41:52 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x44, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:52 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 34) 06:41:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(0xffffffffffffffff, &(0x7f0000000540)=""/126, 0x7e) 06:41:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 34) [ 1046.900071] FAULT_INJECTION: forcing a failure. [ 1046.900071] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.901089] CPU: 0 PID: 7353 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1046.901686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1046.902406] Call Trace: [ 1046.902667] dump_stack+0x107/0x167 [ 1046.903012] should_fail.cold+0x5/0xa [ 1046.903366] ? create_object.isra.0+0x3a/0xa20 [ 1046.903756] should_failslab+0x5/0x20 [ 1046.904083] kmem_cache_alloc+0x5b/0x310 [ 1046.904432] create_object.isra.0+0x3a/0xa20 [ 1046.904812] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1046.905249] __kmalloc+0x16e/0x390 [ 1046.905564] io_wq_create+0xeb/0xc00 [ 1046.905892] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1046.906324] ? io_import_iovec+0x1120/0x1120 [ 1046.906720] ? io_apoll_task_func+0x2d0/0x2d0 [ 1046.907100] ? __io_req_find_next+0x300/0x300 [ 1046.907481] ? do_raw_spin_lock+0x121/0x260 [ 1046.907852] ? rwlock_bug.part.0+0x90/0x90 [ 1046.908215] __io_uring_add_tctx_node+0x2c6/0x520 [ 1046.908624] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1046.909065] ? alloc_fd+0x2e7/0x670 [ 1046.909384] io_uring_setup+0x1f6a/0x2910 [ 1046.909741] ? wait_for_completion_io+0x270/0x270 [ 1046.910148] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1046.910594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1046.911065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1046.911503] do_syscall_64+0x33/0x40 [ 1046.911819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1046.912250] RIP: 0033:0x7fb639313b19 06:41:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, 0x0, 0x0) [ 1046.912567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1046.914105] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1046.914753] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1046.919005] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1046.919601] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1046.920198] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1046.920794] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1046.940023] FAULT_INJECTION: forcing a failure. [ 1046.940023] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.941055] CPU: 0 PID: 7357 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1046.941633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1046.942336] Call Trace: [ 1046.942564] dump_stack+0x107/0x167 [ 1046.942893] should_fail.cold+0x5/0xa [ 1046.943219] ? create_object.isra.0+0x3a/0xa20 [ 1046.943608] should_failslab+0x5/0x20 [ 1046.943932] kmem_cache_alloc+0x5b/0x310 [ 1046.944286] create_object.isra.0+0x3a/0xa20 [ 1046.944664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1046.945098] kmem_cache_alloc+0x159/0x310 [ 1046.945459] vm_area_dup+0x78/0x290 [ 1046.945777] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1046.946173] ? lock_downgrade+0x6d0/0x6d0 [ 1046.946526] ? copy_page_range+0x24e9/0x3810 [ 1046.946926] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1046.947324] ? avc_has_extended_perms+0xf40/0xf40 [ 1046.947744] ? vm_area_alloc+0x110/0x110 [ 1046.948090] ? find_held_lock+0x2c/0x110 [ 1046.948446] ? selinux_vm_enough_memory+0x114/0x180 [ 1046.948876] ? selinux_sb_statfs+0x250/0x250 [ 1046.949256] ? percpu_counter_add_batch+0x8b/0x140 [ 1046.949679] ? __vm_enough_memory+0x184/0x360 [ 1046.950064] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1046.950505] copy_process+0x291b/0x7800 [ 1046.950894] ? __cleanup_sighand+0xb0/0xb0 [ 1046.951260] ? lock_acquire+0x197/0x470 [ 1046.951605] ? find_held_lock+0x2c/0x110 [ 1046.951963] kernel_clone+0xe7/0x980 [ 1046.952283] ? lock_downgrade+0x6d0/0x6d0 [ 1046.952637] ? find_held_lock+0x2c/0x110 [ 1046.952984] ? create_io_thread+0xf0/0xf0 [ 1046.953341] ? ksys_write+0x12d/0x260 [ 1046.953673] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1046.954090] __do_sys_fork+0x8a/0xc0 [ 1046.954407] ? kernel_thread+0xf0/0xf0 [ 1046.954768] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1046.955217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1046.955653] ? trace_hardirqs_on+0x5b/0x180 [ 1046.956022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1046.956459] do_syscall_64+0x33/0x40 [ 1046.956776] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1046.957210] RIP: 0033:0x7f8f4b3d9b19 [ 1046.957528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1046.959089] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1046.959731] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1046.960333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1046.960935] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.961536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1046.962135] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:41:52 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}]}}, @info_reply}}}}, 0x0) 06:41:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast1, 0xfffffff8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)="ca4be8efcf874f55f3e492901ca14312a6023dee0b0731619912d32e3fdee16146327edb04932c5b63f3a4c6508628c81eaab49f159c5f143a6c98900eccdbcab1875ace7c084e06f6fec0dacab19c8a51c1f6421e0fea6ef863926cf1f9254cf7c792d017019488a4d2edf5fece43b6d085435b154bba9fc95d0025f1bed1b9e11120341d551232a5a3aeac2f8b3752ed67ea2a932523acf30aaa55a2b056d6ae20c915070dc579cc6f19943b944e2c", 0xb0}, {&(0x7f0000000140)="019785417415283757617b1dd03e086a968ded6d3ce7132428d0e8e97bcbd823274cefbeb0d6a5b6d1e22549ddb3f20ac502adbfea68944b105d4fee07c6225c6836c36408c26f896d2c6814a7bd82da37b9fc1f62ee6901000de8f8129778b33f7b5f051a1a689126fb88424bdc5dfb", 0x70}, {&(0x7f0000000340)="e81fb9c4d877c1c419cba7cc3dd2d0e29d0496d5e13fdb39767e88e4202033939e78b6dd10785387293efd4df835c534f6eec60fe07ce3008fc22ad4d003e1891e175ffaf0545ba360cee1214d56f2360676e28473d80d3df1fef2d4e1b6da79e50ec4c6073668f5502fd4165eaddca008dffefb31ed8b1425162804a3901dcb22bbc38b144bfd3b8ef58b855ffe7ce1af0d14a22031b6a518d8d49e7adc4b5cbc03b24ab31f959b03b68e309866ae2a37d35342476570977c2df6174112ac4dbcf022a170d8d8cdc76f139f732df4a00152bea54206cc5c17c1e9c019ab965ba5f235231a6445d2ce", 0xe9}, {&(0x7f0000000200)="2164623520a7df947953890b1f894fba94d908e350a043796dad383dc19e70a573f7bc264a496d4a487223de10b218b7cf18abe01395fa4628073ed6087f", 0x3e}], 0x4}, 0x10000850) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='g', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)="aa", 0x1}], 0x1}}], 0x2, 0x1) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffffc9, 0xcd08, 0x0, 0xfffffffffffffed7) 06:41:52 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x2c, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:41:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x810) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x2, 0x9, 0x5, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0x3}, [@generic="1fd7ff14ef271b5330173bb7e06000b2b6e93e90563007f8bccfab6a09b795aa02abcda82d7ca3fe89c014066e"]}, 0x44}, 0x1, 0x0, 0x0, 0x20008009}, 0x40) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x65a1, &(0x7f0000000000)={0x0, 0xf54c, 0x1, 0x1, 0x55}) syz_io_uring_setup(0xb1d, &(0x7f00000003c0)={0x0, 0x1470, 0x0, 0x2, 0x351}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000440)) ioctl$FICLONE(r4, 0x40049409, r5) ioctl$TIOCNXCL(r3, 0x540d) 06:41:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, 0x0, 0x0) 06:41:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 35) 06:41:52 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}]}}, @info_reply}}}}, 0x0) [ 1047.091619] FAULT_INJECTION: forcing a failure. [ 1047.091619] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.092636] CPU: 1 PID: 7378 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1047.093219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1047.093917] Call Trace: [ 1047.094149] dump_stack+0x107/0x167 [ 1047.094460] should_fail.cold+0x5/0xa [ 1047.094804] ? io_wq_create+0x6ef/0xc00 [ 1047.095157] should_failslab+0x5/0x20 [ 1047.095487] kmem_cache_alloc_node_trace+0x59/0x340 [ 1047.095912] io_wq_create+0x6ef/0xc00 [ 1047.096254] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1047.096683] ? io_import_iovec+0x1120/0x1120 [ 1047.097067] ? io_apoll_task_func+0x2d0/0x2d0 [ 1047.097446] ? __io_req_find_next+0x300/0x300 [ 1047.097828] ? do_raw_spin_lock+0x121/0x260 [ 1047.098213] ? rwlock_bug.part.0+0x90/0x90 [ 1047.098576] __io_uring_add_tctx_node+0x2c6/0x520 [ 1047.099004] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1047.099465] ? alloc_fd+0x2e7/0x670 [ 1047.099786] io_uring_setup+0x1f6a/0x2910 [ 1047.100145] ? wait_for_completion_io+0x270/0x270 [ 1047.100566] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1047.101014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1047.101472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1047.101913] do_syscall_64+0x33/0x40 [ 1047.102230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1047.102701] RIP: 0033:0x7fb639313b19 [ 1047.103023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1047.104581] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1047.105229] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1047.105841] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1047.106443] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1047.107081] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1047.107697] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1063.147912] FAULT_INJECTION: forcing a failure. [ 1063.147912] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.148990] CPU: 1 PID: 7412 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1063.149566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.150335] Call Trace: [ 1063.150570] dump_stack+0x107/0x167 [ 1063.150945] should_fail.cold+0x5/0xa [ 1063.151293] ? vm_area_dup+0x78/0x290 [ 1063.151642] should_failslab+0x5/0x20 [ 1063.152029] kmem_cache_alloc+0x5b/0x310 [ 1063.152653] vm_area_dup+0x78/0x290 [ 1063.153531] ? copy_page_range+0x24e9/0x3810 [ 1063.154622] ? vm_area_alloc+0x110/0x110 [ 1063.155569] ? find_held_lock+0x2c/0x110 [ 1063.156528] ? vm_iomap_memory+0x190/0x190 [ 1063.157512] ? __vma_link_rb+0x540/0x700 [ 1063.158480] copy_process+0x291b/0x7800 [ 1063.159447] ? __cleanup_sighand+0xb0/0xb0 [ 1063.160437] ? lock_acquire+0x197/0x470 [ 1063.161368] ? find_held_lock+0x2c/0x110 [ 1063.162309] kernel_clone+0xe7/0x980 [ 1063.163233] ? lock_downgrade+0x6d0/0x6d0 [ 1063.164186] ? find_held_lock+0x2c/0x110 [ 1063.165121] ? create_io_thread+0xf0/0xf0 [ 1063.166084] ? ksys_write+0x12d/0x260 [ 1063.166998] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1063.168131] __do_sys_fork+0x8a/0xc0 [ 1063.168995] ? kernel_thread+0xf0/0xf0 [ 1063.169916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1063.171127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.172298] ? trace_hardirqs_on+0x5b/0x180 [ 1063.173311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.174481] do_syscall_64+0x33/0x40 [ 1063.175366] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1063.176540] RIP: 0033:0x7f8f4b3d9b19 [ 1063.177423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.181728] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1063.183485] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1063.185174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1063.186844] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.188449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1063.190129] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:42:08 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x30, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:08 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:42:08 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x3, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:08 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, 0x0, 0x0) 06:42:08 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 35) 06:42:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 36) 06:42:08 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x0, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:08 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f00000003c0)={0xf7, 0x5, 0x0, 0x8, 0x3f, 0x5}) 06:42:08 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/43, 0x2b, 0x40000100, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @empty}, 0x1c) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:42:08 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x0, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:08 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0/../file0\x00'}) r3 = getpid() r4 = pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 06:42:08 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x60, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:08 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) (fail_nth: 1) [ 1063.249142] FAULT_INJECTION: forcing a failure. [ 1063.249142] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.251469] CPU: 0 PID: 7415 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1063.252296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.253153] Call Trace: [ 1063.253534] dump_stack+0x107/0x167 [ 1063.253962] should_fail.cold+0x5/0xa [ 1063.254760] ? create_object.isra.0+0x3a/0xa20 [ 1063.255232] should_failslab+0x5/0x20 [ 1063.255685] kmem_cache_alloc+0x5b/0x310 [ 1063.256105] ? io_wq_create+0x114/0xc00 [ 1063.257045] create_object.isra.0+0x3a/0xa20 [ 1063.257474] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1063.258440] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1063.259658] io_wq_create+0x6ef/0xc00 [ 1063.260521] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1063.261738] ? io_import_iovec+0x1120/0x1120 [ 1063.263168] ? io_apoll_task_func+0x2d0/0x2d0 [ 1063.264169] ? __io_req_find_next+0x300/0x300 [ 1063.265150] ? do_raw_spin_lock+0x121/0x260 [ 1063.266097] ? rwlock_bug.part.0+0x90/0x90 [ 1063.267045] __io_uring_add_tctx_node+0x2c6/0x520 [ 1063.268104] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1063.269249] ? alloc_fd+0x2e7/0x670 [ 1063.270060] io_uring_setup+0x1f6a/0x2910 [ 1063.270986] ? wait_for_completion_io+0x270/0x270 [ 1063.272040] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1063.273172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1063.274315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.275459] do_syscall_64+0x33/0x40 [ 1063.276278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1063.277405] RIP: 0033:0x7fb639313b19 [ 1063.278217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.282284] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1063.283963] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1063.285522] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1063.287094] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1063.288633] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1063.290195] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:42:08 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x8e, 0xff}) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:42:08 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 36) 06:42:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 37) [ 1063.400434] FAULT_INJECTION: forcing a failure. [ 1063.400434] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.403538] CPU: 1 PID: 7428 Comm: syz-executor.3 Not tainted 5.10.225 #1 [ 1063.405125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.407079] Call Trace: [ 1063.407655] dump_stack+0x107/0x167 [ 1063.408517] should_fail.cold+0x5/0xa [ 1063.409402] ? fat_parse_long.constprop.0+0x8e9/0xb50 [ 1063.410576] should_failslab+0x5/0x20 [ 1063.411532] kmem_cache_alloc+0x5b/0x310 [ 1063.412471] fat_parse_long.constprop.0+0x8e9/0xb50 [ 1063.413608] ? filldir+0x4c2/0x6e0 [ 1063.414438] __fat_readdir+0x87b/0x1490 [ 1063.415391] ? fat_search_long+0xd90/0xd90 [ 1063.416396] ? __fdget_pos+0xf1/0x190 [ 1063.417297] ? down_read_killable+0x112/0x460 [ 1063.418327] ? inode_security+0x107/0x140 [ 1063.419377] ? down_read_interruptible+0x460/0x460 [ 1063.420549] ? fsnotify_perm.part.0+0x22d/0x620 [ 1063.421619] iterate_dir+0x584/0x710 [ 1063.422488] __x64_sys_getdents+0x13a/0x2c0 [ 1063.423502] ? __ia32_sys_old_readdir+0x1d0/0x1d0 [ 1063.424626] ? fput_many+0x2f/0x1a0 [ 1063.425469] ? filldir64+0x6d0/0x6d0 [ 1063.426338] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1063.427542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.428814] do_syscall_64+0x33/0x40 [ 1063.429633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1063.430857] RIP: 0033:0x7f4345bd6b19 [ 1063.431666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.435973] RSP: 002b:00007f434314c188 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1063.437758] RAX: ffffffffffffffda RBX: 00007f4345ce9f60 RCX: 00007f4345bd6b19 [ 1063.439384] RDX: 000000000000007e RSI: 0000000020000540 RDI: 0000000000000005 [ 1063.441043] RBP: 00007f434314c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.442669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.444333] R13: 00007fff54553adf R14: 00007f434314c300 R15: 0000000000022000 [ 1063.490178] FAULT_INJECTION: forcing a failure. [ 1063.490178] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.492267] CPU: 0 PID: 7437 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1063.492958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.493944] Call Trace: [ 1063.494527] dump_stack+0x107/0x167 [ 1063.495341] should_fail.cold+0x5/0xa [ 1063.496185] ? create_object.isra.0+0x3a/0xa20 [ 1063.497188] should_failslab+0x5/0x20 [ 1063.498022] kmem_cache_alloc+0x5b/0x310 [ 1063.498977] create_object.isra.0+0x3a/0xa20 [ 1063.499940] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1063.501057] kmem_cache_alloc+0x159/0x310 [ 1063.501973] vm_area_dup+0x78/0x290 [ 1063.502784] ? copy_page_range+0x24e9/0x3810 [ 1063.503782] ? vm_area_alloc+0x110/0x110 [ 1063.504664] ? find_held_lock+0x2c/0x110 [ 1063.505553] ? vm_iomap_memory+0x190/0x190 [ 1063.506487] ? __vma_link_rb+0x540/0x700 [ 1063.507391] copy_process+0x291b/0x7800 [ 1063.508288] ? __cleanup_sighand+0xb0/0xb0 [ 1063.509215] ? lock_acquire+0x197/0x470 [ 1063.510089] ? find_held_lock+0x2c/0x110 [ 1063.510991] kernel_clone+0xe7/0x980 [ 1063.511800] ? lock_downgrade+0x6d0/0x6d0 [ 1063.512697] ? find_held_lock+0x2c/0x110 [ 1063.513581] ? create_io_thread+0xf0/0xf0 [ 1063.514484] ? ksys_write+0x12d/0x260 [ 1063.515335] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1063.516395] __do_sys_fork+0x8a/0xc0 [ 1063.517208] ? kernel_thread+0xf0/0xf0 [ 1063.518069] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1063.519233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.520355] ? trace_hardirqs_on+0x5b/0x180 [ 1063.521293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.522416] do_syscall_64+0x33/0x40 [ 1063.523237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1063.524359] RIP: 0033:0x7f8f4b3d9b19 [ 1063.525167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.529223] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1063.530888] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1063.532441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1063.533996] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.535561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1063.537113] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1063.620724] FAULT_INJECTION: forcing a failure. [ 1063.620724] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.621980] CPU: 1 PID: 7440 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1063.622629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.623525] Call Trace: [ 1063.623836] dump_stack+0x107/0x167 [ 1063.624192] should_fail.cold+0x5/0xa [ 1063.624566] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1063.625090] should_failslab+0x5/0x20 [ 1063.625462] kmem_cache_alloc_trace+0x55/0x320 [ 1063.625948] __io_uring_add_tctx_node+0x15c/0x520 [ 1063.626413] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1063.627018] ? alloc_fd+0x2e7/0x670 [ 1063.627413] io_uring_setup+0x1f6a/0x2910 [ 1063.628414] ? wait_for_completion_io+0x270/0x270 [ 1063.628952] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1063.629482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1063.630755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.631971] do_syscall_64+0x33/0x40 [ 1063.632849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1063.634034] RIP: 0033:0x7fb639313b19 [ 1063.634910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.639191] RSP: 002b:00007fb636868108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1063.640974] RAX: ffffffffffffffda RBX: 00007fb639427020 RCX: 00007fb639313b19 [ 1063.642594] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1063.644263] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1063.645949] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1063.647573] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:42:22 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x300, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:22 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/254, 0xfe}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/249, 0xf9}], 0x5, 0x0, 0x0) 06:42:22 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x0, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:22 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 37) 06:42:22 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) (fail_nth: 2) 06:42:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 38) 06:42:22 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:42:22 executing program 2: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x80, 0x7, 0x3, 0x0, 0x3, 0x92000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x5}, 0x4, 0x7, 0x10001, 0x4, 0x9, 0xfffff703, 0x8, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x14e8, &(0x7f0000000380), &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_coalesce={0x6}}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000740)="244047756ee150ef57e86a24e69dc6039cab8dda2bbb1398fe50f5e4ee0b6ce65886e60cb29e7fb30a7a9a89f35f0c9816f6fa30c8f2514f2f4a461415340651d3fcbfeb37e733372f62601df55ff20d6a8d893df5ff2ac9ea7c36aad78edaa3f2df942eb814171ddf173fddc0df9a49cdd3cb3055132208dff6c2a5b919a3385cbaf01fd763f1", 0x87, 0x4048454, 0x1, {0x0, r4}}, 0x3f) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) [ 1077.254509] FAULT_INJECTION: forcing a failure. [ 1077.254509] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.255552] CPU: 0 PID: 7452 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1077.256149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.256866] Call Trace: [ 1077.257104] dump_stack+0x107/0x167 [ 1077.257429] should_fail.cold+0x5/0xa [ 1077.257767] ? vm_area_dup+0x78/0x290 [ 1077.258105] should_failslab+0x5/0x20 [ 1077.258440] kmem_cache_alloc+0x5b/0x310 [ 1077.258802] vm_area_dup+0x78/0x290 [ 1077.259138] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1077.259546] ? lock_downgrade+0x6d0/0x6d0 [ 1077.259909] ? copy_page_range+0x24e9/0x3810 [ 1077.260289] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1077.260756] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1077.261164] ? avc_has_extended_perms+0xf40/0xf40 [ 1077.261583] ? copy_process+0x2b60/0x7800 [ 1077.261949] ? vm_area_alloc+0x110/0x110 [ 1077.262333] ? find_held_lock+0x2c/0x110 [ 1077.262805] ? selinux_vm_enough_memory+0x114/0x180 [ 1077.263257] ? selinux_sb_statfs+0x250/0x250 [ 1077.263632] ? up_write+0x191/0x550 [ 1077.263947] ? percpu_counter_add_batch+0x8b/0x140 [ 1077.264377] ? __vm_enough_memory+0x184/0x360 [ 1077.264762] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1077.265200] copy_process+0x291b/0x7800 [ 1077.265857] ? __cleanup_sighand+0xb0/0xb0 [ 1077.266229] ? lock_acquire+0x197/0x470 [ 1077.266574] ? find_held_lock+0x2c/0x110 [ 1077.266935] kernel_clone+0xe7/0x980 [ 1077.267259] ? lock_downgrade+0x6d0/0x6d0 [ 1077.267608] ? find_held_lock+0x2c/0x110 [ 1077.267954] ? create_io_thread+0xf0/0xf0 [ 1077.268312] ? ksys_write+0x12d/0x260 [ 1077.268647] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1077.269067] __do_sys_fork+0x8a/0xc0 [ 1077.269387] ? kernel_thread+0xf0/0xf0 [ 1077.269732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.270176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.270612] ? trace_hardirqs_on+0x5b/0x180 [ 1077.270991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.271429] do_syscall_64+0x33/0x40 [ 1077.271745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.272184] RIP: 0033:0x7f8f4b3d9b19 [ 1077.272501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.274030] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1077.274671] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1077.275279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1077.275879] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.276476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1077.277079] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1077.300558] FAULT_INJECTION: forcing a failure. [ 1077.300558] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.301660] CPU: 0 PID: 7458 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1077.302382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.303091] Call Trace: [ 1077.303321] dump_stack+0x107/0x167 [ 1077.303631] should_fail.cold+0x5/0xa [ 1077.303959] ? create_object.isra.0+0x3a/0xa20 [ 1077.304352] should_failslab+0x5/0x20 [ 1077.304676] kmem_cache_alloc+0x5b/0x310 [ 1077.305028] create_object.isra.0+0x3a/0xa20 [ 1077.305401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1077.305836] kmem_cache_alloc_trace+0x151/0x320 [ 1077.306238] __io_uring_add_tctx_node+0x15c/0x520 [ 1077.306647] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1077.307106] ? alloc_fd+0x2e7/0x670 [ 1077.307429] io_uring_setup+0x1f6a/0x2910 [ 1077.307794] ? wait_for_completion_io+0x270/0x270 [ 1077.308205] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1077.308657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.309104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.309547] do_syscall_64+0x33/0x40 [ 1077.309866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.310302] RIP: 0033:0x7fb639313b19 [ 1077.310621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.312185] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1077.312835] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1077.313444] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1077.314046] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1077.314650] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1077.315276] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:42:22 executing program 6: syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:22 executing program 2: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x80, 0x7, 0x3, 0x0, 0x3, 0x92000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x5}, 0x4, 0x7, 0x10001, 0x4, 0x9, 0xfffff703, 0x8, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x14e8, &(0x7f0000000380), &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_coalesce={0x6}}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000740)="244047756ee150ef57e86a24e69dc6039cab8dda2bbb1398fe50f5e4ee0b6ce65886e60cb29e7fb30a7a9a89f35f0c9816f6fa30c8f2514f2f4a461415340651d3fcbfeb37e733372f62601df55ff20d6a8d893df5ff2ac9ea7c36aad78edaa3f2df942eb814171ddf173fddc0df9a49cdd3cb3055132208dff6c2a5b919a3385cbaf01fd763f1", 0x87, 0x4048454, 0x1, {0x0, r4}}, 0x3f) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) [ 1077.338954] FAULT_INJECTION: forcing a failure. [ 1077.338954] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.340106] CPU: 0 PID: 7459 Comm: syz-executor.3 Not tainted 5.10.225 #1 [ 1077.340678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.341381] Call Trace: [ 1077.341615] dump_stack+0x107/0x167 [ 1077.341931] should_fail.cold+0x5/0xa [ 1077.342260] ? create_object.isra.0+0x3a/0xa20 [ 1077.342650] should_failslab+0x5/0x20 [ 1077.342992] kmem_cache_alloc+0x5b/0x310 [ 1077.343345] create_object.isra.0+0x3a/0xa20 [ 1077.343718] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1077.344151] kmem_cache_alloc+0x159/0x310 [ 1077.344509] fat_parse_long.constprop.0+0x8e9/0xb50 [ 1077.344930] ? filldir+0x4c2/0x6e0 [ 1077.345242] __fat_readdir+0x87b/0x1490 [ 1077.345591] ? fat_search_long+0xd90/0xd90 [ 1077.345959] ? __fdget_pos+0xf1/0x190 [ 1077.346295] ? down_read_killable+0x112/0x460 [ 1077.346810] ? inode_security+0x107/0x140 [ 1077.347186] ? down_read_interruptible+0x460/0x460 [ 1077.347607] ? fsnotify_perm.part.0+0x22d/0x620 [ 1077.348012] iterate_dir+0x584/0x710 [ 1077.348335] __x64_sys_getdents+0x13a/0x2c0 [ 1077.348702] ? __ia32_sys_old_readdir+0x1d0/0x1d0 [ 1077.349110] ? fput_many+0x2f/0x1a0 [ 1077.349425] ? filldir64+0x6d0/0x6d0 [ 1077.349753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.350203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.350640] do_syscall_64+0x33/0x40 [ 1077.350964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.351400] RIP: 0033:0x7f4345bd6b19 [ 1077.351719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.353261] RSP: 002b:00007f434314c188 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1077.353917] RAX: ffffffffffffffda RBX: 00007f4345ce9f60 RCX: 00007f4345bd6b19 [ 1077.354524] RDX: 000000000000007e RSI: 0000000020000540 RDI: 0000000000000005 [ 1077.355153] RBP: 00007f434314c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.355757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.356357] R13: 00007fff54553adf R14: 00007f434314c300 R15: 0000000000022000 06:42:22 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x2c00, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:22 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/222, 0xde}], 0x1, 0x400, 0x0) 06:42:22 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) (fail_nth: 3) 06:42:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 39) [ 1077.444491] FAULT_INJECTION: forcing a failure. [ 1077.444491] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.445795] CPU: 0 PID: 7472 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1077.446368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.447082] Call Trace: [ 1077.447317] dump_stack+0x107/0x167 [ 1077.447634] should_fail.cold+0x5/0xa [ 1077.447973] ? xas_alloc+0x336/0x440 [ 1077.448302] should_failslab+0x5/0x20 [ 1077.449072] kmem_cache_alloc+0x5b/0x310 [ 1077.450071] ? stack_trace_consume_entry+0x160/0x160 [ 1077.451286] xas_alloc+0x336/0x440 [ 1077.452148] xas_create+0x34a/0x10d0 [ 1077.453052] ? kernel_text_address+0xf2/0x120 [ 1077.454199] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1077.454862] xas_store+0x8c/0x1c40 [ 1077.455338] __xa_store+0x164/0x2d0 [ 1077.455662] ? xa_delete_node+0x280/0x280 [ 1077.456091] ? trace_hardirqs_on+0x5b/0x180 [ 1077.456524] xa_store+0x31/0x50 [ 1077.456814] __io_uring_add_tctx_node+0x1cf/0x520 [ 1077.457289] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1077.457732] ? alloc_fd+0x2e7/0x670 [ 1077.458053] io_uring_setup+0x1f6a/0x2910 [ 1077.458559] ? wait_for_completion_io+0x270/0x270 [ 1077.458986] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1077.459496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.459946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.460434] do_syscall_64+0x33/0x40 [ 1077.460758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.461195] RIP: 0033:0x7fb639313b19 [ 1077.461559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.463171] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1077.463855] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1077.464503] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1077.465104] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1077.465748] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1077.466398] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:42:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="00319c7bfc5bbc5224706e2c8a45d85f884311b60fcb315dcfacd025000007f61a00000000c1"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x0) ftruncate(0xffffffffffffffff, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x4002, 0x40) write(r2, &(0x7f0000000240)='!', 0x1) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0xffffffbffffffff9, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x145, 0x4001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x15100, 0x0, 0x9, 0xf9d6ac85e061c4bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsmount(r0, 0x0, 0x0) openat(r3, &(0x7f0000000280)='./file0\x00', 0x0, 0x2) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) openat(r5, &(0x7f00000000c0)='./file2\x00', 0x28100, 0x3) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') r6 = geteuid() syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x6, 0x3, &(0x7f0000001500)=[{&(0x7f0000000340)="fef5831154796291af34efc901362e21824e57f16db8de3c27c4000b123ee851deef85836fe040180962f2463f4021a9b3bd4e8ecf875b8cedcb9e5a48bf59c383eda8fbf631237e7f15dfb6a4a05790bcb48b10823bc35fa162704d61f054de2cfd", 0x62, 0x2}, {&(0x7f00000003c0)="ae8f17d027b4c3485ef97ad329da9f951564101048da96785846ac7d1aef9f8d7b1e7c13a52285b036588a12a03d84f8f10b5c2003d7de050849c77ce387b3e425fb05f1326a5db2df08d2a5192c83d449a9337ccd65ba384125e48ffd4a8f5728028325d6e37d56699a7ae93e729c169fdb362191519e76639f67574a213036bf89e4", 0x83, 0x25}, {&(0x7f0000000500)="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", 0x1000, 0x5}], 0x40000, &(0x7f0000001580)={[{@fat=@nfs_nostale_ro}, {@fat=@nocase}, {@nodots}, {@nodots}], [{@euid_gt={'euid>', r6}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',-(.)'}}]}) 06:42:22 executing program 6: syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:22 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 38) [ 1077.504622] FAULT_INJECTION: forcing a failure. [ 1077.504622] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.505635] CPU: 1 PID: 7481 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1077.506216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.506927] Call Trace: [ 1077.507170] dump_stack+0x107/0x167 [ 1077.507485] should_fail.cold+0x5/0xa [ 1077.507815] ? create_object.isra.0+0x3a/0xa20 [ 1077.508207] should_failslab+0x5/0x20 [ 1077.508533] kmem_cache_alloc+0x5b/0x310 [ 1077.508886] create_object.isra.0+0x3a/0xa20 [ 1077.509260] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1077.509695] kmem_cache_alloc+0x159/0x310 [ 1077.510057] vm_area_dup+0x78/0x290 [ 1077.510377] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1077.510776] ? lock_downgrade+0x6d0/0x6d0 [ 1077.511151] ? copy_page_range+0x24e9/0x3810 [ 1077.511531] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1077.511988] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1077.512387] ? avc_has_extended_perms+0xf40/0xf40 [ 1077.512801] ? copy_process+0x2b60/0x7800 [ 1077.513159] ? vm_area_alloc+0x110/0x110 [ 1077.513506] ? find_held_lock+0x2c/0x110 [ 1077.513865] ? selinux_vm_enough_memory+0x114/0x180 [ 1077.514290] ? selinux_sb_statfs+0x250/0x250 [ 1077.514662] ? up_write+0x191/0x550 [ 1077.514995] ? percpu_counter_add_batch+0x8b/0x140 [ 1077.515427] ? __vm_enough_memory+0x184/0x360 [ 1077.515815] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1077.516260] copy_process+0x291b/0x7800 [ 1077.516633] ? __cleanup_sighand+0xb0/0xb0 [ 1077.517001] ? lock_acquire+0x197/0x470 [ 1077.517352] ? find_held_lock+0x2c/0x110 [ 1077.517708] kernel_clone+0xe7/0x980 [ 1077.518029] ? lock_downgrade+0x6d0/0x6d0 [ 1077.518382] ? find_held_lock+0x2c/0x110 [ 1077.518729] ? create_io_thread+0xf0/0xf0 [ 1077.519104] ? ksys_write+0x12d/0x260 [ 1077.519442] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1077.519861] __do_sys_fork+0x8a/0xc0 [ 1077.520180] ? kernel_thread+0xf0/0xf0 [ 1077.520530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.520977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.521412] ? trace_hardirqs_on+0x5b/0x180 [ 1077.521781] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.522217] do_syscall_64+0x33/0x40 [ 1077.522536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.522984] RIP: 0033:0x7f8f4b3d9b19 [ 1077.523308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.524858] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1077.525506] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1077.526111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1077.526715] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.527334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1077.527939] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1077.540762] FAULT_INJECTION: forcing a failure. [ 1077.540762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.541800] CPU: 1 PID: 7474 Comm: syz-executor.3 Not tainted 5.10.225 #1 [ 1077.542371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.543084] Call Trace: [ 1077.543311] dump_stack+0x107/0x167 [ 1077.543621] should_fail.cold+0x5/0xa [ 1077.543950] _copy_to_user+0x2e/0x180 [ 1077.544279] simple_read_from_buffer+0xcc/0x160 [ 1077.544678] proc_fail_nth_read+0x198/0x230 [ 1077.545048] ? proc_sessionid_read+0x230/0x230 [ 1077.545437] ? security_file_permission+0xb1/0xe0 [ 1077.545849] ? proc_sessionid_read+0x230/0x230 [ 1077.546235] vfs_read+0x228/0x620 [ 1077.546536] ksys_read+0x12d/0x260 [ 1077.546839] ? vfs_write+0xb10/0xb10 [ 1077.547175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.547624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.548067] do_syscall_64+0x33/0x40 [ 1077.548386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.548821] RIP: 0033:0x7f4345b8969c [ 1077.549140] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1077.550690] RSP: 002b:00007f434314c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1077.551355] RAX: ffffffffffffffda RBX: 0000000000000050 RCX: 00007f4345b8969c [ 1077.551963] RDX: 000000000000000f RSI: 00007f434314c1e0 RDI: 0000000000000004 [ 1077.552564] RBP: 00007f434314c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.553169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.553768] R13: 00007fff54553adf R14: 00007f434314c300 R15: 0000000000022000 06:42:22 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x3000, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:36 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/216, 0x105}], 0x1, 0x400, 0x0) 06:42:36 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:42:36 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 39) 06:42:36 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x4000, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1091.158496] FAULT_INJECTION: forcing a failure. [ 1091.158496] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.159653] CPU: 1 PID: 7505 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1091.160277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.161028] Call Trace: [ 1091.161281] dump_stack+0x107/0x167 [ 1091.161620] should_fail.cold+0x5/0xa [ 1091.161975] ? vm_area_dup+0x78/0x290 [ 1091.162332] should_failslab+0x5/0x20 [ 1091.162685] kmem_cache_alloc+0x5b/0x310 [ 1091.163074] vm_area_dup+0x78/0x290 [ 1091.163422] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1091.163853] ? lock_downgrade+0x6d0/0x6d0 [ 1091.164233] ? copy_page_range+0x24e9/0x3810 [ 1091.164642] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1091.165143] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1091.165577] ? avc_has_extended_perms+0xf40/0xf40 [ 1091.166028] ? copy_process+0x2b60/0x7800 [ 1091.166413] ? vm_area_alloc+0x110/0x110 [ 1091.166791] ? find_held_lock+0x2c/0x110 [ 1091.167236] ? selinux_vm_enough_memory+0x114/0x180 [ 1091.167701] ? selinux_sb_statfs+0x250/0x250 [ 1091.168106] ? up_write+0x191/0x550 [ 1091.168451] ? percpu_counter_add_batch+0x8b/0x140 [ 1091.168921] ? __vm_enough_memory+0x184/0x360 [ 1091.169337] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1091.169826] copy_process+0x291b/0x7800 [ 1091.170233] ? __cleanup_sighand+0xb0/0xb0 [ 1091.170633] ? lock_acquire+0x197/0x470 [ 1091.171026] ? find_held_lock+0x2c/0x110 [ 1091.171425] kernel_clone+0xe7/0x980 [ 1091.171772] ? lock_downgrade+0x6d0/0x6d0 [ 1091.172170] ? find_held_lock+0x2c/0x110 [ 1091.172546] ? create_io_thread+0xf0/0xf0 [ 1091.172950] ? ksys_write+0x12d/0x260 [ 1091.173331] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1091.173787] __do_sys_fork+0x8a/0xc0 [ 1091.174151] ? kernel_thread+0xf0/0xf0 [ 1091.174532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.175015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1091.175518] ? trace_hardirqs_on+0x5b/0x180 [ 1091.175921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1091.176406] do_syscall_64+0x33/0x40 [ 1091.176752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1091.177219] RIP: 0033:0x7f8f4b3d9b19 [ 1091.177576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.179245] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1091.179952] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1091.180597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1091.181253] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.181914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.183094] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:42:36 executing program 6: syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 40) 06:42:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x46e2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000e80)='./file2\x00', 0x1, 0x100) ftruncate(r0, 0x1) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000500)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x30, r0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) accept$inet6(r3, &(0x7f0000000ec0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000f00)=0x1c) creat(&(0x7f0000000240)='./file0\x00', 0x8a) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x100) getpeername$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) write$binfmt_elf64(r2, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x977) lsetxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)=ANY=[@ANYBLOB="0000000005000003e2d3f897cc"], 0xd, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r5, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/197, 0xc5}, {0x0}, {&(0x7f0000000300)=""/198, 0xc6}], 0x3) 06:42:36 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 1091.197951] FAULT_INJECTION: forcing a failure. [ 1091.197951] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.200759] CPU: 1 PID: 7506 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1091.202390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.204348] Call Trace: [ 1091.204981] dump_stack+0x107/0x167 [ 1091.205870] should_fail.cold+0x5/0xa [ 1091.206764] ? create_object.isra.0+0x3a/0xa20 [ 1091.209118] should_failslab+0x5/0x20 [ 1091.209441] kmem_cache_alloc+0x5b/0x310 [ 1091.209792] create_object.isra.0+0x3a/0xa20 [ 1091.210163] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1091.210594] kmem_cache_alloc+0x159/0x310 [ 1091.210952] xas_alloc+0x336/0x440 [ 1091.211295] xas_create+0x34a/0x10d0 [ 1091.211625] ? kernel_text_address+0xf2/0x120 [ 1091.212004] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1091.212445] xas_store+0x8c/0x1c40 [ 1091.212761] __xa_store+0x164/0x2d0 [ 1091.213073] ? xa_delete_node+0x280/0x280 [ 1091.213428] ? trace_hardirqs_on+0x5b/0x180 [ 1091.213798] xa_store+0x31/0x50 [ 1091.214082] __io_uring_add_tctx_node+0x1cf/0x520 [ 1091.214488] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1091.214929] ? alloc_fd+0x2e7/0x670 [ 1091.215285] io_uring_setup+0x1f6a/0x2910 [ 1091.215647] ? wait_for_completion_io+0x270/0x270 [ 1091.216053] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1091.216498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.216936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1091.217374] do_syscall_64+0x33/0x40 [ 1091.217687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1091.218115] RIP: 0033:0x7fb639313b19 [ 1091.218430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.220012] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1091.220656] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1091.221254] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1091.221852] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 06:42:36 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x18) [ 1091.222451] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1091.239075] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:42:36 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x6000, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:36 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x7}, 0x6) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/253, 0xfd}, {&(0x7f00000003c0)=""/182, 0xb6}, {&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000480)=""/74, 0x4a}, {&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000000580)=""/94, 0x5e}], 0x7, 0x3, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8) 06:42:36 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file1\x00', 0x200) creat(&(0x7f0000000600)='./file1\x00', 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x10, r1, 0x8000000) syz_io_uring_setup(0x6b4a, &(0x7f00000001c0)={0x0, 0xdad4, 0x0, 0x0, 0x1fb, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000100), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x8, 0x800, 0x0, 0x7fffffff, 0x2, 0x1}, 0x3f2) mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x108) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:42:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x18) 06:42:36 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x0, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1105.724054] FAULT_INJECTION: forcing a failure. [ 1105.724054] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.725113] CPU: 0 PID: 7539 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1105.725695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.726399] Call Trace: [ 1105.726633] dump_stack+0x107/0x167 [ 1105.726949] should_fail.cold+0x5/0xa [ 1105.727301] ? create_object.isra.0+0x3a/0xa20 [ 1105.727701] should_failslab+0x5/0x20 [ 1105.728027] kmem_cache_alloc+0x5b/0x310 [ 1105.728380] create_object.isra.0+0x3a/0xa20 [ 1105.728758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1105.729193] kmem_cache_alloc+0x159/0x310 [ 1105.729556] anon_vma_clone+0xdc/0x590 [ 1105.729903] anon_vma_fork+0x82/0x640 [ 1105.730226] ? __vm_enough_memory+0x184/0x360 06:42:50 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x1000000, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:50 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:42:50 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x0, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 41) 06:42:50 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 40) [ 1105.730612] copy_process+0x7218/0x7800 [ 1105.730990] ? __cleanup_sighand+0xb0/0xb0 [ 1105.731757] ? lock_acquire+0x197/0x470 [ 1105.732484] ? find_held_lock+0x2c/0x110 [ 1105.733197] kernel_clone+0xe7/0x980 [ 1105.733843] ? lock_downgrade+0x6d0/0x6d0 [ 1105.734558] ? find_held_lock+0x2c/0x110 [ 1105.735258] ? create_io_thread+0xf0/0xf0 [ 1105.735628] ? ksys_write+0x12d/0x260 [ 1105.735965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1105.736398] __do_sys_fork+0x8a/0xc0 [ 1105.736728] ? kernel_thread+0xf0/0xf0 [ 1105.737093] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.737553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.737997] ? trace_hardirqs_on+0x5b/0x180 [ 1105.738369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.738810] do_syscall_64+0x33/0x40 [ 1105.739130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.739606] RIP: 0033:0x7f8f4b3d9b19 [ 1105.739926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.741467] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1105.742111] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1105.742711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1105.743328] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.743927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.744529] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:42:50 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) fallocate(r0, 0x40, 0x0, 0x0) 06:42:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x81) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x1) creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r1, &(0x7f0000000540)=""/126, 0x7e) 06:42:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x18) 06:42:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x18) [ 1105.812292] FAULT_INJECTION: forcing a failure. [ 1105.812292] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.813443] CPU: 1 PID: 7545 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1105.814207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.815018] Call Trace: [ 1105.815353] dump_stack+0x107/0x167 [ 1105.815781] should_fail.cold+0x5/0xa [ 1105.816168] ? xas_alloc+0x336/0x440 [ 1105.816528] should_failslab+0x5/0x20 [ 1105.816944] kmem_cache_alloc+0x5b/0x310 [ 1105.817351] xas_alloc+0x336/0x440 [ 1105.817733] xas_create+0x34a/0x10d0 [ 1105.818105] ? kernel_text_address+0xf2/0x120 [ 1105.818548] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1105.819085] xas_store+0x8c/0x1c40 [ 1105.819475] __xa_store+0x164/0x2d0 [ 1105.819898] ? xa_delete_node+0x280/0x280 [ 1105.820299] ? trace_hardirqs_on+0x5b/0x180 [ 1105.820772] xa_store+0x31/0x50 [ 1105.821090] __io_uring_add_tctx_node+0x1cf/0x520 [ 1105.821556] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1105.822090] ? alloc_fd+0x2e7/0x670 [ 1105.822447] io_uring_setup+0x1f6a/0x2910 [ 1105.822906] ? wait_for_completion_io+0x270/0x270 [ 1105.823375] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1105.823962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.824451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.824998] do_syscall_64+0x33/0x40 [ 1105.825348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.825881] RIP: 0033:0x7fb639313b19 [ 1105.826239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.828073] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1105.828824] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1105.829500] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1105.830212] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1105.830911] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1105.831596] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:42:50 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 41) 06:42:50 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x3000000, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:51 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x0, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:42:51 executing program 5: pwritev2(0xffffffffffffffff, &(0x7f0000002c00)=[{&(0x7f0000002940)="8c80f80a82244ffe922bcec8e2e4edf53675597124ca9276ec4312ea5ca82474b116b69afa217abb0ab77b0de52eba874aacc3b3c0bd7552c1f2a0d306101b7f11b980f5873c06dad5041a2f864ce6256c089fe423a408378194937dc4930d6c69a5f0f5b91c843ddef2226a8ca2ef200138322efa64b12d59459231ed62491e36c6cdb98ac4b181780c1b64b8b6b83404deafb5d0902a8787fc5d26a58330f13ee1cc740552294836f1f18cc44757a773d7833a25de1d64cd52efd9d11ba094ea2e2600351ef36ab3fd51340051b10bba", 0xd1}, {&(0x7f0000000280)="ab9c67efabcc96b56f1b7e093375b928fb05e1f556d35312c7", 0x19}, {&(0x7f0000002a40)="5aacad6d8d06d6c3b279950689ec697878e3288feeccdea1c38415f44cf68ae11139ad2d8db866ebc286ae9f132df2555b46dd5a0258ebc33f02bc3d9e94ec5c8ae41cc5f964cdcca16ced773dc453cd8035ef67a7ee1d470ca36aa65410ea522d881da16b8a9312bff08d75227ee1c2", 0x70}, {&(0x7f0000002ac0)="e7405ea77a3ef2e0e33e3a6adc0a0b6d13e9171642d8015c84d291f19d578a849e8ebaa812195c98622871854221fb9afaa38dadbd272d199068bd91b3b211d743270c574c94604111595740d98baaf19ffaef4066da2ad6f7faf293c8b1eb7c07cc6f651203f7642fd28b5a2e8ab6d1bccdb63d579ff2f3714c3fa8dbdb22754fd6e0bbcbd3be928c233c2fbb3c6aa1326b1d6ceaf3086a70ee18c046ecb223769346f2f36923a80efefaaff66334a54857b5746514a6b54c4d33839ac94234be4f3f257816fdd5c9a1b550bafd65acaa4d74f365c07480e9fb8ed33b", 0xdd}, {&(0x7f0000002bc0)="c8e686ba68c660ac10d31d6e07371ffc62da64d5d75bd084a395f4e177d2", 0x1e}], 0x5, 0x6, 0x100, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) r2 = getpgid(0x0) [ 1105.906706] FAULT_INJECTION: forcing a failure. sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2554, 0x3c, 0x400, 0x70bd28, 0x25dfdbfc, {0xe}, [@nested={0x22db, 0x44, 0x0, 0x1, [@generic="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", @generic="429e5cd988ca71cfac34664d739c31e47cdea2a87591b763d54f41cf732072b6b1300d4ca0aa4abdb781b39b8a11ca24fac7e5d666c610658a9211940e3a3a01255864dce551fa66ffc767c8372b7360541d16889bc632e1d9761b305f7f26233762e39bc7e922e1fb037c9ae2d590de3a93aff6ea6408901fce8e8f94d82bacc8022c7969e35709b425c2816b0ed5c9d880fa27d6f80ae2b0bd484def489cdfb30d8adcea44ec0007bea78caa7c65c0ca29d6804accae7f80f87ef86622a7f7cb0308cae76cf8b852dbc4bf15fe8383b684cfcdc3a7c5fa3f7c84ed229687c22b065deab0d616a416", @generic="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", @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x85, 0x0, 0x0, @str='!B#\x00'}, @generic="edb6ff004c84e19ada966e701936980c7a5f92adf230dc7ecba3847ee5a05654855cb32af7f502c0358f4607e253360367311ca8603b98b8c6fc612447d34856f10e69281850ac9eb1643753ed17dd6018b81ebb31d2d020164903de4eb09978e45c727657bbcd32d2a5bde77d16df483e0eb543db5f2451ab8aeff294d276adcd637049605100c0fe2dc04c5a520449e4d45af2396f55f04255d9866fe13413e37497cdd378d441d303ce7717e3cd155b6fc398a0ce79e4f2647c4efc2d0aa4948b86434fcddc5451c4f7fb2f20e854e09b5302bb5b514b6ae22fa95fd393f661a6580e07ebdb02c46849", @generic="cf7c3fd4faa254028971e0db394313520a144ab4a30870edf26f6adcace802a1654c4a289c1b2370bd266bfdb22179fae4eaee173ec2c7b862e69df1836c696fceb7f7e49ef98d2ba71e3a27ead41757bef56537adcb894f3a1c456357bf76f04318c9b80ebd2764e651b1569912b188a3a3464e48ef0d2f8ee5767dbcf9f145c9268311f2db0ab8dac91df6f7f3e2f5cacc6ab4b0be4731b4d1f15db32b44d38342aa6a6441073102dceda800a89fce9b56fd1cba26a45a638ede42435b885f45b4238662b5b971ac391dd32fe676416a3a491015556c24fc11920020f5b208887daf9a71fef347ddf58f179ce6d2a3025a89"]}, @nested={0x228, 0xc, 0x0, 0x1, [@generic="f0d585941fa5d30b8af3ac13c1cb267e69238d2e1a7af63bc6ff0873eefc3d198a706791676e1451deb028f88052ee9162d7a04f1b8d066537287bce75a7f14ee4ec2f37cf8f775b983256d7ba40a25564f3e16757cc6c68b4933c070b35a108a6122eebefa8d7dfed60b0cb8e58a5dc30cec9b95a4209ffc0e81fc7b2484a941e03d9fc3b20e9ad5989fbfca19948994f82363be9d10c79105863feda4719f832fe865c11fadfea7bcd5282fafe8c2a755114927c91b4cfb34024fbeec07d2fb30e1cd7ecf9757b7ad7e220910c21d829", @generic="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", @generic="0be41b885bf2f894db11d7d5475b3b037206714c4fc176d7ce9da1c722f35ef9bd9b226a6167054fad36894b6b60c04461eb0352d0f68423f903c5d32dea03e80ba5b40c750304dafb7e0cf994713bc7220cd944b432b2"]}, @nested={0xc, 0x48, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @uid=r1}]}, @typed={0x8, 0x7e, 0x0, 0x0, @u32}, @typed={0x8, 0x38, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0xc, 0x71, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid=r2}]}]}, 0x2554}, 0x1, 0x0, 0x0, 0x4000000}, 0x200400c0) [ 1105.906706] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.907889] CPU: 1 PID: 7559 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1105.908529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.909332] Call Trace: [ 1105.909606] dump_stack+0x107/0x167 [ 1105.910002] should_fail.cold+0x5/0xa [ 1105.910363] ? create_object.isra.0+0x3a/0xa20 [ 1105.910855] should_failslab+0x5/0x20 [ 1105.911246] kmem_cache_alloc+0x5b/0x310 [ 1105.911636] ? create_object.isra.0+0x3ad/0xa20 [ 1105.912145] create_object.isra.0+0x3a/0xa20 [ 1105.912554] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1105.913094] __kmalloc_node+0x1ae/0x420 [ 1105.913476] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1105.914019] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1105.914481] ? trace_hardirqs_on+0x5b/0x180 [ 1105.914945] kmem_cache_alloc+0x171/0x310 [ 1105.915365] vm_area_dup+0x78/0x290 [ 1105.915807] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1105.916243] ? lock_downgrade+0x6d0/0x6d0 [ 1105.916631] ? copy_page_range+0x24e9/0x3810 [ 1105.917109] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1105.917610] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1105.918114] ? avc_has_extended_perms+0xf40/0xf40 [ 1105.918564] ? copy_process+0x2b60/0x7800 [ 1105.919023] ? vm_area_alloc+0x110/0x110 [ 1105.919411] ? find_held_lock+0x2c/0x110 [ 1105.919873] ? selinux_vm_enough_memory+0x114/0x180 [ 1105.920350] ? selinux_sb_statfs+0x250/0x250 [ 1105.920804] ? up_write+0x191/0x550 [ 1105.921164] ? percpu_counter_add_batch+0x8b/0x140 [ 1105.921625] ? __vm_enough_memory+0x184/0x360 [ 1105.922111] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1105.922596] copy_process+0x291b/0x7800 [ 1105.923050] ? __cleanup_sighand+0xb0/0xb0 [ 1105.923482] ? lock_acquire+0x197/0x470 [ 1105.923935] ? find_held_lock+0x2c/0x110 [ 1105.924339] kernel_clone+0xe7/0x980 [ 1105.924736] ? lock_downgrade+0x6d0/0x6d0 [ 1105.925120] ? find_held_lock+0x2c/0x110 [ 1105.925514] ? create_io_thread+0xf0/0xf0 [ 1105.925958] ? ksys_write+0x12d/0x260 [ 1105.926326] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1105.926851] __do_sys_fork+0x8a/0xc0 [ 1105.927203] ? kernel_thread+0xf0/0xf0 [ 1105.927608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.928166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.928655] ? trace_hardirqs_on+0x5b/0x180 [ 1105.929106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.929598] do_syscall_64+0x33/0x40 [ 1105.930000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.930473] RIP: 0033:0x7f8f4b3d9b19 [ 1105.930882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.932637] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1105.933404] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1105.934122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1105.934820] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.935501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.936241] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1119.920994] FAULT_INJECTION: forcing a failure. [ 1119.920994] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.922079] CPU: 1 PID: 7581 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1119.922708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.923474] Call Trace: [ 1119.923704] dump_stack+0x107/0x167 [ 1119.924015] should_fail.cold+0x5/0xa [ 1119.924390] ? create_object.isra.0+0x3a/0xa20 [ 1119.924796] should_failslab+0x5/0x20 [ 1119.925120] kmem_cache_alloc+0x5b/0x310 [ 1119.925566] create_object.isra.0+0x3a/0xa20 [ 1119.925939] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1119.926417] kmem_cache_alloc+0x159/0x310 [ 1119.926792] anon_vma_clone+0xdc/0x590 [ 1119.927131] anon_vma_fork+0x82/0x640 [ 1119.927574] ? __vm_enough_memory+0x184/0x360 [ 1119.927976] copy_process+0x7218/0x7800 [ 1119.930616] ? __cleanup_sighand+0xb0/0xb0 [ 1119.930998] ? lock_acquire+0x197/0x470 [ 1119.931430] ? find_held_lock+0x2c/0x110 [ 1119.931780] kernel_clone+0xe7/0x980 [ 1119.932109] ? lock_downgrade+0x6d0/0x6d0 [ 1119.932504] ? find_held_lock+0x2c/0x110 [ 1119.932848] ? create_io_thread+0xf0/0xf0 [ 1119.933265] ? ksys_write+0x12d/0x260 [ 1119.933599] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1119.934027] __do_sys_fork+0x8a/0xc0 [ 1119.934388] ? kernel_thread+0xf0/0xf0 [ 1119.934730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.935248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.935702] ? trace_hardirqs_on+0x5b/0x180 [ 1119.936067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.936559] do_syscall_64+0x33/0x40 [ 1119.936875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.937363] RIP: 0033:0x7f8f4b3d9b19 [ 1119.937679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.939344] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1119.939982] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1119.940637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.941285] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.941896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.942554] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:43:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r1, r0, 0x0) recvmsg$unix(r1, &(0x7f0000001840)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000000c0)=""/122, 0x7a}, {&(0x7f0000001180)=""/182, 0xb6}, {&(0x7f0000001240)=""/171, 0xab}, {&(0x7f0000001300)=""/236, 0xec}, {&(0x7f0000001400)=""/128, 0x80}, {&(0x7f0000001480)=""/124, 0x7c}, {&(0x7f0000001500)=""/79, 0x4f}, {&(0x7f0000001580)=""/255, 0xff}], 0xa, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x2040) 06:43:05 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0x7, 0x7, [@empty]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'nr0\x00', &(0x7f0000000400)=@ethtool_coalesce={0x6}}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x7f, @private2, 0x54}, 0x1c) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:43:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 42) 06:43:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_coalesce={0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000001800)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x81, 0x1, 0x74, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x1, 0x40, 0x5a0, 0xa1d}}) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) syz_io_uring_setup(0x6bd5, &(0x7f0000000240)={0x0, 0xcdf6, 0x2, 0x2, 0x35e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd_index=0xa, 0xfff, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000001640)=""/213, 0xd5}, {&(0x7f0000001740)=""/145, 0x91}], 0x5, 0x10, 0x1, {0x0, r3}}, 0x4) chdir(&(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00'}) creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r1, &(0x7f0000000540)=""/126, 0x7e) 06:43:05 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x2c000000, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:05 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 42) 06:43:05 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:43:05 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0x7, 0x7, [@empty]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1119.952224] FAULT_INJECTION: forcing a failure. [ 1119.952224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1119.953252] CPU: 0 PID: 7586 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1119.953827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.954523] Call Trace: [ 1119.954758] dump_stack+0x107/0x167 [ 1119.955071] should_fail.cold+0x5/0xa [ 1119.955417] __alloc_pages_nodemask+0x182/0x600 [ 1119.955819] ? stack_trace_save+0x8c/0xc0 [ 1119.956175] ? stack_trace_consume_entry+0x160/0x160 [ 1119.956612] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1119.957143] ? kmem_cache_alloc+0x301/0x310 [ 1119.957523] alloc_pages_current+0x187/0x280 [ 1119.957907] allocate_slab+0x26f/0x380 [ 1119.958250] ___slab_alloc+0x470/0x700 [ 1119.958592] ? create_object.isra.0+0x3a/0xa20 [ 1119.958990] ? mark_lock+0xf5/0x2df0 [ 1119.959321] ? __is_insn_slot_addr+0x14c/0x290 [ 1119.959726] ? create_object.isra.0+0x3a/0xa20 [ 1119.960121] ? kmem_cache_alloc+0x301/0x310 [ 1119.960491] ? create_object.isra.0+0x3a/0xa20 [ 1119.960884] kmem_cache_alloc+0x301/0x310 [ 1119.961249] create_object.isra.0+0x3a/0xa20 [ 1119.961628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1119.962073] kmem_cache_alloc+0x159/0x310 [ 1119.962439] xas_alloc+0x336/0x440 [ 1119.962749] xas_create+0x34a/0x10d0 [ 1119.963083] ? kernel_text_address+0xf2/0x120 [ 1119.963482] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1119.963932] xas_store+0x8c/0x1c40 [ 1119.964252] __xa_store+0x164/0x2d0 [ 1119.964570] ? xa_delete_node+0x280/0x280 [ 1119.964934] ? trace_hardirqs_on+0x5b/0x180 [ 1119.965312] xa_store+0x31/0x50 [ 1119.965602] __io_uring_add_tctx_node+0x1cf/0x520 [ 1119.966017] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1119.966463] ? alloc_fd+0x2e7/0x670 [ 1119.966786] io_uring_setup+0x1f6a/0x2910 [ 1119.967150] ? wait_for_completion_io+0x270/0x270 [ 1119.967573] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1119.968027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.968475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.968919] do_syscall_64+0x33/0x40 [ 1119.969241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.969679] RIP: 0033:0x7fb639313b19 [ 1119.970003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.971575] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1119.972226] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1119.972835] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1119.973443] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1119.974050] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1119.974657] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:43:05 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x30000000, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:05 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c) io_uring_enter(r0, 0x58ab, 0xe03e, 0x0, 0x0, 0x0) 06:43:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 43) 06:43:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./nile0\x00']) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/202, 0xca}], 0x1, 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000000c0)={{0x0, 0x3, 0xfffffffb, 0x0, 0xb6b0}, 0x3, 0x1}) 06:43:05 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 43) 06:43:05 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0x7, 0x7, [@empty]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1120.213475] FAULT_INJECTION: forcing a failure. [ 1120.213475] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.214594] CPU: 1 PID: 7615 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1120.215228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.215950] Call Trace: [ 1120.216180] dump_stack+0x107/0x167 [ 1120.216543] should_fail.cold+0x5/0xa [ 1120.216882] ? xas_alloc+0x336/0x440 [ 1120.217277] should_failslab+0x5/0x20 [ 1120.217601] kmem_cache_alloc+0x5b/0x310 [ 1120.217655] FAULT_INJECTION: forcing a failure. [ 1120.217655] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.217960] xas_alloc+0x336/0x440 [ 1120.218003] xas_create+0x34a/0x10d0 [ 1120.218022] ? kernel_text_address+0xf2/0x120 [ 1120.218037] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1120.218050] xas_store+0x8c/0x1c40 [ 1120.218074] __xa_store+0x164/0x2d0 [ 1120.218089] ? xa_delete_node+0x280/0x280 [ 1120.218108] ? trace_hardirqs_on+0x5b/0x180 [ 1120.218125] xa_store+0x31/0x50 [ 1120.222452] __io_uring_add_tctx_node+0x1cf/0x520 [ 1120.222861] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1120.223381] ? alloc_fd+0x2e7/0x670 [ 1120.223701] io_uring_setup+0x1f6a/0x2910 [ 1120.224058] ? wait_for_completion_io+0x270/0x270 [ 1120.224526] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1120.224970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1120.225497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1120.225933] do_syscall_64+0x33/0x40 [ 1120.226299] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1120.226742] RIP: 0033:0x7fb639313b19 [ 1120.227058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.228721] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1120.229432] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1120.230039] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1120.230691] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1120.231348] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1120.231960] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1120.232636] CPU: 0 PID: 7622 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1120.233237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.233949] Call Trace: [ 1120.234191] dump_stack+0x107/0x167 [ 1120.234505] should_fail.cold+0x5/0xa [ 1120.234836] ? create_object.isra.0+0x3a/0xa20 [ 1120.235229] should_failslab+0x5/0x20 [ 1120.235569] kmem_cache_alloc+0x5b/0x310 [ 1120.235924] create_object.isra.0+0x3a/0xa20 [ 1120.236299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1120.236735] kmem_cache_alloc+0x159/0x310 [ 1120.237101] anon_vma_clone+0xdc/0x590 [ 1120.237444] anon_vma_fork+0x82/0x640 [ 1120.237771] ? __vm_enough_memory+0x184/0x360 [ 1120.238158] copy_process+0x7218/0x7800 [ 1120.238529] ? __cleanup_sighand+0xb0/0xb0 06:43:05 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x40000000, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1120.238902] ? lock_acquire+0x197/0x470 [ 1120.239252] ? find_held_lock+0x2c/0x110 [ 1120.239609] kernel_clone+0xe7/0x980 [ 1120.239928] ? lock_downgrade+0x6d0/0x6d0 [ 1120.240532] ? find_held_lock+0x2c/0x110 [ 1120.240883] ? create_io_thread+0xf0/0xf0 [ 1120.241239] ? ksys_write+0x12d/0x260 [ 1120.241571] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1120.241984] __do_sys_fork+0x8a/0xc0 [ 1120.242300] ? kernel_thread+0xf0/0xf0 [ 1120.242641] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1120.243083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1120.243539] ? trace_hardirqs_on+0x5b/0x180 [ 1120.243907] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1120.244343] do_syscall_64+0x33/0x40 [ 1120.244661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1120.245094] RIP: 0033:0x7f8f4b3d9b19 [ 1120.245413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.246937] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1120.247589] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1120.248186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1120.248782] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1120.249377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.249972] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:43:05 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000240)="5e16609750b559330031a13754b56488b8e6ecc1d6b1af11b57badf3a43dec725c84d0c0581ba62dca6396ba55275a183f6682f5f1a30f535be44f6cfa73d6faf83b8e124cbdb264ee737c4a6730fdf2e192211334b34bee0b5b56037d4ad00a071bf3c061357ad52c7f61f1762b1d884f73888d37878bd563c30630efa09d2576b380", 0x83, 0x43}, {&(0x7f0000000140)="cdfee2bce36b928c9d46d01d861b1af26914d65106c06e7f1d51b34331fabb00869b72c3a3ac6e85c5f798376772b1559c3d64e2bff45f96a2b60026c7bdb83626e2d2fea544954060f815ee1e219b38090f08ee6d5bcdf09aa7e8b3194f5287de1467a1d33b821fecd21c6756a9b3cef96b61bf3bf0751003abc520385095", 0x7f, 0x8}, {&(0x7f0000000300)="10945923ab10fae06b296e44f93365ee4ca45532ab588f964c10b564b0e468146cfebfa122619e81b9a8b9aa6b2507b6fd60c9dbd7ba538fa78c6843307b4cd97d28e631e72be2328fefc4f666f4e8cb75722f184dce1b47585d59550771196237f6da29070c87ed34fa57d5773fe7b5428ab25bceda3c67561663a3b495f0cebac79f9d6230ebd0c0ab3dd3d532e4f2c14579022ba8a72c25b95a052f015d18ae699dabb51f269f828a4f1489999e374ef70b2bb237b7bf474312b8195975734e021880f83c0e8692c0feb7a39d7bf670", 0xd1, 0x3ff}, {&(0x7f0000000400)="12ad0b0aa2ad7f096ced2f61463a44a0c69542ac67e03841e3ea73ec9b317e9970df0cf2cb0f95504b565d3987c4076e8c9acbce24694ea4cbca7115deb5fc89e25cfdec27857f3e65d2207bfbcb4bd698221a6975e1c92cb7ae9f4c93d35b3eec7c1f3b9cd7a4cab91c8e4240d66a153beca247dce32a33811a3218cc198744534caf4ce1a9a2272140cec87b0fec954acbb18c41d9ba52", 0x98, 0x1}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x947041, &(0x7f0000000200)={'trans=virtio,', {[{@uname={'uname', 0x3d, 'vfat\x00'}}, {@loose}, {@cache_none}]}}) removexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)=@random={'os2.', '+\x00'}) openat(r0, &(0x7f0000000680)='./file2\x00', 0x244802, 0x8) creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:43:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000240)=""/84, 0x54}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x100) r2 = dup(r1) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000500)={{0x3, 0x9}, {0xab}, 0xf4, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:43:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 44) 06:43:19 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0x60000000, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:19 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x20c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdb85}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd63}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc240}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x385}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d8ce3ad}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4001840}, 0x800) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:43:19 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=""/55, 0x37) 06:43:19 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 44) 06:43:19 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) [ 1134.082978] FAULT_INJECTION: forcing a failure. 06:43:19 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) [ 1134.082978] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.088138] CPU: 0 PID: 7639 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1134.088753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.089492] Call Trace: [ 1134.089745] dump_stack+0x107/0x167 [ 1134.090086] should_fail.cold+0x5/0xa [ 1134.090433] ? create_object.isra.0+0x3a/0xa20 [ 1134.090841] should_failslab+0x5/0x20 [ 1134.095079] FAULT_INJECTION: forcing a failure. [ 1134.095079] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.095549] kmem_cache_alloc+0x5b/0x310 [ 1134.095569] ? mark_held_locks+0x9e/0xe0 [ 1134.097153] create_object.isra.0+0x3a/0xa20 [ 1134.097526] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1134.097962] kmem_cache_alloc+0x159/0x310 [ 1134.098323] xas_alloc+0x336/0x440 [ 1134.098629] xas_create+0x34a/0x10d0 [ 1134.098959] ? kernel_text_address+0xf2/0x120 [ 1134.099345] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1134.099808] xas_store+0x8c/0x1c40 [ 1134.100128] __xa_store+0x164/0x2d0 [ 1134.100440] ? xa_delete_node+0x280/0x280 [ 1134.100803] ? trace_hardirqs_on+0x5b/0x180 [ 1134.101179] xa_store+0x31/0x50 [ 1134.101465] __io_uring_add_tctx_node+0x1cf/0x520 [ 1134.101874] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1134.102320] ? alloc_fd+0x2e7/0x670 [ 1134.102641] io_uring_setup+0x1f6a/0x2910 [ 1134.103005] ? wait_for_completion_io+0x270/0x270 [ 1134.103414] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1134.103880] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.104323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.104765] do_syscall_64+0x33/0x40 [ 1134.105084] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1134.105514] RIP: 0033:0x7fb639313b19 [ 1134.105832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.107359] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1134.108012] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1134.108610] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1134.109208] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1134.109806] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1134.110403] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1134.111028] CPU: 1 PID: 7645 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1134.111673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.112421] Call Trace: [ 1134.112670] dump_stack+0x107/0x167 [ 1134.113011] should_fail.cold+0x5/0xa [ 1134.113366] ? create_object.isra.0+0x3a/0xa20 [ 1134.113787] should_failslab+0x5/0x20 [ 1134.114138] kmem_cache_alloc+0x5b/0x310 [ 1134.114517] create_object.isra.0+0x3a/0xa20 [ 1134.114917] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1134.115377] kmem_cache_alloc+0x159/0x310 [ 1134.115775] anon_vma_clone+0xdc/0x590 [ 1134.116139] anon_vma_fork+0x82/0x640 [ 1134.116483] ? __vm_enough_memory+0x184/0x360 [ 1134.116890] copy_process+0x7218/0x7800 [ 1134.117282] ? __cleanup_sighand+0xb0/0xb0 [ 1134.117669] ? lock_acquire+0x197/0x470 [ 1134.118049] ? find_held_lock+0x2c/0x110 [ 1134.118402] kernel_clone+0xe7/0x980 [ 1134.118715] ? lock_downgrade+0x6d0/0x6d0 [ 1134.119060] ? find_held_lock+0x2c/0x110 [ 1134.119400] ? create_io_thread+0xf0/0xf0 [ 1134.119787] ? ksys_write+0x12d/0x260 [ 1134.120113] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1134.120521] __do_sys_fork+0x8a/0xc0 [ 1134.120833] ? kernel_thread+0xf0/0xf0 [ 1134.121172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.121613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.122041] ? trace_hardirqs_on+0x5b/0x180 [ 1134.122403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.122831] do_syscall_64+0x33/0x40 06:43:19 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0x7, 0x7, [@remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1134.123143] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1134.123611] RIP: 0033:0x7f8f4b3d9b19 [ 1134.124060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.125575] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1134.126208] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1134.126805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.127395] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.128018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1134.128608] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:43:19 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x20) 06:43:19 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0xfeffffff, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:19 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 45) 06:43:19 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0x7, 0x7, [@remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:19 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x1a000) readv(r1, &(0x7f0000000040), 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000003c0)) flock(r0, 0x11) [ 1134.263036] FAULT_INJECTION: forcing a failure. [ 1134.263036] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.276020] CPU: 0 PID: 7667 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1134.276643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.277387] Call Trace: [ 1134.277643] dump_stack+0x107/0x167 [ 1134.277987] should_fail.cold+0x5/0xa [ 1134.278344] ? anon_vma_clone+0xdc/0x590 [ 1134.278723] should_failslab+0x5/0x20 [ 1134.279082] kmem_cache_alloc+0x5b/0x310 [ 1134.279471] anon_vma_clone+0xdc/0x590 [ 1134.279853] anon_vma_fork+0x82/0x640 [ 1134.280204] ? __vm_enough_memory+0x184/0x360 [ 1134.280621] copy_process+0x7218/0x7800 [ 1134.281033] ? __cleanup_sighand+0xb0/0xb0 [ 1134.281432] ? lock_acquire+0x197/0x470 [ 1134.281811] ? find_held_lock+0x2c/0x110 [ 1134.282192] kernel_clone+0xe7/0x980 [ 1134.282536] ? lock_downgrade+0x6d0/0x6d0 [ 1134.282911] ? find_held_lock+0x2c/0x110 [ 1134.283276] ? create_io_thread+0xf0/0xf0 [ 1134.283676] ? ksys_write+0x12d/0x260 [ 1134.284043] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1134.284500] __do_sys_fork+0x8a/0xc0 [ 1134.284844] ? kernel_thread+0xf0/0xf0 [ 1134.285227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.285707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.286181] ? trace_hardirqs_on+0x5b/0x180 [ 1134.286588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.287061] do_syscall_64+0x33/0x40 [ 1134.287404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1134.287863] RIP: 0033:0x7f8f4b3d9b19 [ 1134.288181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.289715] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1134.290353] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1134.290949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.291584] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.292222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1134.292868] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:43:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 45) 06:43:19 executing program 6: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0x7, 0x7, [@remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1134.368062] FAULT_INJECTION: forcing a failure. [ 1134.368062] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.369252] CPU: 1 PID: 7676 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1134.369878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.370607] Call Trace: [ 1134.370856] dump_stack+0x107/0x167 [ 1134.371197] should_fail.cold+0x5/0xa [ 1134.371563] ? xas_alloc+0x336/0x440 [ 1134.371911] should_failslab+0x5/0x20 [ 1134.372262] kmem_cache_alloc+0x5b/0x310 [ 1134.372642] xas_alloc+0x336/0x440 [ 1134.372976] xas_create+0x34a/0x10d0 [ 1134.373330] ? kernel_text_address+0xf2/0x120 [ 1134.373742] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1134.374221] xas_store+0x8c/0x1c40 [ 1134.374562] __xa_store+0x164/0x2d0 [ 1134.374900] ? xa_delete_node+0x280/0x280 [ 1134.375288] ? trace_hardirqs_on+0x5b/0x180 [ 1134.375716] xa_store+0x31/0x50 [ 1134.376032] __io_uring_add_tctx_node+0x1cf/0x520 [ 1134.376475] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1134.376951] ? alloc_fd+0x2e7/0x670 [ 1134.377289] io_uring_setup+0x1f6a/0x2910 [ 1134.377667] ? wait_for_completion_io+0x270/0x270 [ 1134.378099] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1134.378572] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.379052] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.379539] do_syscall_64+0x33/0x40 [ 1134.379895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1134.380361] RIP: 0033:0x7fb639313b19 [ 1134.380703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.382343] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1134.383037] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1134.387731] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1134.388383] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1134.389033] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1134.389670] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:43:19 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0xfffffffe, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:19 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 46) [ 1134.502923] FAULT_INJECTION: forcing a failure. [ 1134.502923] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.505332] CPU: 0 PID: 7681 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1134.505920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.506621] Call Trace: [ 1134.506854] dump_stack+0x107/0x167 [ 1134.507170] should_fail.cold+0x5/0xa [ 1134.507520] ? create_object.isra.0+0x3a/0xa20 [ 1134.507914] should_failslab+0x5/0x20 [ 1134.508241] kmem_cache_alloc+0x5b/0x310 [ 1134.508594] create_object.isra.0+0x3a/0xa20 [ 1134.508971] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1134.509411] kmem_cache_alloc+0x159/0x310 [ 1134.509774] anon_vma_clone+0xdc/0x590 [ 1134.510119] anon_vma_fork+0x82/0x640 [ 1134.510442] ? __vm_enough_memory+0x184/0x360 [ 1134.510830] copy_process+0x7218/0x7800 [ 1134.511204] ? __cleanup_sighand+0xb0/0xb0 [ 1134.511726] ? lock_acquire+0x197/0x470 [ 1134.512074] ? find_held_lock+0x2c/0x110 [ 1134.512425] kernel_clone+0xe7/0x980 [ 1134.512802] ? lock_downgrade+0x6d0/0x6d0 [ 1134.513153] ? find_held_lock+0x2c/0x110 [ 1134.516037] ? create_io_thread+0xf0/0xf0 [ 1134.516393] ? ksys_write+0x12d/0x260 [ 1134.516810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1134.517228] __do_sys_fork+0x8a/0xc0 [ 1134.517544] ? kernel_thread+0xf0/0xf0 [ 1134.517939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.518381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.518874] ? trace_hardirqs_on+0x5b/0x180 [ 1134.519240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.519765] do_syscall_64+0x33/0x40 [ 1134.520084] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1134.520513] RIP: 0033:0x7f8f4b3d9b19 [ 1134.520885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.522452] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1134.523152] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1134.523833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.524432] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.525237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1134.525950] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1148.553663] FAULT_INJECTION: forcing a failure. [ 1148.553663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1148.554799] CPU: 1 PID: 7693 Comm: syz-executor.6 Not tainted 5.10.225 #1 [ 1148.555404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.556163] Call Trace: [ 1148.556415] dump_stack+0x107/0x167 [ 1148.556745] should_fail.cold+0x5/0xa [ 1148.557089] __alloc_pages_nodemask+0x182/0x600 [ 1148.557485] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1148.558003] ? tun_build_skb+0x181/0xfe0 [ 1148.558353] alloc_pages_current+0x187/0x280 [ 1148.558728] skb_page_frag_refill+0x27c/0x490 [ 1148.559110] tun_build_skb+0x1fa/0xfe0 [ 1148.559449] ? tun_xdp_act+0x6f0/0x6f0 [ 1148.559798] ? __lock_acquire+0xbb1/0x5b00 [ 1148.560166] tun_get_user+0x6c1/0x32f0 [ 1148.560510] ? tun_build_skb+0xfe0/0xfe0 [ 1148.560859] ? tun_net_uninit+0xab0/0xb00 [ 1148.561207] ? lock_downgrade+0x6d0/0x6d0 [ 1148.561557] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1148.562012] tun_chr_write_iter+0xe1/0x1e0 [ 1148.562370] new_sync_write+0x42c/0x660 [ 1148.562703] ? new_sync_read+0x6f0/0x6f0 [ 1148.563056] ? avc_policy_seqno+0x9/0x70 [ 1148.563395] ? selinux_file_permission+0x92/0x520 [ 1148.563825] ? security_file_permission+0xb1/0xe0 [ 1148.564238] vfs_write+0x7c0/0xb10 [ 1148.564545] ksys_write+0x12d/0x260 [ 1148.564856] ? __ia32_sys_read+0xb0/0xb0 [ 1148.565201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.565642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.566076] do_syscall_64+0x33/0x40 [ 1148.566393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1148.566824] RIP: 0033:0x7fcc2be2a5ff [ 1148.567139] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1148.568671] RSP: 002b:00007fcc293ed150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1148.569310] RAX: ffffffffffffffda RBX: 00007fcc2bf8af60 RCX: 00007fcc2be2a5ff [ 1148.569904] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 1148.570494] RBP: 00007fcc293ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.571087] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1148.571700] R13: 00007ffc0c585aaf R14: 00007fcc293ed300 R15: 0000000000022000 [ 1148.574604] FAULT_INJECTION: forcing a failure. [ 1148.574604] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.575640] CPU: 0 PID: 7696 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1148.576260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.577006] Call Trace: [ 1148.577254] dump_stack+0x107/0x167 [ 1148.577596] should_fail.cold+0x5/0xa [ 1148.577955] ? anon_vma_fork+0x1ff/0x640 [ 1148.578327] should_failslab+0x5/0x20 [ 1148.578682] kmem_cache_alloc+0x5b/0x310 [ 1148.579066] anon_vma_fork+0x1ff/0x640 [ 1148.579449] copy_process+0x7218/0x7800 [ 1148.579867] ? __cleanup_sighand+0xb0/0xb0 [ 1148.580274] ? lock_acquire+0x197/0x470 [ 1148.580645] ? find_held_lock+0x2c/0x110 [ 1148.581032] kernel_clone+0xe7/0x980 [ 1148.581382] ? lock_downgrade+0x6d0/0x6d0 [ 1148.581764] ? find_held_lock+0x2c/0x110 [ 1148.582146] ? create_io_thread+0xf0/0xf0 [ 1148.582541] ? ksys_write+0x12d/0x260 [ 1148.582903] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1148.583351] __do_sys_fork+0x8a/0xc0 [ 1148.583724] ? kernel_thread+0xf0/0xf0 [ 1148.584098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.584565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.585039] ? trace_hardirqs_on+0x5b/0x180 [ 1148.585438] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.585921] do_syscall_64+0x33/0x40 [ 1148.586310] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1148.586834] RIP: 0033:0x7f8f4b3d9b19 [ 1148.587185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.588945] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1148.589716] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1148.590391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1148.591109] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.591857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.592589] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:43:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) write(r0, &(0x7f0000000180)="b498b7a9fb51b8b4c8f961db0fd5cbcff162d1cbe9fdf517eddb9eb849c2cf7298432b101e8cf571653df12b82703edaea2cc53b2fbbf04c62ba2368f1741d1b653c728d87d8f38ae3d272445b52cc1763ae6f8a339a8dddf36a0b53f13f2d5980e97acd688fb64d72371dd204e09fa782fff98a718ed2d0619edb17144d40f88026472741a32688fd24586d055a", 0x8e) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:43:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x12, 0x101}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x1) io_uring_enter(r0, 0x6f12, 0x20e, 0x1, &(0x7f0000000240)={[0x5]}, 0x8) 06:43:33 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:43:33 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty=0xffffffff, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 46) 06:43:33 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x101000, 0x132) creat(&(0x7f0000000600)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:43:33 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) (fail_nth: 1) 06:43:33 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 47) 06:43:33 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) (fail_nth: 2) [ 1148.646340] FAULT_INJECTION: forcing a failure. [ 1148.646340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.647556] CPU: 1 PID: 7709 Comm: syz-executor.6 Not tainted 5.10.225 #1 [ 1148.648199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.648940] Call Trace: [ 1148.649193] dump_stack+0x107/0x167 [ 1148.649534] should_fail.cold+0x5/0xa [ 1148.649897] copy_page_from_iter+0x40a/0x900 [ 1148.650321] tun_build_skb+0x2d3/0xfe0 [ 1148.650705] ? tun_xdp_act+0x6f0/0x6f0 [ 1148.651070] ? __lock_acquire+0xbb1/0x5b00 [ 1148.651473] tun_get_user+0x6c1/0x32f0 [ 1148.651871] ? tun_build_skb+0xfe0/0xfe0 [ 1148.652250] ? tun_net_uninit+0xab0/0xb00 [ 1148.652632] ? lock_downgrade+0x6d0/0x6d0 [ 1148.653017] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1148.653515] tun_chr_write_iter+0xe1/0x1e0 [ 1148.653922] new_sync_write+0x42c/0x660 [ 1148.654289] ? new_sync_read+0x6f0/0x6f0 [ 1148.654670] ? avc_policy_seqno+0x9/0x70 [ 1148.655049] ? selinux_file_permission+0x92/0x520 [ 1148.655501] ? security_file_permission+0xb1/0xe0 [ 1148.655976] vfs_write+0x7c0/0xb10 [ 1148.656313] ksys_write+0x12d/0x260 [ 1148.656650] ? __ia32_sys_read+0xb0/0xb0 [ 1148.657021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.657451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.657904] do_syscall_64+0x33/0x40 [ 1148.658254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1148.658715] RIP: 0033:0x7fcc2be2a5ff [ 1148.659056] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1148.660704] RSP: 002b:00007fcc293ed150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1148.661398] RAX: ffffffffffffffda RBX: 00007fcc2bf8af60 RCX: 00007fcc2be2a5ff [ 1148.662048] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 1148.662645] RBP: 00007fcc293ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.663240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1148.663854] R13: 00007ffc0c585aaf R14: 00007fcc293ed300 R15: 0000000000022000 [ 1148.674675] FAULT_INJECTION: forcing a failure. [ 1148.674675] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.679929] CPU: 0 PID: 7711 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1148.680551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.681315] Call Trace: [ 1148.681570] dump_stack+0x107/0x167 [ 1148.681911] should_fail.cold+0x5/0xa [ 1148.682282] ? create_object.isra.0+0x3a/0xa20 [ 1148.682707] should_failslab+0x5/0x20 [ 1148.683066] kmem_cache_alloc+0x5b/0x310 [ 1148.683453] ? mark_held_locks+0x9e/0xe0 [ 1148.683846] create_object.isra.0+0x3a/0xa20 [ 1148.684264] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1148.684729] kmem_cache_alloc+0x159/0x310 [ 1148.685121] xas_alloc+0x336/0x440 [ 1148.685470] xas_create+0x34a/0x10d0 [ 1148.685808] ? kernel_text_address+0xf2/0x120 [ 1148.686209] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1148.686663] xas_store+0x8c/0x1c40 [ 1148.687026] __xa_store+0x164/0x2d0 [ 1148.687369] ? xa_delete_node+0x280/0x280 [ 1148.687780] ? trace_hardirqs_on+0x5b/0x180 [ 1148.688196] xa_store+0x31/0x50 [ 1148.688511] __io_uring_add_tctx_node+0x1cf/0x520 [ 1148.688976] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1148.689455] ? alloc_fd+0x2e7/0x670 [ 1148.689811] io_uring_setup+0x1f6a/0x2910 [ 1148.690206] ? wait_for_completion_io+0x270/0x270 [ 1148.690645] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1148.691140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.691646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.692136] do_syscall_64+0x33/0x40 [ 1148.692496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1148.692963] RIP: 0033:0x7fb639313b19 [ 1148.693309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.694978] RSP: 002b:00007fb636868108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1148.695698] RAX: ffffffffffffffda RBX: 00007fb639427020 RCX: 00007fb639313b19 [ 1148.696344] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1148.697004] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1148.697650] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1148.698307] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:43:33 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x4, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 1148.717079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:43:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:43:33 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x3, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:33 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) (fail_nth: 3) [ 1148.765500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1148.785225] FAULT_INJECTION: forcing a failure. [ 1148.785225] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.786285] CPU: 0 PID: 7721 Comm: syz-executor.6 Not tainted 5.10.225 #1 [ 1148.787090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.787903] Call Trace: [ 1148.788154] dump_stack+0x107/0x167 [ 1148.788490] should_fail.cold+0x5/0xa [ 1148.788852] ? __build_skb+0x21/0x60 [ 1148.789200] should_failslab+0x5/0x20 [ 1148.789551] kmem_cache_alloc+0x5b/0x310 [ 1148.789930] __build_skb+0x21/0x60 [ 1148.790258] build_skb+0x1a/0x220 [ 1148.790583] __tun_build_skb+0x2c/0x260 [ 1148.790956] tun_build_skb+0x62c/0xfe0 [ 1148.791330] ? tun_xdp_act+0x6f0/0x6f0 [ 1148.791705] ? __lock_acquire+0xbb1/0x5b00 [ 1148.792112] tun_get_user+0x6c1/0x32f0 [ 1148.792485] ? tun_build_skb+0xfe0/0xfe0 [ 1148.792866] ? tun_net_uninit+0xab0/0xb00 [ 1148.793253] ? lock_downgrade+0x6d0/0x6d0 [ 1148.793639] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1148.794133] tun_chr_write_iter+0xe1/0x1e0 [ 1148.794526] new_sync_write+0x42c/0x660 [ 1148.794891] ? new_sync_read+0x6f0/0x6f0 [ 1148.795274] ? avc_policy_seqno+0x9/0x70 [ 1148.795653] ? selinux_file_permission+0x92/0x520 [ 1148.796115] ? security_file_permission+0xb1/0xe0 [ 1148.796569] vfs_write+0x7c0/0xb10 [ 1148.796908] ksys_write+0x12d/0x260 [ 1148.797248] ? __ia32_sys_read+0xb0/0xb0 [ 1148.797627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.798121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.798602] do_syscall_64+0x33/0x40 [ 1148.798951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1148.799424] RIP: 0033:0x7fcc2be2a5ff [ 1148.804408] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1148.806172] RSP: 002b:00007fcc293ed150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1148.806916] RAX: ffffffffffffffda RBX: 00007fcc2bf8af60 RCX: 00007fcc2be2a5ff [ 1148.807604] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 1148.808245] RBP: 00007fcc293ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.808924] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1148.809639] R13: 00007ffc0c585aaf R14: 00007fcc293ed300 R15: 0000000000022000 06:43:47 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) fallocate(r0, 0x50, 0x7, 0x5) 06:43:47 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0xb, 0x2}]}}, @info_reply}}}}, 0x0) 06:43:47 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) [ 1162.481181] FAULT_INJECTION: forcing a failure. [ 1162.481181] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.482917] CPU: 1 PID: 7734 Comm: syz-executor.6 Not tainted 5.10.225 #1 [ 1162.483539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.484275] Call Trace: [ 1162.484508] dump_stack+0x107/0x167 [ 1162.484819] should_fail.cold+0x5/0xa [ 1162.485146] ? create_object.isra.0+0x3a/0xa20 [ 1162.485980] should_failslab+0x5/0x20 [ 1162.486827] kmem_cache_alloc+0x5b/0x310 [ 1162.487713] create_object.isra.0+0x3a/0xa20 [ 1162.488690] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1162.489790] kmem_cache_alloc+0x159/0x310 [ 1162.490701] __build_skb+0x21/0x60 [ 1162.491328] build_skb+0x1a/0x220 [ 1162.492034] __tun_build_skb+0x2c/0x260 [ 1162.492916] tun_build_skb+0x62c/0xfe0 [ 1162.493768] ? tun_xdp_act+0x6f0/0x6f0 [ 1162.494628] ? __lock_acquire+0xbb1/0x5b00 [ 1162.495552] tun_get_user+0x6c1/0x32f0 [ 1162.496431] ? tun_build_skb+0xfe0/0xfe0 [ 1162.497313] ? tun_net_uninit+0xab0/0xb00 [ 1162.498220] ? lock_downgrade+0x6d0/0x6d0 [ 1162.499114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1162.500302] tun_chr_write_iter+0xe1/0x1e0 [ 1162.501223] new_sync_write+0x42c/0x660 [ 1162.502089] ? new_sync_read+0x6f0/0x6f0 [ 1162.502973] ? avc_policy_seqno+0x9/0x70 [ 1162.503867] ? selinux_file_permission+0x92/0x520 [ 1162.504913] ? security_file_permission+0xb1/0xe0 [ 1162.505970] vfs_write+0x7c0/0xb10 [ 1162.506744] ksys_write+0x12d/0x260 [ 1162.507533] ? __ia32_sys_read+0xb0/0xb0 [ 1162.508415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.509560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.510676] do_syscall_64+0x33/0x40 [ 1162.511489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1162.512603] RIP: 0033:0x7fcc2be2a5ff [ 1162.513412] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1162.517479] RSP: 002b:00007fcc293ed150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1162.519148] RAX: ffffffffffffffda RBX: 00007fcc2bf8af60 RCX: 00007fcc2be2a5ff [ 1162.520701] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 1162.522261] RBP: 00007fcc293ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.523806] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1162.525359] R13: 00007ffc0c585aaf R14: 00007fcc293ed300 R15: 0000000000022000 06:43:47 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) (fail_nth: 4) 06:43:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') fstatfs(r0, &(0x7f0000000400)=""/196) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0xffffff7f}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x4, 0x81, 0x0, 0x0, 0x8, 0x24001, 0xd, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000340), 0x8}, 0x3030, 0x3, 0x8, 0x6, 0x8001, 0x5, 0x2, 0x0, 0x20, 0x0, 0x8a7}, 0x0, 0x7, r1, 0x1) r2 = accept4$inet(r1, 0x0, &(0x7f00000001c0), 0x80800) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/schedstat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x101) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) 06:43:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 47) 06:43:47 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11da00, 0x150) openat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x101001, 0x161) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:43:47 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 48) [ 1162.540387] FAULT_INJECTION: forcing a failure. [ 1162.540387] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.542475] CPU: 0 PID: 7743 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1162.543153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.543975] Call Trace: [ 1162.544265] dump_stack+0x107/0x167 [ 1162.544644] should_fail.cold+0x5/0xa [ 1162.545042] ? create_object.isra.0+0x3a/0xa20 [ 1162.545509] should_failslab+0x5/0x20 [ 1162.545906] kmem_cache_alloc+0x5b/0x310 [ 1162.546333] create_object.isra.0+0x3a/0xa20 [ 1162.546798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1162.547308] kmem_cache_alloc+0x159/0x310 [ 1162.547767] anon_vma_fork+0x1ff/0x640 [ 1162.548178] copy_process+0x7218/0x7800 [ 1162.548618] ? __cleanup_sighand+0xb0/0xb0 [ 1162.549065] ? lock_acquire+0x197/0x470 [ 1162.549483] ? find_held_lock+0x2c/0x110 [ 1162.549908] kernel_clone+0xe7/0x980 [ 1162.550293] ? lock_downgrade+0x6d0/0x6d0 [ 1162.550710] ? find_held_lock+0x2c/0x110 [ 1162.551128] ? create_io_thread+0xf0/0xf0 [ 1162.551552] ? ksys_write+0x12d/0x260 [ 1162.551972] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1162.552462] __do_sys_fork+0x8a/0xc0 [ 1162.552850] ? kernel_thread+0xf0/0xf0 [ 1162.553265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.553802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.554316] ? trace_hardirqs_on+0x5b/0x180 [ 1162.554691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.555126] do_syscall_64+0x33/0x40 [ 1162.555443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1162.555884] RIP: 0033:0x7f8f4b3d9b19 06:43:47 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x44, 0x2}]}}, @info_reply}}}}, 0x0) [ 1162.556202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.565059] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1162.565854] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1162.566599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.567295] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.568039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.568784] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:43:47 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000029c0)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000006000000030000000000000004000000000000000800000000000000090000000000000000000000000000000000000000000000000000000000000006f8ffff0800000005000000000000000600000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000631700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006800000000000000000000000000000000000000efff00"/322]) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000000280)='ID', 0x2, 0x800}], 0x0, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000002955e6886c653000"]) readv(r1, &(0x7f0000002680)=[{&(0x7f0000001500)=""/10, 0xfffffffffffffec1}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f00000013c0)=""/85, 0xfffffffffffffcbb}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f0000001440)=""/167, 0xa7}, {&(0x7f0000001600)=""/4096}, {&(0x7f0000002600)=""/107}], 0x8) newfstatat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x20008, &(0x7f0000002900)={'trans=unix,', {[{@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@access_client}, {@afid={'afid', 0x3d, 0x1}}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@fowner_lt}]}}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000003180)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r0, 0x0, &(0x7f0000003140)={&(0x7f0000002740)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000003000)=[{&(0x7f00000027c0)=""/88, 0x58}, {&(0x7f0000002840)=""/38, 0x26}, {&(0x7f0000002b40)=""/161, 0xa1}, {&(0x7f0000002c00)=""/220, 0xdc}, {&(0x7f0000002d00)=""/230, 0xe6}, {&(0x7f0000002e00)=""/83, 0x53}, {&(0x7f0000002e80)=""/29, 0x1d}, {&(0x7f0000002ec0)=""/137, 0x89}, {&(0x7f0000002f80)=""/85, 0x55}], 0x9, &(0x7f00000030c0)=""/71, 0x47}, 0x0, 0x40000001, 0x1, {0x3}}, 0x1) [ 1162.603500] FAULT_INJECTION: forcing a failure. [ 1162.603500] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.605980] CPU: 1 PID: 7740 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1162.607476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.617204] Call Trace: [ 1162.617672] dump_stack+0x107/0x167 [ 1162.618456] should_fail.cold+0x5/0xa [ 1162.618918] ? xas_alloc+0x336/0x440 [ 1162.619236] should_failslab+0x5/0x20 [ 1162.619560] kmem_cache_alloc+0x5b/0x310 [ 1162.623928] xas_alloc+0x336/0x440 [ 1162.624240] xas_create+0x34a/0x10d0 [ 1162.624562] ? kernel_text_address+0xf2/0x120 [ 1162.624943] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1162.625390] xas_store+0x8c/0x1c40 [ 1162.625700] __xa_store+0x164/0x2d0 [ 1162.626009] ? xa_delete_node+0x280/0x280 [ 1162.626370] ? trace_hardirqs_on+0x5b/0x180 [ 1162.626736] xa_store+0x31/0x50 [ 1162.627018] __io_uring_add_tctx_node+0x1cf/0x520 [ 1162.627429] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1162.627872] ? alloc_fd+0x2e7/0x670 [ 1162.628186] io_uring_setup+0x1f6a/0x2910 [ 1162.628549] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1162.628988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.629435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.629868] do_syscall_64+0x33/0x40 [ 1162.630180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1162.630614] RIP: 0033:0x7fb639313b19 [ 1162.630928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.632453] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1162.633090] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1162.633690] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1162.634280] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1162.634879] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1162.635469] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:43:47 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 49) 06:43:47 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x3}]}}, @info_reply}}}}, 0x0) 06:43:47 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) (fail_nth: 5) 06:43:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 48) [ 1162.699578] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 17481)! [ 1162.700496] EXT4-fs (loop5): group descriptors corrupted! 06:43:47 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000100)='./file0\x00', 0x288400, 0x22) chdir(&(0x7f0000000040)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ff0f000017010007002e2f66696c6531"], 0x10) creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f00000001c0)=""/126, 0x7e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) openat(r2, &(0x7f0000000280)='./file2\x00', 0x2, 0x10) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)={@broadcast, @rand_addr=0x64010101, 0x0, 0x8, [@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @multicast1, @local]}, 0x30) 06:43:47 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x4}]}}, @info_reply}}}}, 0x0) [ 1162.762326] FAULT_INJECTION: forcing a failure. [ 1162.762326] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.763039] FAULT_INJECTION: forcing a failure. [ 1162.763039] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.763351] CPU: 1 PID: 7765 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1162.765077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.766681] Call Trace: [ 1162.767191] dump_stack+0x107/0x167 [ 1162.767833] should_fail.cold+0x5/0xa [ 1162.768629] ? create_object.isra.0+0x3a/0xa20 [ 1162.769514] should_failslab+0x5/0x20 [ 1162.770188] kmem_cache_alloc+0x5b/0x310 [ 1162.770881] ? mark_held_locks+0x9e/0xe0 [ 1162.771374] create_object.isra.0+0x3a/0xa20 [ 1162.771759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1162.772191] kmem_cache_alloc+0x159/0x310 [ 1162.772590] xas_alloc+0x336/0x440 [ 1162.772897] xas_create+0x34a/0x10d0 [ 1162.773222] ? kernel_text_address+0xf2/0x120 [ 1162.774160] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1162.775263] xas_store+0x8c/0x1c40 [ 1162.776038] __xa_store+0x164/0x2d0 [ 1162.776835] ? xa_delete_node+0x280/0x280 [ 1162.777737] ? trace_hardirqs_on+0x5b/0x180 [ 1162.778677] xa_store+0x31/0x50 [ 1162.779387] __io_uring_add_tctx_node+0x1cf/0x520 [ 1162.780451] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1162.781589] ? alloc_fd+0x2e7/0x670 [ 1162.782391] io_uring_setup+0x1f6a/0x2910 [ 1162.783288] ? wait_for_completion_io+0x270/0x270 [ 1162.784343] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1162.785462] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.786599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.787717] do_syscall_64+0x33/0x40 [ 1162.788538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1162.789645] RIP: 0033:0x7fb639313b19 [ 1162.790463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.794529] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1162.796187] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1162.797729] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1162.799294] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1162.800851] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1162.802399] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1162.803985] CPU: 0 PID: 7766 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1162.804689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.805476] Call Trace: [ 1162.805752] dump_stack+0x107/0x167 [ 1162.806122] should_fail.cold+0x5/0xa [ 1162.806514] ? anon_vma_clone+0xdc/0x590 [ 1162.806917] should_failslab+0x5/0x20 [ 1162.807292] kmem_cache_alloc+0x5b/0x310 [ 1162.807705] anon_vma_clone+0xdc/0x590 [ 1162.808109] anon_vma_fork+0x82/0x640 [ 1162.808490] ? __vm_enough_memory+0x184/0x360 [ 1162.808951] copy_process+0x7218/0x7800 [ 1162.809369] ? __cleanup_sighand+0xb0/0xb0 [ 1162.809784] ? lock_acquire+0x197/0x470 [ 1162.810695] ? find_held_lock+0x2c/0x110 [ 1162.811129] kernel_clone+0xe7/0x980 [ 1162.811518] ? lock_downgrade+0x6d0/0x6d0 [ 1162.811928] ? find_held_lock+0x2c/0x110 [ 1162.812318] ? create_io_thread+0xf0/0xf0 [ 1162.812729] ? ksys_write+0x12d/0x260 [ 1162.813100] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1162.813568] __do_sys_fork+0x8a/0xc0 [ 1162.813921] ? kernel_thread+0xf0/0xf0 [ 1162.814301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.814795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.815283] ? trace_hardirqs_on+0x5b/0x180 [ 1162.815692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.816198] do_syscall_64+0x33/0x40 [ 1162.816553] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1162.817044] RIP: 0033:0x7f8f4b3d9b19 [ 1162.817408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.819134] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1162.819863] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1162.820545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.821227] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.821900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.822571] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1162.827952] FAULT_INJECTION: forcing a failure. [ 1162.827952] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.830441] CPU: 0 PID: 7767 Comm: syz-executor.6 Not tainted 5.10.225 #1 [ 1162.832009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.833835] Call Trace: [ 1162.834428] dump_stack+0x107/0x167 [ 1162.835228] should_fail.cold+0x5/0xa [ 1162.836090] ? __fib_lookup+0xf7/0x160 [ 1162.836933] ? dst_alloc+0x9e/0x5d0 [ 1162.837733] should_failslab+0x5/0x20 [ 1162.838552] kmem_cache_alloc+0x5b/0x310 [ 1162.839465] dst_alloc+0x9e/0x5d0 [ 1162.840227] rt_dst_alloc+0x73/0x440 [ 1162.841047] ip_route_input_slow+0x16f6/0x3050 [ 1162.842038] ? __local_bh_enable_ip+0x9d/0x100 [ 1162.843038] ? fib_multipath_hash+0x940/0x940 [ 1162.844038] ? lock_release+0x680/0x680 [ 1162.844915] ? lock_acquire+0x197/0x470 [ 1162.845766] ? find_held_lock+0x2c/0x110 [ 1162.846670] ip_route_input_noref+0x117/0x2f0 [ 1162.847636] ? ip_route_input_slow+0x3050/0x3050 [ 1162.848693] ? nf_hook_slow+0xfc/0x1e0 [ 1162.849547] ? nf_hook.constprop.0+0x146/0x500 [ 1162.850555] ? ip_list_rcv_finish.constprop.0+0x590/0x590 [ 1162.851764] ip_rcv_finish_core.constprop.0+0x7b4/0x1c90 [ 1162.852963] ip_rcv_finish+0x4f/0x1e0 [ 1162.853779] ip_rcv+0xae/0xd0 [ 1162.854466] ? ip_local_deliver+0x200/0x200 [ 1162.855391] __netif_receive_skb_one_core+0x19b/0x1f0 [ 1162.856532] ? __netif_receive_skb_core+0x3780/0x3780 [ 1162.857650] ? __lock_acquire+0xbb1/0x5b00 [ 1162.858590] __netif_receive_skb+0x27/0x1d0 [ 1162.859519] netif_receive_skb+0x12d/0x710 [ 1162.860467] ? __netif_receive_skb+0x1d0/0x1d0 [ 1162.861453] ? skb_set_owner_w+0x249/0x400 [ 1162.862393] ? __tun_build_skb+0x1cd/0x260 [ 1162.863318] tun_rx_batched.isra.0+0x462/0x710 [ 1162.864326] ? lock_acquire+0x197/0x470 [ 1162.865183] ? tun_get_user+0xee3/0x32f0 [ 1162.866077] ? tun_sock_write_space+0x1d0/0x1d0 [ 1162.867081] ? lock_release+0x680/0x680 [ 1162.867970] ? tun_get_user+0x16e6/0x32f0 [ 1162.868863] ? lock_downgrade+0x6d0/0x6d0 [ 1162.869789] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.870940] tun_get_user+0x191d/0x32f0 [ 1162.871852] ? tun_build_skb+0xfe0/0xfe0 [ 1162.872732] ? tun_net_uninit+0xab0/0xb00 [ 1162.873653] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1162.874803] tun_chr_write_iter+0xe1/0x1e0 [ 1162.875746] new_sync_write+0x42c/0x660 [ 1162.876605] ? new_sync_read+0x6f0/0x6f0 [ 1162.877517] ? avc_policy_seqno+0x9/0x70 [ 1162.878392] ? selinux_file_permission+0x92/0x520 [ 1162.879454] ? security_file_permission+0xb1/0xe0 [ 1162.880520] vfs_write+0x7c0/0xb10 [ 1162.881309] ksys_write+0x12d/0x260 [ 1162.882090] ? __ia32_sys_read+0xb0/0xb0 [ 1162.882981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.884124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.885259] do_syscall_64+0x33/0x40 [ 1162.886063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1162.887187] RIP: 0033:0x7fcc2be2a5ff [ 1162.888002] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1162.892053] RSP: 002b:00007fcc293ed150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1162.893696] RAX: ffffffffffffffda RBX: 00007fcc2bf8af60 RCX: 00007fcc2be2a5ff [ 1162.895267] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 1162.896822] RBP: 00007fcc293ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.898411] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1162.899990] R13: 00007ffc0c585aaf R14: 00007fcc293ed300 R15: 0000000000022000 06:43:48 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x5}]}}, @info_reply}}}}, 0x0) 06:43:48 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:44:01 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) (fail_nth: 6) 06:44:01 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:44:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:44:01 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x19}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16, 0x1, {0x0, r3}}, 0xea) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:44:01 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 50) 06:44:01 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x7}]}}, @info_reply}}}}, 0x0) 06:44:01 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000600)='./file1\x00', 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200000, 0x61) rmdir(&(0x7f0000000100)='./file0\x00') getdents(r0, &(0x7f0000000540)=""/126, 0x7e) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) 06:44:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 49) [ 1176.207730] FAULT_INJECTION: forcing a failure. [ 1176.207730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1176.209051] CPU: 1 PID: 7793 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1176.209633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.210334] Call Trace: [ 1176.210568] dump_stack+0x107/0x167 [ 1176.210885] should_fail.cold+0x5/0xa [ 1176.211219] __alloc_pages_nodemask+0x182/0x600 [ 1176.211619] ? lock_acquire+0x197/0x470 [ 1176.211985] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1176.212500] ? lock_downgrade+0x6d0/0x6d0 [ 1176.212861] ? do_raw_spin_lock+0x121/0x260 [ 1176.213237] alloc_pages_current+0x187/0x280 [ 1176.213616] __pmd_alloc+0x37/0x5e0 [ 1176.213931] copy_page_range+0x2bd8/0x3810 [ 1176.214292] ? lock_chain_count+0x20/0x20 [ 1176.214683] ? up_write+0x191/0x550 [ 1176.214995] ? vm_iomap_memory+0x190/0x190 [ 1176.215354] ? downgrade_write+0x3a0/0x3a0 [ 1176.215723] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1176.216198] ? __vma_link_rb+0x540/0x700 [ 1176.216554] copy_process+0x759b/0x7800 [ 1176.216928] ? __cleanup_sighand+0xb0/0xb0 [ 1176.217294] ? lock_acquire+0x197/0x470 [ 1176.217640] ? find_held_lock+0x2c/0x110 [ 1176.217992] kernel_clone+0xe7/0x980 [ 1176.218312] ? lock_downgrade+0x6d0/0x6d0 [ 1176.218663] ? find_held_lock+0x2c/0x110 [ 1176.219011] ? create_io_thread+0xf0/0xf0 [ 1176.219370] ? ksys_write+0x12d/0x260 [ 1176.219706] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1176.220140] __do_sys_fork+0x8a/0xc0 [ 1176.220458] ? kernel_thread+0xf0/0xf0 [ 1176.220807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.221252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.221692] ? trace_hardirqs_on+0x5b/0x180 [ 1176.222064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.222503] do_syscall_64+0x33/0x40 [ 1176.222825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.223262] RIP: 0033:0x7f8f4b3d9b19 [ 1176.223583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1176.225147] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1176.225796] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1176.226397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1176.227002] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.227602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1176.228216] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1176.231834] FAULT_INJECTION: forcing a failure. [ 1176.231834] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.232830] CPU: 1 PID: 7799 Comm: syz-executor.6 Not tainted 5.10.225 #1 [ 1176.233412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.234118] Call Trace: [ 1176.234349] dump_stack+0x107/0x167 [ 1176.234665] should_fail.cold+0x5/0xa [ 1176.234994] ? create_object.isra.0+0x3a/0xa20 [ 1176.235390] should_failslab+0x5/0x20 [ 1176.235718] kmem_cache_alloc+0x5b/0x310 [ 1176.236079] ? mark_lock+0xf5/0x2df0 [ 1176.236406] create_object.isra.0+0x3a/0xa20 [ 1176.236782] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1176.237220] kmem_cache_alloc+0x159/0x310 [ 1176.237587] dst_alloc+0x9e/0x5d0 [ 1176.237894] rt_dst_alloc+0x73/0x440 [ 1176.238217] ip_route_input_slow+0x16f6/0x3050 [ 1176.238615] ? __local_bh_enable_ip+0x9d/0x100 [ 1176.239007] ? fib_multipath_hash+0x940/0x940 [ 1176.239411] ? lock_release+0x680/0x680 [ 1176.239758] ? lock_acquire+0x197/0x470 [ 1176.240111] ? find_held_lock+0x2c/0x110 [ 1176.240471] ip_route_input_noref+0x117/0x2f0 [ 1176.240859] ? ip_route_input_slow+0x3050/0x3050 [ 1176.241263] ? nf_hook_slow+0xfc/0x1e0 [ 1176.241603] ? nf_hook.constprop.0+0x146/0x500 [ 1176.241995] ? ip_list_rcv_finish.constprop.0+0x590/0x590 [ 1176.242466] ip_rcv_finish_core.constprop.0+0x7b4/0x1c90 [ 1176.242935] ip_rcv_finish+0x4f/0x1e0 [ 1176.243261] ip_rcv+0xae/0xd0 [ 1176.243529] ? ip_local_deliver+0x200/0x200 [ 1176.243907] __netif_receive_skb_one_core+0x19b/0x1f0 [ 1176.244349] ? __netif_receive_skb_core+0x3780/0x3780 [ 1176.244798] ? __lock_acquire+0xbb1/0x5b00 [ 1176.245167] __netif_receive_skb+0x27/0x1d0 [ 1176.245538] netif_receive_skb+0x12d/0x710 [ 1176.245898] ? __netif_receive_skb+0x1d0/0x1d0 [ 1176.246286] ? skb_set_owner_w+0x249/0x400 [ 1176.246655] ? __tun_build_skb+0x1cd/0x260 [ 1176.247026] tun_rx_batched.isra.0+0x462/0x710 [ 1176.247422] ? tun_sock_write_space+0x1d0/0x1d0 [ 1176.247816] ? trace_hardirqs_on+0x5b/0x180 [ 1176.248204] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1176.248685] tun_get_user+0x191d/0x32f0 [ 1176.249048] ? tun_build_skb+0xfe0/0xfe0 [ 1176.249401] ? tun_net_uninit+0xab0/0xb00 [ 1176.249763] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1176.250226] tun_chr_write_iter+0xe1/0x1e0 [ 1176.250589] new_sync_write+0x42c/0x660 [ 1176.250931] ? new_sync_read+0x6f0/0x6f0 [ 1176.251290] ? avc_policy_seqno+0x9/0x70 [ 1176.251638] ? selinux_file_permission+0x92/0x520 [ 1176.252075] ? security_file_permission+0xb1/0xe0 [ 1176.252495] vfs_write+0x7c0/0xb10 [ 1176.252810] ksys_write+0x12d/0x260 [ 1176.253123] ? __ia32_sys_read+0xb0/0xb0 [ 1176.253473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.253926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.254369] do_syscall_64+0x33/0x40 [ 1176.254687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.255124] RIP: 0033:0x7fcc2be2a5ff [ 1176.255442] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1176.257010] RSP: 002b:00007fcc293ed150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1176.257656] RAX: ffffffffffffffda RBX: 00007fcc2bf8af60 RCX: 00007fcc2be2a5ff [ 1176.258262] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 1176.258866] RBP: 00007fcc293ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.259468] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1176.260090] R13: 00007ffc0c585aaf R14: 00007fcc293ed300 R15: 0000000000022000 [ 1176.279156] FAULT_INJECTION: forcing a failure. [ 1176.279156] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.280220] CPU: 1 PID: 7803 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1176.280800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.281491] Call Trace: [ 1176.281718] dump_stack+0x107/0x167 [ 1176.282034] should_fail.cold+0x5/0xa [ 1176.282359] ? xas_alloc+0x336/0x440 [ 1176.282678] should_failslab+0x5/0x20 [ 1176.283007] kmem_cache_alloc+0x5b/0x310 [ 1176.283354] xas_alloc+0x336/0x440 [ 1176.283661] xas_create+0x34a/0x10d0 [ 1176.284007] ? kernel_text_address+0xf2/0x120 [ 1176.284389] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1176.284836] xas_store+0x8c/0x1c40 [ 1176.285156] __xa_store+0x164/0x2d0 [ 1176.285470] ? xa_delete_node+0x280/0x280 [ 1176.285832] ? trace_hardirqs_on+0x5b/0x180 [ 1176.286207] xa_store+0x31/0x50 [ 1176.286493] __io_uring_add_tctx_node+0x1cf/0x520 [ 1176.286903] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1176.287344] ? alloc_fd+0x2e7/0x670 [ 1176.287666] io_uring_setup+0x1f6a/0x2910 [ 1176.288045] ? wait_for_completion_io+0x270/0x270 [ 1176.288457] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1176.288905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.289351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.289802] do_syscall_64+0x33/0x40 [ 1176.290118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.290551] RIP: 0033:0x7fb639313b19 [ 1176.290869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1176.292421] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1176.293063] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1176.293662] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1176.294261] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1176.294859] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 06:44:01 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) open$dir(&(0x7f0000000100)='./file1\x00', 0x401, 0x90) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000240)={0x0, 0x31a0, 0x8, 0x0, 0x3e1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) openat(r1, &(0x7f0000000000)='./file0\x00', 0x103002, 0x63) 06:44:01 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0xa}]}}, @info_reply}}}}, 0x0) [ 1176.295457] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:44:01 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) (fail_nth: 7) 06:44:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:44:01 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 51) 06:44:01 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4001) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:44:01 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0xb}}}}}, 0x0) 06:44:01 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) [ 1176.423236] FAULT_INJECTION: forcing a failure. [ 1176.423236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.424685] CPU: 0 PID: 7821 Comm: syz-executor.6 Not tainted 5.10.225 #1 [ 1176.425268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.426026] Call Trace: [ 1176.426259] dump_stack+0x107/0x167 [ 1176.426568] should_fail.cold+0x5/0xa [ 1176.426952] _copy_to_user+0x2e/0x180 [ 1176.427286] simple_read_from_buffer+0xcc/0x160 [ 1176.427732] proc_fail_nth_read+0x198/0x230 [ 1176.428114] ? proc_sessionid_read+0x230/0x230 [ 1176.428500] ? security_file_permission+0xb1/0xe0 [ 1176.428959] ? proc_sessionid_read+0x230/0x230 [ 1176.429344] vfs_read+0x228/0x620 [ 1176.429708] ksys_read+0x12d/0x260 [ 1176.430026] ? vfs_write+0xb10/0xb10 [ 1176.430347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.430855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.431291] do_syscall_64+0x33/0x40 [ 1176.431607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.432126] RIP: 0033:0x7fcc2be2a69c [ 1176.432442] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1176.434070] RSP: 002b:00007fcc293ed170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1176.434762] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 00007fcc2be2a69c [ 1176.435355] RDX: 000000000000000f RSI: 00007fcc293ed1e0 RDI: 0000000000000003 [ 1176.436015] RBP: 00007fcc293ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.436609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.437252] R13: 00007ffc0c585aaf R14: 00007fcc293ed300 R15: 0000000000022000 06:44:01 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1176.471636] FAULT_INJECTION: forcing a failure. [ 1176.471636] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.472669] CPU: 1 PID: 7825 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1176.473256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.473958] Call Trace: [ 1176.474193] dump_stack+0x107/0x167 [ 1176.474507] should_fail.cold+0x5/0xa [ 1176.474838] ? __pmd_alloc+0x94/0x5e0 [ 1176.475169] should_failslab+0x5/0x20 [ 1176.475496] kmem_cache_alloc+0x5b/0x310 [ 1176.475859] __pmd_alloc+0x94/0x5e0 [ 1176.476182] copy_page_range+0x2bd8/0x3810 [ 1176.476545] ? lock_chain_count+0x20/0x20 [ 1176.476935] ? up_write+0x191/0x550 [ 1176.477249] ? vm_iomap_memory+0x190/0x190 [ 1176.477612] ? downgrade_write+0x3a0/0x3a0 [ 1176.477982] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1176.478453] ? __vma_link_rb+0x540/0x700 [ 1176.478810] copy_process+0x759b/0x7800 [ 1176.479181] ? __cleanup_sighand+0xb0/0xb0 [ 1176.479547] ? lock_acquire+0x197/0x470 [ 1176.479910] ? find_held_lock+0x2c/0x110 [ 1176.480268] kernel_clone+0xe7/0x980 [ 1176.480593] ? lock_downgrade+0x6d0/0x6d0 [ 1176.480958] ? find_held_lock+0x2c/0x110 [ 1176.481313] ? create_io_thread+0xf0/0xf0 [ 1176.481676] ? ksys_write+0x12d/0x260 [ 1176.482016] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1176.482438] __do_sys_fork+0x8a/0xc0 [ 1176.482761] ? kernel_thread+0xf0/0xf0 [ 1176.483112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.483559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.484013] ? trace_hardirqs_on+0x5b/0x180 [ 1176.484384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.484826] do_syscall_64+0x33/0x40 [ 1176.485147] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.485584] RIP: 0033:0x7f8f4b3d9b19 [ 1176.485908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1176.487474] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1176.488134] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1176.488737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1176.489342] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.489947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1176.490549] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:44:15 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 52) [ 1190.034346] FAULT_INJECTION: forcing a failure. [ 1190.034346] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.035506] CPU: 1 PID: 7841 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1190.036099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1190.037497] Call Trace: [ 1190.037798] dump_stack+0x107/0x167 [ 1190.038111] should_fail.cold+0x5/0xa [ 1190.038485] ? create_object.isra.0+0x3a/0xa20 [ 1190.038926] should_failslab+0x5/0x20 [ 1190.039323] kmem_cache_alloc+0x5b/0x310 [ 1190.039728] create_object.isra.0+0x3a/0xa20 [ 1190.040112] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1190.040588] kmem_cache_alloc+0x159/0x310 [ 1190.040996] __pmd_alloc+0x94/0x5e0 [ 1190.041358] copy_page_range+0x2bd8/0x3810 [ 1190.041787] ? lock_chain_count+0x20/0x20 [ 1190.042214] ? up_write+0x191/0x550 [ 1190.042530] ? vm_iomap_memory+0x190/0x190 [ 1190.043120] ? downgrade_write+0x3a0/0x3a0 [ 1190.043528] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1190.044066] ? __vma_link_rb+0x540/0x700 [ 1190.044493] copy_process+0x759b/0x7800 [ 1190.044917] ? __cleanup_sighand+0xb0/0xb0 [ 1190.045327] ? lock_acquire+0x197/0x470 [ 1190.045720] ? find_held_lock+0x2c/0x110 [ 1190.046068] kernel_clone+0xe7/0x980 [ 1190.046429] ? lock_downgrade+0x6d0/0x6d0 [ 1190.046823] ? find_held_lock+0x2c/0x110 [ 1190.047206] ? create_io_thread+0xf0/0xf0 [ 1190.047568] ? ksys_write+0x12d/0x260 [ 1190.047966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1190.048467] __do_sys_fork+0x8a/0xc0 [ 1190.048888] ? kernel_thread+0xf0/0xf0 [ 1190.049280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1190.049722] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1190.050154] ? trace_hardirqs_on+0x5b/0x180 [ 1190.050568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1190.051000] do_syscall_64+0x33/0x40 [ 1190.051361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1190.051792] RIP: 0033:0x7f8f4b3d9b19 [ 1190.052424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1190.055789] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1190.056592] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1190.057230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1190.057823] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.058490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1190.060942] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:44:15 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x3fe, 0x6) 06:44:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x5, 0x0, &(0x7f0000000180), 0x8004, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x20000, 0x80) dup3(r0, r1, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x2a) r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c, 0x80000) setsockopt$inet6_buf(r2, 0x29, 0xcc, &(0x7f00000001c0)="eea23d1ed7c189a953b6bfd92d32ae02ecfc987d97a9e88475bb4c4b42deaa1a9a0fa4c97528bc97f1d75a79676f4c288613622f2b5f0260e17b11eae7793545b10f5ce8b109a1a99f5ce825e0d3c364bd30ef401592438e804c6e1b16048209f354088439bb43a19e15499a4e4f62c5e8ac5c78320f20200741680d033a1378859ef10197b2f3fdcf3c5cce53b0c9dcf9098115a9225e4d92a09e9e40a10aabf2c6ebe6c6f354e6656bb1aab0c4ff317e3289db57003fe65ddea9d8bfb7b530772f4397aa46bfcf74b48ad7eff0b0a368fa009a4d589c26aa22748e73fb87e402be62209829", 0xe6) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) getdents(r3, &(0x7f0000000540)=""/126, 0x7e) 06:44:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) 06:44:15 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:44:15 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x12}}}}}, 0x0) 06:44:15 executing program 6: syz_emit_ethernet(0xd, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:44:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 50) 06:44:15 executing program 5: add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) [ 1190.097018] FAULT_INJECTION: forcing a failure. [ 1190.097018] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.098042] CPU: 1 PID: 7851 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1190.098654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1190.099392] Call Trace: [ 1190.099623] dump_stack+0x107/0x167 [ 1190.099940] should_fail.cold+0x5/0xa [ 1190.100336] ? create_object.isra.0+0x3a/0xa20 [ 1190.100725] should_failslab+0x5/0x20 [ 1190.101050] kmem_cache_alloc+0x5b/0x310 [ 1190.101467] ? mark_held_locks+0x9e/0xe0 [ 1190.101815] create_object.isra.0+0x3a/0xa20 [ 1190.102233] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1190.102667] kmem_cache_alloc+0x159/0x310 [ 1190.103026] xas_alloc+0x336/0x440 [ 1190.103377] xas_create+0x34a/0x10d0 [ 1190.103700] ? kernel_text_address+0xf2/0x120 [ 1190.104092] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1190.104579] xas_store+0x8c/0x1c40 [ 1190.104895] __xa_store+0x164/0x2d0 [ 1190.105283] ? xa_delete_node+0x280/0x280 [ 1190.105643] ? trace_hardirqs_on+0x5b/0x180 [ 1190.106016] xa_store+0x31/0x50 [ 1190.106348] __io_uring_add_tctx_node+0x1cf/0x520 [ 1190.106756] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1190.107252] ? alloc_fd+0x2e7/0x670 [ 1190.107573] io_uring_setup+0x1f6a/0x2910 [ 1190.107931] ? wait_for_completion_io+0x270/0x270 [ 1190.108402] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1190.108847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1190.109339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1190.109775] do_syscall_64+0x33/0x40 [ 1190.110089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1190.110586] RIP: 0033:0x7fb639313b19 [ 1190.110901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1190.112805] RSP: 002b:00007fb636868108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1190.113627] RAX: ffffffffffffffda RBX: 00007fb639427020 RCX: 00007fb639313b19 [ 1190.114398] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1190.115114] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1190.116005] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1190.118483] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:44:15 executing program 6: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:44:15 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:44:15 executing program 2: read(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) 06:44:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_coalesce={0x6}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r4}) sendmmsg(r0, &(0x7f000000a240)=[{{&(0x7f00000000c0)=@caif, 0x80, &(0x7f0000000000), 0x0, &(0x7f000000a640)=ANY=[@ANYBLOB="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"], 0x2380}}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000038c0)="39bd6ac425b0a61f8b920be6d354c8bbba2545b46048f3118e208b9ae57f87bc15ac4e281f50b97513f9a8547fad1b5209f2b9412dcaf9a19eb05f4d014b303c6004fafc0212bc02282ec903627a52712174c2f43ad67fa3f42cbc706f25bd251b2f151b84470f58c77fbfee609729a51c6c80b0d4a31561beaf13ba7307b96e281525cefafdf8de884c2d68fd276b05fbcd98adc3b73ff47924ef5e8aa0d4f12625b624c1de11a9b47949cc0f96c4e7095901bbfd13a3439b41d7864daf5dd07e2e216d80970379c9cd33ccb0e895455e233dc4843ab0e8158688238aafa9771acd61bfcab8ce007355c76d2f71651e15d7ea788c47d518ef2770ef953816f9534df67faabef6321deb4d2253506948c04469a8983f7287d8a93bd85a21c1cd9f978a6c5be54b74fa7e3ab61b8d1cd80d9e7f783f52dbd43e71eb5097a350c09b4caef7692bb18d9d928fd56043a12e97a6347c9036e6d04baa9b21790cd52414a371b9ead3a6be96458968da1dbfc94a94330cc25d8cdb136128163a6f912748fd28018ca843a41c1d6ac7b289e187ea1158c90f7f279a830cb035f8f242032f07cb832ef83473e7188a847373867865737ec13ea04155e2d3bb72294e25d568638581e4420c0b229340937090ff72b6889ccd862868a363eeee38b4e39f63df9fd827da3a26efd2676f4ecd6f32a2d509ba9ffd09357a111983d722fd0164700d0040dbeeeba8dbb90a4b21031fd04765bf0f54eaf17b90f90262a550becd42e7aa3a050fc04720a7b8c0f88fe1e48b6014b874dbb74d990e52dd0dd0b6f644e4b1a3f8b81dd399285fc94cb3ca7a8c2ab7ed2c3bf953bfc739c0bea8ecdbeb016a592d3755726256916e7641c88f495957d201dde435de22e06ee761d9d47598bd525c7cd39fd5bbb6a7c456c19a1a023e55cb8549e2557c6a6c12e3c5428ce50e5adbcb824fc84c1013af4b636477f2fb065aae9b289fa389faa93198a1a87a8e03084ef808d4a1c21b0953f44241e8145a24faa4cbbb364eb49a29ff2887dc5796cb7e07f1ef9056ec6020e99b30784d9cde1a2f9f14c2c5faefa16158c88b2d7b7d0eb2e9f35be5936de7e50bbe72c9fe547f3187eab34057fb7ed49efe69d240a75763bb48c4c5b34b3a951df180ab2e75b5f8d6cea9ca436fa107fbb1ed1fdf7143db2aa2607b824f73eecbce2f5d3debced10dfa0918f40263ad1dc783aa61ac236d173e0cea8d1128f1ac2055aa0299a0bf2e1c9d2eeb90370e6726d3c6b3b74d52dfb419d8fcfc0439e773f410fca537511210c10b4d4a14165de7c8faa7817d13e674e551cbafb4115de8c0629f90c29bcdfa646e891f856f7807e9abe5d9006d326e280b631769fbe236db87516194290c69fdb8fd8b9b7b3c3f69eaa003689fc0e825fd003d7bb1e93adfa56616f2188afea0c54fdea22319a2fcfc7b95138d16b79e46386d751ac6cb474c6c1bbf6494bdafce0fe193bc4d6e43f3ae40608b531b2a46b0e8fbf08b279a3659680ffbc7a937fd7a96ea9d75bdcaa886699ba5cb3d3df898b3a144dc046c8c1ce8a6bded4426389e7f50d85fd9ce6f392bd776adc6055539f72233f4838793ff4c9e9efe10416e8fddd0f63493ca8faf1259e8e0d5d55d267a711b9ac83a8c3b8e6f9bebed06f7e6ccb2fb7ecc259809b5c20bea3b6f8a5801158ea3889eb626e37bd0d3aeaea60f749b90fd5f53198fd7e635fe248bd2e4cae714b9d25fbbadc3be354c544f97f3c5f13e707bf32de3cd3434fec820a47c534c35953e7dbfb6264c4bf43c539110e302bd3dce483981329942e1d70eb3759b42079b0b9d02562a303b2db94199f06a0517c2415a4a55ba14c738367fcbd762d5d5fd36829e17a8e42c468969dfe0dae72478677e3101d86f01ea5700235d9a8086ceed0a6686a1983aba8d0237e73914f90d6732e80a2b9a90b14829b9a685645c96d1a2cdc3b95d5e6160065c51b7ccc0325d56c73a56b059e7c3d6f4b9ca73eee7b43ff905650a2fb68aa019cdc8816ccd87e71afe7e699a3d4c69894759bb7ec9ad296383d786d005f453638dbcaf3256273200624a51920edf983bb7386548b0530955b3309715529b5277631cd94f3b8d981272fb159ee9652c4c93f7ffd8b1658cf0d21b1e4744bfd46def916aa91d5d382540343a33bfd98e1e41c5f560a6fe30e8ca43ce673d454597d3fa0abb0e84b683dc569763aa56c5a4b05965e84d9ec8ababeae4213136ee7c5673de1215662123a18047a5156c876a1c5c8cd05e580ce547f4f1faff8b1d500200bd9928cae986fb9a2eaff258d33ba55d54dbc454b49e04c98f2f4d6016399b3941b2cadac4500d2444b1798ca7b7454ca857e8cc94af304a5277031fc0508ba467e8abb15cc562a00ad56df48238cc6e0d5e713a140402a43b56de6484080998311a58981d638e5a4e33960b4a8c5bafefa3b6deba314c01e950a2504e2818882e99db7ae3b8680c1877eb27f979f2d43873177619d4a0e296018cf05d131946f27da4d6fe95a595260982b44a2c6f04200e31bb135f09bb040de26d7f9e92dd55f3c0f918c0bfb079cc8bc9182a62ba0fc48d6e4063469b8ce3b7faedb869a197d66341cbac78e01ee2e951da6bd0a2a873509225d849eecb3ce268fe974d1f1aca9fa7918e17e037d2d10d3e93eb450759a4c5cd3fb02cd65c6933f2c4a5ab74171c1f9e09591991c865cd2bee9c700f3fe84d78dcf9f2518b3be26b87922d7121bf66fe96889f4b3ccf03431eea0b2a36d6b618e367fbdbc4626f2c6972e0681ac5a4221f2f9d35ed9f081d2a8d6ef4c8ecfb65e11cecb8af949d689b44277021010ca6f588fd5bd013794408f28c76154e1b74e81d723ccf018b41c642744105fbff9017520a7cd34df679a46cd4c5bc2bce39816d2b652cfdd617d7e81e37763564bb76a95a4e13ed7aa837d6f8250646c94fcbf057c6cb67dd407b463b094a512680b25e5c397549e44681b0687a493bf0319ec8962862a2bdbfcafc3b4cc6d089b8660c84228b157086405c437fc0c8cf8f5cd1e547751817a5118df60015dd5b48aa96479080b22ed8a21d0a93c1b5e5ca4af33d3ac2fe544a81617a8224a509701a5d409766f8c24d87e41ffecf79cc4c458b79994ac8ed53451ea8a55300c03c137d96abcd1d36abd1c6c7bb2d6e7a4326e8becc824db541b863ce20bfa2b04c7306619d323b3b55ade8ec7f58ee96bcd63fda755ef0d4c9d0ad5a7522c6aae1d7882848a9c384c40d354fd2b33f0f0392bc8e605a38d1fe833c9eef1e544931c8dcbc5ffc3747627387d8c2ee55f095087792aaf0633ba2c1c0049201812982b7d809ceb1f3605732507fae21c06bfa2095f45dc566a7f85fc8a3e61f1f3985d634ef9faa17ecea2ece1d497e81e4e9c122119104f8950e191db23640bae18f4f0d4bb1d33e314107cc9cba8e841dbe8f45222b487aa0e74243b5e0f7028192422a12202313d8bf1a240aedd3b7cbe1ba09287c7acef7599aa6fee99d760b5a6326c34c6b5806803e8b25014918ce00ed4053f214010ffa517c3bded84c0d839c3f7987325079a4dd29730e090c1b8d456557ecd815a7c3e8da590e3fbfec2d44768a17446133f2b3dbd8904bd8de8e48d263edab19efee37ee9d6a9757622e332ff17b006255fb8bf13166db19ba2a4db4956cf39a9fe3a69bf8f9c4fafbe61e06d363be69a844944e3619e01cf511a02a14d8d03d342799a69184aa2050824c2b11c8aabbe04b64338e5f11ed59bbf3019a1b9d802ec4d34d06937fe23d5a931c70257f7fa1cde41142b87c0a09ac80a6d31719b07fac8843d6e70bb404d01deb7e98742cc12298abbefe1ce7331f5ad85375c2e1d2a3bc5571d0be5d7032ee3f2bb392eb5537b6de26bfb26d05672c496e386482fe180e348c3bdfa461789634d0d4a543dab2185b0ffc93be165877d97a3c85869afa0558ac98b4127d36ea86fdbde59b622ea707d828870b0b32b9be10d5df31b579115c812b900c15f20cde7d310be1c5c1b5feaacad8119a8817f2fc74c8b5a40e5f5a12f0098c652d31ae52c7a72eef4dcb931b50e75bb7d125f97b3153933378f2eec359e08bfdcc9ac972be9c5401425ce97844c4b924e33fdb8b6b007cb963880323acb35b1f2198b0609653e5e3a14bab0ff4e96f7846d225c76189bb22638ee9a4433aa68dc1848975850a7a07b2fd08f1f7a776ae2565114944fe1b2420ea3b91dd1d566d0a544978fd8cafcb0172d99fef52a3463154ffd030ac28fa6e546814667993fd557477fa417695c406e5abef1abffd63f1bdb95f184f452b1cf6cd3c07ff145158838afa9d4f5e46b41f0f457f4f80f438401302788cdcf4fdd5a6f0769f92666f587c0a7b2ee6b1f404365eca445f0c023360d192331bdc163df0dc8317e69537c891792ec442598137d3681bfd251aab93889b2bdd4ff1d72825a15a10d488fc48b011bf938686e654ca7f0f31bf1a469ffeb61dd88b423931fa53109c26e8581231568cce56784555ba6afec56d856dd62d1c5330f3c88a3d44a5d3efe456974ca58985cb31ffb7b1c50284602fb82deb996245c23fa1a1598e8c9b18f8f9fb5077daf4ffdf678954789aa3ca7612610bee65157eba739e4e786d1ed18ffdd94dc42450b04ef6df809721917183407dfb488e14f2f6424d49bb92fbcec4ce80dd3b52d4451067c3c7b4cb59ee3334ac31d6ffbc7f2201020a90df04ddbfb2e2776bc69563e113abdbfb65a3e3a5f992b8c7b46ffe2cffc02991723d6fa5d7a336033576d50dcdf4724ded70422d3e0d1042cdffb45e3d5fdae36b1c2d7a5b0531914680c63f7d98de004e28651b0641bb5886f0f149009743d5f50f1b46b126241c2fc2ff9d4cf837dbc52b2237af004a0ea51f417264d89f67aa738b2b9bb71b29f5c4822040941d58948c2ea7b67b90c7d7dd19feaaf1a6741ee3105efb53f75e58fe9ac482fe8ad1d351553cdb39d6dce2db71b942f08d77244efeea98aa116c85b9fa625cbf4a5d6d568e4ad6d0ff1425ad0bd2b184c825db5b38fe44c40770cd998efaa83f553bb339727de93492268051ef6a3152fe5991e9b05c3d88f6aad48b6b4a2373dca97f32a723f107e2489c73bd5d506814f062df37e0fa6e09b3082b04c332e46b18ab313bd297945d961c84bc002ac3c2af54ec859386c1970be01c5dfa135c6e1f63bb9c22b39c183409d25cbb3d523fcf77edbbcc8a5fbdc5d4b4d7a33d05cda1a0396f2848e486f5af63dddcb48ae8145fdc12b76e7891c43c6a619bf49cab0882a799a5d72e3fb754d21373f868babfb2a461b7a3ff2ca1876b649fe5ffbb25844fa22aa49a51ae7c3089ddfdb3f9dde270783e95ee6a2d68b131e9ff97aaf776eabc84576fd82dc0b6acc3ec9903ef315c3be4e12276899af1df0a896349cba93b8bf02c305e69b58fd8309b01cee2d7cb326b783aab6c1a7f3056f485ca99fc5c60c2bd49775bc05346dfe971ec49c751c1a5fd3ecc07984cc1b43cd1ff3681d462775ef5b798c7fa2147107b9ffd137af6095374d0af6a629524c3f2788e084320b93fb89896c75f3f5efd1ded4e24407b4f052b07dfc96db47066184ea4735a92b45e42267234d2e0d663669640de0fdf46cc7fe8bb6c8471abd026d7d585a10a51c57fba5fc3f1c89efbce7f1724b022f5aa08bf86371b12900cd76908e818c067f85e57b39278b4643628d4b135a0965451c9b781707cced6d5358ebe0904a7273fdffd104daa2396c19efe546b021657", 0x1000}, {&(0x7f00000048c0)="cdf142d6ed580af2987c6003f26071ea4e66b3ef8afc2fd867aeba9a8643238fb66750545b2e26d3a2342c080ea54f168e488c39734781fcefe8fb46f96dceb5fc14bbb5a39e33cf59a0569b9776fc53f1b5a41e723805f6db91bad2a73c6565843155f5c98766b6523785f7df3de69a50005accc676c24b0a77b89f5e4235636c2233aa62d2d9c66c80cb636c56e874a45287cb04d87b08", 0x98}, {&(0x7f0000004980)="3b8d2368f62e9d399513bace7f42721ae276db2916054028849b6f93d52cc20a3591135c8a9b7c20ecdcfb6aeee2d2c1d2d691c33dc95894d64fe34ba7e1f6a3e44bc6b6242b67691cf16904c974eba4c8df38d7be67e44e588261bd4aee9b1cbc15a0d0a43a7aae4617326da781fc04a7ed867b2aeda004b5cf5612caa43ddd18a7f18d1372b9ca53d489b8545cb750e53e2195d10ce7f02d510e2804b513ac6b9dfc0f7c7f3f797538", 0xaa}, {&(0x7f0000004a40)="73daa47f9d6845fb75b3c17ea23da22301b5dc3a7dbaec85eee294aea8d582d0a0171cabfed89bce1b140a8690cb55498d1e69f1701ae952b5d031b1c04b415c4866d87b5da7b99123bf681293d3be238ebe427161ab22ef0cf1133b07d6d8b18a86e7229982da00bd29bf80a68f5acc93bd682336ebabd9", 0x78}], 0x5, &(0x7f0000004b40)=[{0x1010, 0x111, 0x3, "4aabf351fabb7fe9f9e8b812234e10d80199a206360c053d6832f01a3b8858428ded2958fe48407f58ff45a884cbea955e21932beb55f929a93893cf8fa66d82945a30682b434d41e6b284cb311ffa52f646016208b295c2a6c01ab2bdfd4411064940a5ea6d2e8afc5d6a89fc4da43607d9164188b6c703879de60dbabad4aa7dfa1fc929621037d70a46e375f0fcbb110112edb88aaed6ac2f3b9f62b9cf9aefa53aeba1d21fabd7adea7e5ab1a3ef226852356c6865b5b79ef87dba267897bf31779b410aa4f84248314443add1e82b5db6a6de740bb1c7a317c4e45adae75dff14a4b10f86740dcdb44244588f5ffee85f32131e89070d45ad0319b448611c86fcd9db339cc30bd9f19897104106aaad171585a51d51c3c05539de87ba67c0753ef58d0111deb870e474c576157cab831cc691945cfa4ed842b7c26741c5be7526d35370f168bc7e6555d9c43780de1ef6ac88181f49abd495578d04f68b15330f59f7de02790d4da11056a1480bc72a74a80f075e988fc6d2552ec52ddd0ec640fb8fe03828c1d18b822977d0747b21349a78707a42a57e8b42e81dde82363beeb3f26e5904e876d3787c7a60c0270217f3b6f5a6a8632c0aa1ce3fefc584f374392699ba74ddbb540c2926c374a63bb0b714b743afe9babb0be8c34b392d27d36a675d164854eaa4cda11fd795d4e3edf7395fb75cf6dd6dcb5fef5767facc03733c99af545d56d3cb6d0b25624a6f3bcc0b8df4e80467225870136de9c03cd0d67d9838f10fe74f137c4fe86689af822f08c909e7b669fb6a5be80f9856ab414586123beb551a6bff1fe69e2d7197f68ea9a0b87f50dd5dd6389d39812bd270f1670802193164e6b8a59edcf725b83a4666fc1c6aabfe68dc99aee4d6f8f18373f14f86b797d46f5720185a8bffa1f12c508909e26154a01a2897f964cfab8960ddc6b160f4294abc62e26fd4c8379ef6658730ffc502299076c18b670a68a80260e47fa306ceb506ef7376f79f9a35fdf0ee9d4111c3c80fc6fed1406fc605da1924ee1bb92f9e31fce47e5c3b40148bf41633c3788f8a078670b9c73a0ecf8fc9580b8f09e15bc87d03de79d04c016fdca24e66f356d38ef1e5a2e493c20a7dd7af85373035ab650542fb994676e2af4b894a009427ab336e573646659d54333f8f3d17b46bac3fc3ea470d80b6de54640f194831021e85b46747bab36d71d2c24663c4594275f4e679a3e32f42e7f696855ac5d9879ec43f60059d6d63adc84877dad4db90722d53af2a8f5a14b814074d4ad48fda8b32bf62de19012675449c42f2c560c7a97adf6017d883c5581278fc0f5d348981d8c0586e8508d89195d568013e4d66137f32bfcc53917f10b809bf7c0f6ad923e3cc1c5084bde096c5de28165e129c46f28697734c61a3607d4a946793994472874eda67b49729f306f94d1b1c3a4c070681e731e1ca5202858470006fbb14822a086cc9636c4586280996162b214762fdb4b55a482044791f351a5e6ff1ec419428507c29c019e04a0c62d29eeb39f44d5345ec0b2a52958d93f7eb34f422360c2f1a5242da84291bee1464779e04cd8b90d9ca9229ef3a7c5fb62e672b7b9ae60754626320ff19658ecf766aad289a1a1427c68e4cf092b591525f913ed6face166347813b9c5a3e2743389feffbd9aa185d8f4fb1f7b41fe455c142a3be9de21818e243abf4b7c01b7b1541c11b4227769d50933d421ef892f1d2ac3cb543ac2e1696c54414f20107907714e3d93044fc26a84f25ae0de74ee70b78b3b3b76e8a80fc42f8eb043d43fcf45cbde401d56abdae2fec3620598e2a4de01f63dd7ec80d4e3b4a7254636a0413073d711a729d7e6469fda2427616a7d728efea5729fb85f5c90f251e93442435189f901d3d79a6adb76ad5a5d5603f264a2e75417bbd0d0d2719f9e15ee69f86f41550eab3100e93228fdcf405bd3c7b58cd7193bf7132be5d55346d112ce5ee5e9dd6e09f2803eda9da02ae64eed8cf0b91595c08724b6e2c2ca124d144cf6914fceb16bdb95d71c83719f0bf4e408b69a20d808d12601843bd23c9766547191a8418b2845cbcfc118592ea4d457540efc860e081877b3abef7ea0a67706cc6ad3dafe3965b59a6f0d9fc29fa4f516507ee6e0bf0a6da40a9769bf3a92940ad6b405c2e96cea1597f0850fe7c3a525929e53fbdc12dd942b6087ecbf5c28f689a4632e30f3d9461dfba5a2a5e23e7137de06055e78fee0221499467209f2d05e9c435ddddc06fd2576d6fa26927abb8cf5c12186b17e05b45e05edc9f237b5c6096357cc262eeefd7791c7f66cfe70e4208987af220d97100671504fe9cd4689ca02f6f4874cb7bdea1cf53a22b8b54e04ade6a09f0a52cadc3bb4cbbc7c177bb4586a6af4e5e56987fc22eb8c830045e3733f746d80ca04b4c6134ded3b3b7296e70981167dcf34132f7a0292d93af45961fffbad8bf201c109ff8781cbcdfee18627bf4a94e0a87ae89a09cb9cffe0484387ef9f9a3dbe18d343b503d88f15403c819244e362af1a12abad8ffeb835129dd3f46afb0e40473c01119f850931b442866335f7d6c80f927765de7943ca55089df1126d359a6f4ad5c32ee9bfbf65711a4510e383e28d0577bb508aaa6b89d7ca4675ebcb2ca4371ade5651c0875b45ee78229c610477b01b86ac9705c7bc473b344d0b129394ace80ea6ae2ee4bb3230b187184426fa2aa8c1ba573fc5787f7586bcd6a958a04c06398c661a3f470681be3b09d5c97836891adfbed0ba531860163bd5c867092602114574f2419ae21e708546c2e2f274167f21b4e0b859b012f0a44253a49769f09cc0e1bf24c1b77bf28bdc568fa1fbf04e751ecc87147756bed40187a3728d35ae56b23e4fbf09af537576a6c13fa7df38990c8f1936184552c846679e8146aa11f2019060869dc629c02abc26a965e0d578e38405b7b25a9eeaf993c636a038ee6caad42795533203b6bccc433a21da7ab8353a2ea6562014b2c4ee2b4c3c301a4f6b616e615cb127309b73cbb1b41eee738bf46eeb5711f145b6c7d18c546f67afa320ba2aea883f1d93291e493742ca3d17e60ceac080b9a0773a68c030aca2b48ab5cc18d65d519daa0c202faa7298a447e30000689d333c40be23df55f07b429574da1dbad496451ac33ff8c11c7f0fb65912db2291407e1c66d96452c4003c683ebabb50a49a4d5bf04dc18ca41355763fb3d2b8680afcdea732cb66c7bcba8c9a80ef7ed25ba4c96b0f9f9568b23156f811b2ee8e1ce43f7b6b9742f5cc73d48f26003fa95bd0877a8abe0b493ceb3cf5e9c2769973a5b22c8d30a8fd72a146d2758bef619533cb920eaed0b9f48b6c9b2c7b2d32d19df46ae5167de6de43375a7a5b37f865082574083df7d9c0090790740c45511c123eebbaf7b2d5ae638ccda8a161ba47f92c8ec763f3ca4de0f36d85c2c8dbaa9c432d88591f0a61a3ecd74b7e0515a19d3459b76e37ebfd2d6ee64f93d31cd33d58c6b0573a78d8ea74cf4e45eed0bfcfad4535d3eadcad12485d312158ff21a167be57dce0cfb32d3eab14451bd41858c24350f40d147e676c3da73a20e76170f6b4a089c7b620896fa576ca5476a314d2982f694471976b9b36ed994f951e216d206425a1a6be2723a892f3d16f0353a7227ddfadc21781648ce8e623305d9e243c01e4be980a2eaa61c7a13e69155ffc41de7930e762917dcdf6ecd2ae3596bb7f148bd48f00b6b9ac4a362a70b84844b59a9cf5b67fead2509092908ab0bb6fc4054ee809dbc1a9681711d26f1146de659520e8884e91f782756b0bf095418ce2c577acd226f8c52b02d8f4cc9257688667ba3389b2a6de1b8da1ae29d8768b5fa5f3ae523b589edd47ac550a4d7ea11478746618fc54ded3aa9557e02676977ed19a43528c403302881ba9880cb4ca75f78f2fab0ccb033b85e4d5c5849f932b139190bfd9092d38467d8772750b8d16d45b0c506a786c6fa5ef5797a2e3c306777559cfb43cd07554a86de5da38e49d29354220a674803683b58511dd2fba7096c0a3ae0e8fb01f48399acd8da99e71fd9e88c1ed805e6e3470194965f4072f0d4530eda1ef2bfead65cf2e42ff01cb1ea9f496b067aecb6f38b43764f7c3a04cdd82b22a547a0860c04bfc6b4835ea72009824f518c7933a9dab4604d3735b964e1e5b2985746d1e64cca13460d39b919621916d8393e196201bd66a86b24d9ce59111dcfa015876b59a1321fdfa838d9ddd6e5b32f902d98d0d712c8c5a6c1c2b4a148c891287850c5fafd942f55ee2c55491337fbdb8c540f744144fe242df0699914ef9a24eb99afa8762b8f95a895b8d9ded47ef6cdc299a6abfcdd23d6e1ed3d54aef37bab594c01767503908ea5251f6d20c8a0196bda78f8741e73c7a0a04f54dd51fa48baf99ad7aaf731b74a3e512057abd67596910fc4e746e4f0bb554b94b4d25d52898f6bc5e489c269851b6d8493d261987fcfaed5fb02f65e0b050b2cdd40041cf4097c79b0c2a418feaafaa438ed152ee8400998a8f7447df30a8a2439f7a9f4468f6c0a5f11551c4c73570eca7536b59e1030247ffdff81776153248173fee27b0a0d41ebf3c4cda829c10fcbf4a91fb17405ace81b1ffc27597a93004ab0014abec2eb7fae1ff8cf4b388a6740b97e2810ce4e15635cac68fa77b99f89ac091ca1d899b8cd649fd02904c482d052ff067b4c2fdee089f4e37adb8f67c1537193133d7d950e25aa1d437d02a29b2d2400d74e68dfedf0a932db4de47050f022d4035a43451b7eecb99a501c04110a58961651e4d0dca96ad1553ce1b22b303e4e0eb8607cb8b329a0815bf21b7bcdbc48020a9a0214f03abe2117b0529a28ac1f5e2d516345d48ab32e107375e1a8407545274e7558cb1123398ae29f3ae199c79419e4328f171d667f28622a20daf1f5db26cc4ad20229705a4d7601895f0c1191f560149baee921c0cd599f6e29f26dbf815cbe26f792a6d44c66576b7bb624703ab92f47c33f05a9a9cc20797d59dcff1f0f23b56783d9b5fed1e1ad119fcbf224145c4f1d750e821050f2dea30f0ad9088005dca633f9e146d4649858bd58a7ad6c0f861863d1b9608fbef7eeec426a2505433bd0e75ebe8b4594ca147ee9fbd5e39834db1cff7cee84df4cdd453148459f426a496f5552af40b629fca3083e8d7c7365853e22ab331060a9f9f3d7f4b9b53d9f8f9417ddd509e6962627084a797f9d92a2965fde8e3779f3b493869757a170d70c742a0382edc46f296239101dd246a60f154f745ae18e76b0782ad659002a1680d272b114dd358872638061a00a550c3b8744dddee1496221dfdcbf66f0620bfabaef2dedab99a48b1efbe938311e623ff63da07885536d9963f62d09e2b173c4b64990cee2c3c96dc3e949097f2178d1b3f631c4c8461863b0affc16a3115bd194d761a792c3f1c01f19181bf374c9aa4f5cbaf111c80db709315e5396882e8340bd4c4d60d96ff939ab0455a5b362349f339749f2854d493d8fb84aeb47f4e1441776368e0e8b56f9e70ae2fd6ca60919985a1631100928031f556e6b5cfc5a68b9fe3a9bd2b41b8c0614724fc3624aacd794e078a514bb27fe56b3586c8e3cd571adc2ff886a158897e0db9cbdeec4c50e7a1f86ffcfc7bf798af4eeaeef11e16b8c560d0dbeb4fe87e336d5b9de402054cea430590344bb668afba21f4647faa95b8e307c710e413d0911ca353695ade8ffa0628c42e400642338ad8aea736230"}, {0x28, 0x114, 0x4, "3c72c8912a3672f2f9029ebb639f10155351"}, {0xb8, 0x11, 0x7, "5c2b3fc045f255a4bb4700ede32ede9a74d9196c5c5023a920487d43c4dc7a6b1783dd4c6d89e966186dda56c9d539ca13795a1ae60e5531682ba097ed1530b3cca63a646aefc728c7296db19a61d2ef8be7d913da02fbde2e7aca68c681aaccc17df2755f2b221a8df892c1a05df62b1ab58b934aa96b63d97542ba92a422d4394b8d48ab3b526032a14c65b047d1dc801e06065d1a17bdbbd6b0fc73d0fe07066754342e"}, {0x108, 0xff, 0x2, "41987475497357fd29d88ac67f2a4c05df099935c2dca6d838930824300494d994ab81a242abbfb06aed65d1b6a51d1081f57e549900c3d78aa9118e70ae303851103d52f29b04dc4b50288175023bc43f1b6b608dabe620ec26f12873850034a895bf36397a341f424f54eb8c0bdf1816cc933c596399f19c2e74b617a7bb09834ec9f7a203b719b849dc37481ab21e434934f12ccedd3f19f9ae4303479d114756de020bf841516eba8a1a2ed0b479ede2ffb1846237bcedf0f7888272f7dffe634aab75b51c786f7b66688bfb4c624cd1cd18bf337d40b4555fc28cf7215c6cbf80406e8dc2b288ef402da25f9751b3d9ec"}, {0x100, 0x3b, 0x4, "dea27e9f82a729a3b837762771974e539a381b7239b99c75b531686f6607b93ad0f1ec3499761fa7056fa46e657b6b502d97b6d0426f35136e27ca1b9213f0d3817ca92bc53169c5bfe23ab1a7875441ae1da26337b4c30a4673cbf6cbe76233c0a4dc97cf8c6f0350c4567db0bb936074b4eea9bc78a0cb1cbfc09289cc3a290cb14c7af2abb9c234969b58926edb22e8df4b55687889426d72969e47fd4de60cb5bb78fd5daf4fedc7fc6c0dd486e0dd366d3b4c5eec62f782409619fe9f8390dd55bd3161341676c52be8ffcd89afa9e0f6f6b0a128d52913f9e5aa5e54ea79b15df2c8033286dc9bb3"}, {0xb8, 0x1, 0x0, "5aa95fe7e965d8c4dabf02c0bfcd300c3088e3ba1b1bf0226861aec453e4383126cafddd04c5bfd2ade9ae863c848122808a78f5d3376fcd811f77f5a7a1e9a8697426ad6dc3d99c9a070bede54ebc82ce6276ace39c138eea1019ab0c432956123748cf5917fc8d4e608cd4b641d368cb8d58b5c7160da18b98cd202575923ded9df1f8cf18f07d74921e0a85435f57edb0f1dc5912b32e8ea9857a3432c17d2d6ff8dd9ff7"}], 0x13b0}}, {{&(0x7f0000005f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0xffffffe1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000005f80)="0da3a95823f93e4db26f2c081504ddecafc2a504cc8bc37c7d2068db4c3863d6d009c59b313ba79d39a8c33195db8de1522f7d2727592b5892d4b58834db239fa9160324167130538337bc5e45334c955f729ec66927e0b9d13e52e298478fc3f64d66c1877ae83b8ee19a10d1727684cdce465c51204e3a6fc80708ba5b0ad9d5efbb29abc5d080b5f08046808994dca2fbc5f0297a8d044142891e377d155ac669be0d5a0f085c94a3609d3d7d6ce9c4c0b5c15686ce8d011f19a674a5c61e612b012360f8f3e6f32fdb18509fb058ba3de5eb3c3f739e73f3a6a3", 0xdc}], 0x1, &(0x7f000000a440)=[{0xb0, 0x3a, 0x7fffffff, "73feb41163073ad7fefba8fd83d38430715303afd3fa240818e8064a90a6b40efb0349c792fff582f4ad8b72c88f20e2c2a75d022bd2bc78607ccae972cb000065485a0de9b6ad3f33d67d999300302a03c7aed92c64e30cd3e459ba606f0999e17133a8ad4f53f6fa1ac6125928ac4ab643ef91a180d924fb312b133fadd906e2375bab9799f5201d724f4fee6d0e19c78a933400eee9380aeec1697ca13800"}, {0x98, 0x113, 0x1, "8e8e148d5d51d71e2ae323f8dcc46b879a42a062ddeb9a7d92f4450553367d8a283749724bfb177c3715c18d04fe34d1bb1060f602787d8342102476da1873f5b1a6047dd8553104ad02b5ba038fd7380c37454db60b2a2ec388f314deee10e58ff426bea50b01f629bbbcb1c4005049d003a9a4365d72e4d995a2637c28a48112c01a5d5296"}, {0x88, 0x115, 0xfffffffb, "583bda6534ba898454062307c2565b47cf8ab388f420fb674d8b92c0d920bb081d19a800a75e38e8ecebbb1700d20cc6fe2bb8b9850104b0f1a4e6617ef18430502071bc3c3bd7cfb450392810b550f8ab19f35913c5c854b460ba20dc416425ddf0877caea833a889263e460e2bb45c35275b9d"}], 0x1d0}}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000006280)="da76779f6404b5b66db8b6e4abd3b218fe1c7c6e818bbe581293306ed23af0397952e996f029efa1715205cd56cf19ae091cc7f481387d98dbdf3e075e1d53e197ed5ee5423b0ef725cc12c4f90bb6bd11c4dd65c6f436e30a1d36c01baf09", 0x5f}, {&(0x7f0000006300)="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", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f0000007340)="52f5c34caac0559c5c2617178da7e9b2dbc4b81bba5cbd380d5373effcee7ccdb11124afa96501a9a9fb9bf0b268bdc0767ae3e7472ca627a6f1edb714975921bd98af6952d9dff57fd1775a11518ef596f2dd2203abc51dbfbdeafb3c2195f0157d6ae2f0c597371fc27e26a225c69460fb0070c2043a76941398e8251541fb2eb4970cab1d9081d53ee3d9eb2a2259adce013b6c8a3eb89e3273ed7224fb8158727d2162", 0xa5}, {&(0x7f0000007400)="4e47965617daab68df24ffbf6ee0d081c01dae741b1ca893dc006e5981ad505ce6d300337283bf6924e22845d906a76ddccdc1a976af8b3e6ae8d595f3192a4ea412e28fbb245e1c1d86dd63259455fdeb7adf391e1184512df25ea51bf662d6799c6b7faded0037d1b3712153bc760ebda3e75348ad35dab0b4dd2bd6bf4073031c4e6430317da1458ac88c64a0284a859a4d66066bf9d487be74e4985755d289e328833674393d13b39fac705bd8f2ee88fe627a6d3090d3b8cb7dc5273fd45400698213b3577582cb8a375126435254ae3e49966bcf07c2b782a8cf0adfe8a90b0484be80e58a936224fa", 0xec}, {&(0x7f0000007500)="19054688e6359cc41fafc2d29135d6bd3f492546c1f808329583a5d325afc23007cc34cee017f4327d5407705035529a35d72d5849bda82b863ca7a993128c1ecba3a82a2a84663d74111716e8d8815829393ae4c985c7ba0da0661d908431c503e5e20fc748a13b7c01f09299a0244f00e276675094655f2df082c6db0ab6397a", 0x81}], 0x3, &(0x7f0000007600)=[{0xf8, 0x1, 0x4, "662f3eab20a1dac50eb7915cc4c744bb61ddca2e40aafb1aaf5ce74d5bb606d06ff378fc00fd8602dd97ce522dd5350b45aa3e198b33d7ff4a6cc6f8341905a08b0a631f0c548cd385d9835f4d27c7ef657190800886a67b349c52d0ed4ef09ff1b2532b4682a69fc9d5763286da97c2191b18a2a32243cb77d388fb00ea7da19a37c4915a118ce5d53dfbf47cfc332083e28ef94712ee87c3ea46fa50c94b5a7106dd889279557733546fc92f496f157e5efea3593ad4b454b0a30ef40a86811655a7c0ea4213538372173af75cac2856ee8149127f1d888046d81e134b7b3927"}, {0x1010, 0x84, 0xffffff7f, "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"}], 0x1108}}, {{0x0, 0x0, &(0x7f0000008780)=[{&(0x7f0000008740)="e342aae18ebfff3fc68e7644efb8033377eae85fdd58ce8dfcd65cb20f22a49677760e5616b418", 0x27}], 0x1, &(0x7f00000087c0)=ANY=[@ANYBLOB="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"], 0x2d0}}, {{&(0x7f0000008ac0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0x80, &(0x7f0000009f40)=[{&(0x7f0000008b40)="0f90cf0062d096e61df66591907fd280c55dd4a29f10022b6c91f353ac2a685fd3c4ea4e86bb2e3c21453003d8505ef53080352040dd963af933dfd0f1390fff12e96472a8efb24526e683637ab60f3c16473fd861d6a687ec505decc3869bbcb7b293da4dcb1e8a6f829661eb8381f2d7e70269750013d0056e21d75888210c18", 0x81}, {&(0x7f0000008c00)="9b3d607878bcf8ca525d61af79c04849c247176a1655413ddb0774c45878cd27f3", 0x21}, {&(0x7f0000008c40)="8c64e2f6a4879632bc097f1cd6ec3c87330545861ac232bfbd26599b726398b5f2fefff26f2bb2824af8f59a33b4c2ca29bb85c6124aae94a5071815461074b670e5afd6649a3104f58fa6d52ad87e8f9b09873bbd6ae845362a9760eef58f3ea9e87f1d36bae22df1df7932cc2737a5aae0b62a55fe1451fa2f9e195e3e235f617df540322c", 0x86}, {&(0x7f0000008d00)="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", 0x1000}, {&(0x7f0000009d00)="f73768ad913b80484db302ecb31a181a4e574a5ebf301ca9c684885c27de43530a4817ca4b60923b472e1e36deb9945acf540800199f28d800bc770ce30b3f1f21d3f4694c0c3ce99c583c58c22c419c93a4af1f2e968c25e5ac1057d36f88f37ea397626e5a4a48c3748fc568f0a2d397e4b968182b221c3632d1eb9f2f6dc080b720e37587e9499db452cc322185d3b7d729", 0x93}, {&(0x7f0000009dc0)="cbfd4dcf710d706d283f78310b0fc7fd4bb6370b39319123147365f148e6e9d8a9fc297df5ebb2be54c7457e04063bc42339e654e672d4127c7cf2c6f1ac732f0bcfaebf78442627738c8456d5ff4c456c9c3bf086cfbb80a3847ade9302d2c28706428ba0586e24773e3629c3893093ff7a43d6bc61702ec92ce25f6f67fe8567bb54e9d1cde6e7271f54b4b1c14115f629e053cee397717cae294c045642c67eca7fd3c4330db0f5bd6dba6769b39da53699eae5ee685ad773cd1de57029d2f345034e37f5e0a295f1673cdc8d07d21e78f16e50473d3824efa78eacd7a8d8eb21980a283ff5718619a20f56c836e19426e550a7674132", 0xf8}, {&(0x7f0000009ec0)="2a23ce4cb95b1e1b1e5b6d3830303c0985c6ab854bfb3b01c04c08513315fd9e30e346f074fce158f886c5ad77972d5c438aab5aaf7c6ca1d926", 0x3a}, {&(0x7f0000009f00)="063646f9fa58bc6bad", 0x9}], 0x8, &(0x7f0000009fc0)=[{0x10, 0x10b, 0x7}], 0x10}}, {{&(0x7f000000a000)=@ll={0x11, 0xb8763d65857dc6b0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x80, &(0x7f000000a140)=[{&(0x7f000000a080)="d4d6dfadfe094babf42fc31e1cbf9f873bc1bac4535864de29cced325d1655d8f53e98f5ed345ae60bdde2ded28129c284373355f35979b4a38c4e4f2e37ae529d0b9efa30947a5a6396d305ba5dd2a06ff8b00fca0710b913e9e49d5a6d3d4e6cd4515e9b49773fb7d3ebff39fc1b01e0de72dd3ecb29d00558a60a91b263b662535f745ead8b2005a595c8154495ce45e72e1825ecc02c77f61e391ce456a531cd769c9814b8961c419d", 0xab}], 0x1, &(0x7f000000a180)=[{0x88, 0x88, 0x6, "03f1fe4139a10ced25deb3c02910b0199dcaec6ded16fc3bd30ae1761d1d205f0e08f458c089d7342985d62e22ad704578126215fdf8951e3ab95c8bc30b4c853d96f38d74b490b14e9846c1ca129be50ab30b210269bea85259305242413dc3b8d18a2d6eb18fcb9efcb0f1f9f2fabf386feb86257d"}], 0x88}}], 0x8, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x40000400, 0x0) 06:44:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 51) 06:44:15 executing program 6: syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1190.327617] FAULT_INJECTION: forcing a failure. [ 1190.327617] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.328800] CPU: 0 PID: 7871 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1190.329400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1190.330205] Call Trace: [ 1190.330453] dump_stack+0x107/0x167 [ 1190.330900] should_fail.cold+0x5/0xa [ 1190.331245] ? xas_alloc+0x336/0x440 [ 1190.331639] should_failslab+0x5/0x20 06:44:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) creat(&(0x7f0000000600)='./file1\x00', 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) copy_file_range(r1, &(0x7f00000001c0)=0xfff, r2, &(0x7f0000000240)=0x9, 0x40, 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:44:15 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 53) [ 1190.331993] kmem_cache_alloc+0x5b/0x310 [ 1190.332475] xas_alloc+0x336/0x440 [ 1190.332845] xas_create+0x34a/0x10d0 [ 1190.333191] ? kernel_text_address+0xf2/0x120 [ 1190.333680] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1190.334153] xas_store+0x8c/0x1c40 [ 1190.334493] __xa_store+0x164/0x2d0 [ 1190.334877] ? xa_delete_node+0x280/0x280 [ 1190.335261] ? trace_hardirqs_on+0x5b/0x180 [ 1190.335717] xa_store+0x31/0x50 [ 1190.336036] __io_uring_add_tctx_node+0x1cf/0x520 [ 1190.336484] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1190.337000] ? alloc_fd+0x2e7/0x670 [ 1190.337345] io_uring_setup+0x1f6a/0x2910 [ 1190.337807] ? wait_for_completion_io+0x270/0x270 [ 1190.338241] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1190.338767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1190.339238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1190.339757] do_syscall_64+0x33/0x40 [ 1190.340142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1190.340644] RIP: 0033:0x7fb639313b19 [ 1190.340980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1190.342708] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1190.343385] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1190.344088] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1190.344768] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1190.345402] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1190.346114] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1190.350576] FAULT_INJECTION: forcing a failure. [ 1190.350576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1190.351695] CPU: 1 PID: 7873 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1190.352300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1190.352998] Call Trace: [ 1190.353243] dump_stack+0x107/0x167 [ 1190.353555] should_fail.cold+0x5/0xa [ 1190.353888] __alloc_pages_nodemask+0x182/0x600 [ 1190.354295] ? lock_acquire+0x197/0x470 [ 1190.354634] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1190.355149] ? lock_downgrade+0x6d0/0x6d0 [ 1190.355514] ? do_raw_spin_lock+0x121/0x260 [ 1190.355890] alloc_pages_current+0x187/0x280 [ 1190.356281] __pmd_alloc+0x37/0x5e0 [ 1190.356609] copy_page_range+0x2bd8/0x3810 [ 1190.356971] ? lock_chain_count+0x20/0x20 [ 1190.357364] ? up_write+0x191/0x550 [ 1190.357688] ? vm_iomap_memory+0x190/0x190 [ 1190.358051] ? downgrade_write+0x3a0/0x3a0 [ 1190.358413] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1190.358884] ? __vma_link_rb+0x540/0x700 [ 1190.359238] copy_process+0x759b/0x7800 [ 1190.359625] ? __cleanup_sighand+0xb0/0xb0 [ 1190.359996] ? lock_acquire+0x197/0x470 [ 1190.360351] ? find_held_lock+0x2c/0x110 [ 1190.360711] kernel_clone+0xe7/0x980 [ 1190.361028] ? lock_downgrade+0x6d0/0x6d0 [ 1190.361380] ? find_held_lock+0x2c/0x110 [ 1190.361737] ? create_io_thread+0xf0/0xf0 [ 1190.362094] ? ksys_write+0x12d/0x260 [ 1190.362433] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1190.362860] __do_sys_fork+0x8a/0xc0 [ 1190.363176] ? kernel_thread+0xf0/0xf0 [ 1190.363525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1190.363984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1190.364424] ? trace_hardirqs_on+0x5b/0x180 [ 1190.364792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1190.365239] do_syscall_64+0x33/0x40 [ 1190.365564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1190.366008] RIP: 0033:0x7f8f4b3d9b19 [ 1190.366327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1190.367876] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1190.368530] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1190.369139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1190.369736] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.370342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1190.370941] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:44:15 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x3}}}}}, 0x0) 06:44:15 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) fstat(r1, &(0x7f0000000000)) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 06:44:29 executing program 2: read(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) 06:44:29 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:44:29 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000000)='./file0\x00', 0xaf) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:44:29 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x2c}}}}}, 0x0) 06:44:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 52) 06:44:29 executing program 6: syz_emit_ethernet(0x200000fe, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:44:29 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 54) 06:44:29 executing program 5: ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000000c0)={0x800, 0x5ca6}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000180)={0x0, 0x991e, 0x2, 0x0, 0x1, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5cad, 0x9, 0x2, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x8010, r0, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6, 0xc, 0x0, {0x0, 0x0, r1}}, 0x3) [ 1204.222329] FAULT_INJECTION: forcing a failure. [ 1204.222329] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.223421] CPU: 1 PID: 7904 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1204.224002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.224719] Call Trace: [ 1204.224952] dump_stack+0x107/0x167 [ 1204.225268] should_fail.cold+0x5/0xa [ 1204.225607] ? ptlock_alloc+0x1d/0x70 [ 1204.225935] should_failslab+0x5/0x20 [ 1204.226260] kmem_cache_alloc+0x5b/0x310 [ 1204.226621] ptlock_alloc+0x1d/0x70 [ 1204.226935] pte_alloc_one+0x68/0x1a0 [ 1204.227259] __pte_alloc+0x1d/0x330 [ 1204.227584] copy_page_range+0x1b62/0x3810 [ 1204.227948] ? lock_chain_count+0x20/0x20 [ 1204.228353] ? up_write+0x191/0x550 [ 1204.228674] ? vm_iomap_memory+0x190/0x190 [ 1204.229034] ? downgrade_write+0x3a0/0x3a0 [ 1204.229395] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1204.229864] ? __vma_link_rb+0x540/0x700 [ 1204.230216] copy_process+0x759b/0x7800 [ 1204.230583] ? __cleanup_sighand+0xb0/0xb0 [ 1204.230956] ? lock_acquire+0x197/0x470 [ 1204.231301] ? find_held_lock+0x2c/0x110 [ 1204.231651] kernel_clone+0xe7/0x980 [ 1204.231977] ? lock_downgrade+0x6d0/0x6d0 [ 1204.232343] ? find_held_lock+0x2c/0x110 [ 1204.232690] ? create_io_thread+0xf0/0xf0 [ 1204.233060] ? ksys_write+0x12d/0x260 [ 1204.233395] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1204.233815] __do_sys_fork+0x8a/0xc0 [ 1204.234144] ? kernel_thread+0xf0/0xf0 [ 1204.234493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1204.234949] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.235385] ? trace_hardirqs_on+0x5b/0x180 [ 1204.235754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.236217] do_syscall_64+0x33/0x40 [ 1204.236537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.236974] RIP: 0033:0x7f8f4b3d9b19 [ 1204.237304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.238866] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1204.239519] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1204.240122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1204.240734] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.241341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.241940] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:44:29 executing program 6: syz_emit_ethernet(0xfffffdef, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1204.275314] FAULT_INJECTION: forcing a failure. [ 1204.275314] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.276354] CPU: 1 PID: 7906 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1204.276964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.277702] Call Trace: [ 1204.277959] dump_stack+0x107/0x167 [ 1204.278315] should_fail.cold+0x5/0xa [ 1204.278676] ? create_object.isra.0+0x3a/0xa20 [ 1204.279103] should_failslab+0x5/0x20 [ 1204.279471] kmem_cache_alloc+0x5b/0x310 [ 1204.279857] ? mark_held_locks+0x9e/0xe0 [ 1204.280254] create_object.isra.0+0x3a/0xa20 [ 1204.280680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1204.281158] kmem_cache_alloc+0x159/0x310 [ 1204.281562] xas_alloc+0x336/0x440 [ 1204.281905] xas_create+0x34a/0x10d0 [ 1204.282269] ? kernel_text_address+0xf2/0x120 [ 1204.282699] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1204.283180] xas_store+0x8c/0x1c40 [ 1204.283529] __xa_store+0x164/0x2d0 [ 1204.283880] ? xa_delete_node+0x280/0x280 [ 1204.284288] ? trace_hardirqs_on+0x5b/0x180 [ 1204.284710] xa_store+0x31/0x50 [ 1204.285030] __io_uring_add_tctx_node+0x1cf/0x520 [ 1204.285479] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1204.285965] ? alloc_fd+0x2e7/0x670 [ 1204.286324] io_uring_setup+0x1f6a/0x2910 [ 1204.286727] ? wait_for_completion_io+0x270/0x270 [ 1204.287184] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1204.287678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1204.288174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.288655] do_syscall_64+0x33/0x40 [ 1204.289018] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.289479] RIP: 0033:0x7fb639313b19 [ 1204.289834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.291444] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1204.292139] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1204.292774] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1204.293416] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1204.294050] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1204.294689] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:44:29 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x30}}}}}, 0x0) 06:44:29 executing program 2: read(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) 06:44:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20180, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x42) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r0, &(0x7f00000000c0)=0x93, 0xf4) 06:44:29 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) 06:44:29 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 55) [ 1204.367966] FAULT_INJECTION: forcing a failure. [ 1204.367966] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.369154] CPU: 0 PID: 7922 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1204.369877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.370563] Call Trace: [ 1204.370796] dump_stack+0x107/0x167 [ 1204.371105] should_fail.cold+0x5/0xa [ 1204.371432] ? create_object.isra.0+0x3a/0xa20 [ 1204.371821] should_failslab+0x5/0x20 [ 1204.372154] kmem_cache_alloc+0x5b/0x310 [ 1204.372501] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1204.373008] create_object.isra.0+0x3a/0xa20 [ 1204.373379] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1204.373808] kmem_cache_alloc+0x159/0x310 [ 1204.374164] ptlock_alloc+0x1d/0x70 [ 1204.374473] pte_alloc_one+0x68/0x1a0 [ 1204.374796] __pte_alloc+0x1d/0x330 [ 1204.375107] copy_page_range+0x1b62/0x3810 [ 1204.375466] ? finish_task_switch+0x126/0x5d0 [ 1204.375875] ? up_write+0x191/0x550 [ 1204.376197] ? vm_iomap_memory+0x190/0x190 [ 1204.376553] ? downgrade_write+0x3a0/0x3a0 [ 1204.376912] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1204.377367] ? __vma_link_rb+0x540/0x700 [ 1204.377716] copy_process+0x759b/0x7800 [ 1204.378074] ? __cleanup_sighand+0xb0/0xb0 [ 1204.378437] ? lock_acquire+0x197/0x470 [ 1204.378779] ? find_held_lock+0x2c/0x110 [ 1204.379125] kernel_clone+0xe7/0x980 [ 1204.379439] ? lock_downgrade+0x6d0/0x6d0 [ 1204.379788] ? find_held_lock+0x2c/0x110 [ 1204.380136] ? create_io_thread+0xf0/0xf0 [ 1204.380494] ? ksys_write+0x12d/0x260 [ 1204.380826] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1204.381236] __do_sys_fork+0x8a/0xc0 [ 1204.381549] ? kernel_thread+0xf0/0xf0 [ 1204.381890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1204.382329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.382762] ? trace_hardirqs_on+0x5b/0x180 [ 1204.383126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.383556] do_syscall_64+0x33/0x40 [ 1204.383871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.384415] RIP: 0033:0x7f8f4b3d9b19 [ 1204.384844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.386408] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1204.387091] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1204.387753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1204.388358] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.389001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.389591] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:44:29 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x60}}}}}, 0x0) 06:44:42 executing program 6: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:44:42 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:44:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 53) 06:44:42 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) 06:44:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) [ 1217.765261] FAULT_INJECTION: forcing a failure. [ 1217.765261] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.766244] CPU: 0 PID: 7934 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1217.766816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.767509] Call Trace: [ 1217.767740] dump_stack+0x107/0x167 [ 1217.768053] should_fail.cold+0x5/0xa [ 1217.768425] ? xas_alloc+0x336/0x440 [ 1217.768744] should_failslab+0x5/0x20 [ 1217.769067] kmem_cache_alloc+0x5b/0x310 [ 1217.769415] xas_alloc+0x336/0x440 [ 1217.769718] xas_create+0x34a/0x10d0 [ 1217.770042] ? kernel_text_address+0xf2/0x120 [ 1217.770424] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1217.770869] xas_store+0x8c/0x1c40 [ 1217.771182] __xa_store+0x164/0x2d0 [ 1217.771492] ? xa_delete_node+0x280/0x280 [ 1217.771849] ? trace_hardirqs_on+0x5b/0x180 [ 1217.772218] xa_store+0x31/0x50 [ 1217.776542] __io_uring_add_tctx_node+0x1cf/0x520 [ 1217.776951] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1217.777392] ? alloc_fd+0x2e7/0x670 [ 1217.777711] io_uring_setup+0x1f6a/0x2910 [ 1217.778071] ? wait_for_completion_io+0x270/0x270 [ 1217.778479] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1217.778923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.779368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.779804] do_syscall_64+0x33/0x40 [ 1217.780118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.780577] RIP: 0033:0x7fb639313b19 [ 1217.780893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.782426] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1217.783065] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1217.783660] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1217.784272] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1217.784893] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1217.785498] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:44:42 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0xff}}}}}, 0x0) 06:44:42 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x55) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) pread64(r0, &(0x7f0000000180)=""/226, 0xe2, 0x20) 06:44:42 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 56) 06:44:42 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) [ 1217.831544] FAULT_INJECTION: forcing a failure. 06:44:42 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) [ 1217.831544] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.832715] CPU: 1 PID: 7947 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1217.833294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.834161] Call Trace: [ 1217.834394] dump_stack+0x107/0x167 [ 1217.834801] should_fail.cold+0x5/0xa [ 1217.835127] ? create_object.isra.0+0x3a/0xa20 [ 1217.835514] should_failslab+0x5/0x20 [ 1217.835916] kmem_cache_alloc+0x5b/0x310 [ 1217.836310] create_object.isra.0+0x3a/0xa20 [ 1217.837280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1217.837836] kmem_cache_alloc+0x159/0x310 [ 1217.838193] __pmd_alloc+0x94/0x5e0 [ 1217.838503] copy_page_range+0x2bd8/0x3810 [ 1217.838914] ? lock_chain_count+0x20/0x20 [ 1217.839298] ? up_write+0x191/0x550 [ 1217.839606] ? vm_iomap_memory+0x190/0x190 [ 1217.840005] ? downgrade_write+0x3a0/0x3a0 [ 1217.840388] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1217.840892] ? __vma_link_rb+0x540/0x700 [ 1217.841246] copy_process+0x759b/0x7800 [ 1217.841616] ? __cleanup_sighand+0xb0/0xb0 [ 1217.842048] ? lock_acquire+0x197/0x470 [ 1217.842392] ? find_held_lock+0x2c/0x110 [ 1217.842791] kernel_clone+0xe7/0x980 [ 1217.843107] ? lock_downgrade+0x6d0/0x6d0 [ 1217.843454] ? find_held_lock+0x2c/0x110 [ 1217.843840] ? create_io_thread+0xf0/0xf0 [ 1217.844192] ? ksys_write+0x12d/0x260 [ 1217.844561] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1217.845018] __do_sys_fork+0x8a/0xc0 [ 1217.845333] ? kernel_thread+0xf0/0xf0 [ 1217.845744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.846187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.846659] ? trace_hardirqs_on+0x5b/0x180 [ 1217.847036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.847467] do_syscall_64+0x33/0x40 [ 1217.847826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.848287] RIP: 0033:0x7f8f4b3d9b19 [ 1217.848611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.850240] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1217.850925] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1217.851520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1217.852156] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1217.852813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.853407] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:44:42 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x500}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:44:43 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000180)=""/214, 0xd6}, {&(0x7f00000003c0)=""/191, 0xbf}], 0x3, &(0x7f0000000480)=""/227, 0xe3}}, {{&(0x7f0000000580)=@tipc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/9, 0x9}], 0x1}, 0x4}, {{&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/21, 0x15}, {&(0x7f0000000700)=""/205, 0xcd}, {&(0x7f0000000800)=""/59, 0x3b}], 0x3, &(0x7f0000000880)=""/32, 0x20}, 0x6}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000008c0)=""/181, 0xb5}, {&(0x7f0000000980)=""/154, 0x9a}, {&(0x7f0000000a40)=""/237, 0xed}, {&(0x7f0000000b40)=""/236, 0xec}], 0x4}, 0x7}], 0x4, 0x40, &(0x7f0000000d80)={0x0, 0x989680}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000dc0)) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:44:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 54) 06:44:43 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 57) 06:44:43 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:44:43 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x806}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1217.959681] FAULT_INJECTION: forcing a failure. [ 1217.959681] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.960772] CPU: 1 PID: 7964 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1217.961339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.962094] Call Trace: [ 1217.962325] dump_stack+0x107/0x167 [ 1217.962673] should_fail.cold+0x5/0xa [ 1217.963012] ? ___slab_alloc+0x155/0x700 [ 1217.963367] ? create_object.isra.0+0x3a/0xa20 [ 1217.963845] should_failslab+0x5/0x20 [ 1217.964170] kmem_cache_alloc+0x5b/0x310 [ 1217.964531] create_object.isra.0+0x3a/0xa20 [ 1217.964951] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1217.965560] kmem_cache_alloc+0x159/0x310 [ 1217.965985] xas_alloc+0x336/0x440 [ 1217.966291] xas_create+0x34a/0x10d0 [ 1217.966616] ? kernel_text_address+0xf2/0x120 [ 1217.967043] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1217.967489] xas_store+0x8c/0x1c40 [ 1217.967848] __xa_store+0x164/0x2d0 [ 1217.968159] ? xa_delete_node+0x280/0x280 [ 1217.968537] ? trace_hardirqs_on+0x5b/0x180 [ 1217.968959] xa_store+0x31/0x50 [ 1217.969244] __io_uring_add_tctx_node+0x1cf/0x520 [ 1217.972947] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1217.973390] ? alloc_fd+0x2e7/0x670 [ 1217.973759] io_uring_setup+0x1f6a/0x2910 [ 1217.974118] ? wait_for_completion_io+0x270/0x270 [ 1217.974524] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1217.975013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.975453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.975955] do_syscall_64+0x33/0x40 [ 1217.976340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.976818] RIP: 0033:0x7fb639313b19 [ 1217.977133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.978268] FAULT_INJECTION: forcing a failure. [ 1217.978268] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.978732] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1217.978747] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1217.978754] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1217.978762] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1217.978776] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1217.982831] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1217.983452] CPU: 0 PID: 7968 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1217.984042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.984783] Call Trace: [ 1217.985016] dump_stack+0x107/0x167 [ 1217.985342] should_fail.cold+0x5/0xa [ 1217.985670] ? vm_area_dup+0x78/0x290 [ 1217.986000] should_failslab+0x5/0x20 [ 1217.986429] kmem_cache_alloc+0x5b/0x310 [ 1217.986778] ? lock_downgrade+0x6d0/0x6d0 [ 1217.987134] vm_area_dup+0x78/0x290 [ 1217.987467] ? _cond_resched+0x12/0x80 [ 1217.987800] ? copy_page_range+0x24e9/0x3810 [ 1217.988207] ? vm_area_alloc+0x110/0x110 [ 1217.988585] ? up_write+0x191/0x550 [ 1217.988896] ? vm_iomap_memory+0x190/0x190 [ 1217.989251] ? downgrade_write+0x3a0/0x3a0 [ 1217.989620] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1217.990078] ? __vma_link_rb+0x540/0x700 [ 1217.990527] copy_process+0x291b/0x7800 [ 1217.990898] ? __cleanup_sighand+0xb0/0xb0 [ 1217.991269] ? lock_acquire+0x197/0x470 [ 1217.991624] ? find_held_lock+0x2c/0x110 [ 1217.991976] kernel_clone+0xe7/0x980 [ 1217.992308] ? lock_downgrade+0x6d0/0x6d0 [ 1217.992672] ? find_held_lock+0x2c/0x110 [ 1217.993017] ? create_io_thread+0xf0/0xf0 [ 1217.993372] ? ksys_write+0x12d/0x260 [ 1217.993711] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1217.994123] __do_sys_fork+0x8a/0xc0 [ 1217.994521] ? kernel_thread+0xf0/0xf0 [ 1217.994880] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.995323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.995756] ? trace_hardirqs_on+0x5b/0x180 [ 1217.996134] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.996588] do_syscall_64+0x33/0x40 [ 1217.996917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.997350] RIP: 0033:0x7f8f4b3d9b19 [ 1217.997667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.999291] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1217.999933] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1218.000584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1218.001191] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.001790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.002476] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:44:56 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) 06:44:56 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:44:56 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x4305}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:44:56 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 58) 06:44:56 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20, 0x7f, 0xfb1, 0x5, 0x9}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000200000000002e2f666987bc6c65"]) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000040)=0x80000001, 0x4) 06:44:56 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file1/file0\x00', 0x705240, 0x83) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000200)=""/244, 0xf4}], 0x3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x208800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xa28}}, './file1/file0\x00'}) io_uring_enter(r2, 0x6d26, 0x9, 0x2, &(0x7f00000003c0)={[0x2]}, 0x8) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x40, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000100)='./file1/file0\x00', 0x18) getdents(r3, &(0x7f0000000540)=""/126, 0x7e) 06:44:56 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x3}}}}}, 0x0) 06:44:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 55) [ 1231.576320] FAULT_INJECTION: forcing a failure. [ 1231.576320] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.577407] CPU: 0 PID: 7982 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1231.577980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.578709] Call Trace: [ 1231.578941] dump_stack+0x107/0x167 [ 1231.579305] should_fail.cold+0x5/0xa [ 1231.579629] ? xas_alloc+0x336/0x440 [ 1231.579946] should_failslab+0x5/0x20 [ 1231.580317] kmem_cache_alloc+0x5b/0x310 [ 1231.580672] xas_alloc+0x336/0x440 [ 1231.580978] xas_create+0x34a/0x10d0 [ 1231.581373] ? kernel_text_address+0xf2/0x120 [ 1231.581755] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1231.582247] xas_store+0x8c/0x1c40 [ 1231.582564] __xa_store+0x164/0x2d0 [ 1231.582876] ? xa_delete_node+0x280/0x280 [ 1231.583282] ? trace_hardirqs_on+0x5b/0x180 [ 1231.583656] xa_store+0x31/0x50 [ 1231.583942] __io_uring_add_tctx_node+0x1cf/0x520 [ 1231.584408] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1231.584859] ? alloc_fd+0x2e7/0x670 [ 1231.585251] io_uring_setup+0x1f6a/0x2910 [ 1231.585609] ? wait_for_completion_io+0x270/0x270 [ 1231.586018] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1231.586513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1231.586958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.587442] do_syscall_64+0x33/0x40 [ 1231.587760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.588240] RIP: 0033:0x7fb639313b19 [ 1231.588572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.588944] FAULT_INJECTION: forcing a failure. [ 1231.588944] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.590205] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1231.591851] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1231.592519] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1231.593119] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1231.593758] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1231.594421] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1231.595047] CPU: 1 PID: 7987 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1231.595632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.596333] Call Trace: [ 1231.596595] dump_stack+0x107/0x167 [ 1231.596911] should_fail.cold+0x5/0xa [ 1231.597241] ? vm_area_dup+0x78/0x290 [ 1231.597571] should_failslab+0x5/0x20 [ 1231.597898] kmem_cache_alloc+0x5b/0x310 [ 1231.598249] vm_area_dup+0x78/0x290 [ 1231.598571] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1231.598970] ? lock_downgrade+0x6d0/0x6d0 [ 1231.599324] ? copy_page_range+0x24e9/0x3810 [ 1231.599713] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1231.600109] ? avc_has_extended_perms+0xf40/0xf40 [ 1231.600539] ? vm_area_alloc+0x110/0x110 [ 1231.600898] ? selinux_vm_enough_memory+0x114/0x180 [ 1231.601326] ? selinux_sb_statfs+0x250/0x250 [ 1231.601703] ? percpu_counter_add_batch+0x8b/0x140 [ 1231.602127] ? __vm_enough_memory+0x184/0x360 [ 1231.602508] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1231.602946] copy_process+0x291b/0x7800 [ 1231.603317] ? __cleanup_sighand+0xb0/0xb0 [ 1231.603681] ? lock_acquire+0x197/0x470 [ 1231.604028] ? find_held_lock+0x2c/0x110 [ 1231.604383] kernel_clone+0xe7/0x980 [ 1231.604711] ? lock_downgrade+0x6d0/0x6d0 [ 1231.605062] ? find_held_lock+0x2c/0x110 [ 1231.605412] ? create_io_thread+0xf0/0xf0 [ 1231.605774] ? ksys_write+0x12d/0x260 [ 1231.606121] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1231.606541] __do_sys_fork+0x8a/0xc0 [ 1231.606861] ? kernel_thread+0xf0/0xf0 [ 1231.607219] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1231.607664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.608100] ? trace_hardirqs_on+0x5b/0x180 [ 1231.608599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.609035] do_syscall_64+0x33/0x40 [ 1231.609351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.609783] RIP: 0033:0x7f8f4b3d9b19 [ 1231.610100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.611531] FAT-fs (loop3): bogus number of reserved sectors [ 1231.611625] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1231.612197] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1231.612769] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1231.612778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1231.612785] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.612799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1231.615675] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:44:56 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x2c}}}}}, 0x0) 06:44:56 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) 06:44:56 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/145, 0x91) 06:44:56 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) r2 = creat(&(0x7f0000000600)='./file1\x00', 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x100000, 0x106}, 0x18) fcntl$setown(r3, 0x8, 0xffffffffffffffff) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) dup(r2) 06:44:56 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8035}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:44:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 56) 06:44:56 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 59) [ 1231.763934] FAULT_INJECTION: forcing a failure. 06:44:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, 0x0, 0x0) [ 1231.763934] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.765017] CPU: 1 PID: 8009 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1231.765590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.766279] Call Trace: [ 1231.766510] dump_stack+0x107/0x167 [ 1231.766821] should_fail.cold+0x5/0xa [ 1231.767147] ? create_object.isra.0+0x3a/0xa20 [ 1231.767534] should_failslab+0x5/0x20 [ 1231.767857] kmem_cache_alloc+0x5b/0x310 [ 1231.768202] ? mark_held_locks+0x9e/0xe0 [ 1231.776583] create_object.isra.0+0x3a/0xa20 [ 1231.776957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1231.777391] kmem_cache_alloc+0x159/0x310 [ 1231.777751] xas_alloc+0x336/0x440 [ 1231.778057] xas_create+0x34a/0x10d0 [ 1231.778382] ? kernel_text_address+0xf2/0x120 [ 1231.778764] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1231.779209] xas_store+0x8c/0x1c40 [ 1231.779525] __xa_store+0x164/0x2d0 [ 1231.779838] ? xa_delete_node+0x280/0x280 [ 1231.780199] ? trace_hardirqs_on+0x5b/0x180 [ 1231.780583] xa_store+0x31/0x50 [ 1231.780868] __io_uring_add_tctx_node+0x1cf/0x520 [ 1231.781276] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1231.781716] ? alloc_fd+0x2e7/0x670 [ 1231.782035] io_uring_setup+0x1f6a/0x2910 [ 1231.782392] ? wait_for_completion_io+0x270/0x270 [ 1231.782798] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1231.783241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1231.783680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.784117] do_syscall_64+0x33/0x40 [ 1231.784450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.784884] RIP: 0033:0x7fb639313b19 [ 1231.785200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.786728] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1231.787367] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1231.787962] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1231.788570] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1231.789165] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1231.789762] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:44:56 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x30}}}}}, 0x0) [ 1231.852201] FAULT_INJECTION: forcing a failure. [ 1231.852201] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.853210] CPU: 1 PID: 8018 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1231.853789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.854490] Call Trace: [ 1231.854724] dump_stack+0x107/0x167 [ 1231.855038] should_fail.cold+0x5/0xa [ 1231.855368] ? create_object.isra.0+0x3a/0xa20 [ 1231.855761] should_failslab+0x5/0x20 [ 1231.856088] kmem_cache_alloc+0x5b/0x310 [ 1231.856451] create_object.isra.0+0x3a/0xa20 [ 1231.856833] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1231.857273] kmem_cache_alloc+0x159/0x310 [ 1231.857637] vm_area_dup+0x78/0x290 [ 1231.857964] ? _cond_resched+0x12/0x80 [ 1231.858300] ? copy_page_range+0x24e9/0x3810 [ 1231.858714] ? vm_area_alloc+0x110/0x110 [ 1231.859067] ? up_write+0x191/0x550 [ 1231.859381] ? vm_iomap_memory+0x190/0x190 [ 1231.859744] ? downgrade_write+0x3a0/0x3a0 [ 1231.860109] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1231.860606] ? __vma_link_rb+0x540/0x700 [ 1231.860963] copy_process+0x291b/0x7800 [ 1231.861340] ? __cleanup_sighand+0xb0/0xb0 [ 1231.861709] ? lock_acquire+0x197/0x470 [ 1231.862061] ? find_held_lock+0x2c/0x110 [ 1231.868513] kernel_clone+0xe7/0x980 [ 1231.868830] ? lock_downgrade+0x6d0/0x6d0 [ 1231.869176] ? find_held_lock+0x2c/0x110 [ 1231.869520] ? create_io_thread+0xf0/0xf0 [ 1231.869871] ? ksys_write+0x12d/0x260 [ 1231.870200] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1231.870620] __do_sys_fork+0x8a/0xc0 [ 1231.870933] ? kernel_thread+0xf0/0xf0 [ 1231.871276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1231.876545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.876978] ? trace_hardirqs_on+0x5b/0x180 [ 1231.877666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.878098] do_syscall_64+0x33/0x40 [ 1231.878417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.878844] RIP: 0033:0x7f8f4b3d9b19 [ 1231.879159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.880692] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1231.881341] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1231.881941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1231.892766] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.893364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1231.893961] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:45:11 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x400, 0x3) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000100)=0xe5b6, 0x100) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/e1000', 0x40000, 0x10) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 06:45:11 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:45:11 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 60) 06:45:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 06:45:11 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) write(r1, &(0x7f0000000100)="054899767eebd136270059a5cce92f70b65b73d02a835c072711e223", 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00K\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) openat(r2, &(0x7f0000000280)='./file1\x00', 0x541040, 0x100) r3 = open_tree(r0, &(0x7f00000001c0)='./file1\x00', 0x8900) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000200)=0x1) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 1245.956068] FAULT_INJECTION: forcing a failure. [ 1245.956068] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.958222] CPU: 0 PID: 8031 Comm: syz-executor.4 Not tainted 5.10.225 #1 06:45:11 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8103}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:11 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x60}}}}}, 0x0) 06:45:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 57) [ 1245.959488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1245.960797] Call Trace: [ 1245.961049] dump_stack+0x107/0x167 [ 1245.961384] should_fail.cold+0x5/0xa [ 1245.961755] ? xas_alloc+0x336/0x440 [ 1245.962099] should_failslab+0x5/0x20 [ 1245.962448] kmem_cache_alloc+0x5b/0x310 [ 1245.962843] xas_alloc+0x336/0x440 [ 1245.963174] xas_create+0x34a/0x10d0 [ 1245.976794] ? kernel_text_address+0xf2/0x120 [ 1245.977204] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1245.977653] xas_store+0x8c/0x1c40 [ 1245.977975] __xa_store+0x164/0x2d0 [ 1245.978289] ? xa_delete_node+0x280/0x280 [ 1245.978654] ? trace_hardirqs_on+0x5b/0x180 [ 1245.979027] xa_store+0x31/0x50 [ 1245.979317] __io_uring_add_tctx_node+0x1cf/0x520 [ 1245.979728] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1245.980171] ? alloc_fd+0x2e7/0x670 [ 1245.980494] io_uring_setup+0x1f6a/0x2910 [ 1245.980899] ? wait_for_completion_io+0x270/0x270 [ 1245.981324] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1245.981803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1245.982281] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1245.982752] do_syscall_64+0x33/0x40 [ 1245.983094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1245.983555] RIP: 0033:0x7fb639313b19 [ 1245.983896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1245.985564] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1245.986260] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1245.986911] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1245.987550] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1245.988205] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1245.988867] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:45:11 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x300}}}}}, 0x0) 06:45:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, 0x0, 0x0) [ 1246.094943] FAULT_INJECTION: forcing a failure. [ 1246.094943] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.096023] CPU: 0 PID: 8042 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1246.096628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1246.097326] Call Trace: [ 1246.097560] dump_stack+0x107/0x167 [ 1246.097877] should_fail.cold+0x5/0xa [ 1246.098204] ? anon_vma_clone+0xdc/0x590 [ 1246.098553] should_failslab+0x5/0x20 [ 1246.098894] kmem_cache_alloc+0x5b/0x310 [ 1246.099281] anon_vma_clone+0xdc/0x590 [ 1246.099651] anon_vma_fork+0x82/0x640 [ 1246.100001] ? __vm_enough_memory+0x184/0x360 [ 1246.100412] copy_process+0x7218/0x7800 [ 1246.100882] ? __cleanup_sighand+0xb0/0xb0 [ 1246.101250] ? lock_acquire+0x197/0x470 [ 1246.101593] ? find_held_lock+0x2c/0x110 [ 1246.101942] kernel_clone+0xe7/0x980 [ 1246.102258] ? lock_downgrade+0x6d0/0x6d0 [ 1246.102610] ? find_held_lock+0x2c/0x110 [ 1246.102954] ? create_io_thread+0xf0/0xf0 [ 1246.103308] ? ksys_write+0x12d/0x260 [ 1246.103640] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1246.104053] __do_sys_fork+0x8a/0xc0 [ 1246.104367] ? kernel_thread+0xf0/0xf0 [ 1246.112649] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1246.113127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1246.113608] ? trace_hardirqs_on+0x5b/0x180 [ 1246.114007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1246.114475] do_syscall_64+0x33/0x40 [ 1246.114830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1246.115295] RIP: 0033:0x7f8f4b3d9b19 [ 1246.115642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1246.117326] RSP: 002b:00007f8f4892e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1246.118036] RAX: ffffffffffffffda RBX: 00007f8f4b4ed020 RCX: 00007f8f4b3d9b19 [ 1246.118684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1246.119344] RBP: 00007f8f4892e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1246.119994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1246.120670] R13: 00007ffd08982e1f R14: 00007f8f4892e300 R15: 0000000000022000 06:45:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 58) [ 1246.191786] FAULT_INJECTION: forcing a failure. [ 1246.191786] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.196921] CPU: 1 PID: 8053 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1246.197536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1246.198276] Call Trace: [ 1246.198530] dump_stack+0x107/0x167 [ 1246.198872] should_fail.cold+0x5/0xa [ 1246.199232] ? create_object.isra.0+0x3a/0xa20 [ 1246.199660] should_failslab+0x5/0x20 [ 1246.200011] kmem_cache_alloc+0x5b/0x310 [ 1246.200380] ? mark_held_locks+0x9e/0xe0 [ 1246.200777] create_object.isra.0+0x3a/0xa20 [ 1246.201181] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1246.201654] kmem_cache_alloc+0x159/0x310 [ 1246.202046] xas_alloc+0x336/0x440 [ 1246.202375] xas_create+0x34a/0x10d0 [ 1246.202728] ? kernel_text_address+0xf2/0x120 [ 1246.203139] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1246.203619] xas_store+0x8c/0x1c40 [ 1246.203961] __xa_store+0x164/0x2d0 [ 1246.204302] ? xa_delete_node+0x280/0x280 [ 1246.204715] ? trace_hardirqs_on+0x5b/0x180 [ 1246.205129] xa_store+0x31/0x50 [ 1246.205443] __io_uring_add_tctx_node+0x1cf/0x520 [ 1246.205891] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1246.206372] ? alloc_fd+0x2e7/0x670 [ 1246.206722] io_uring_setup+0x1f6a/0x2910 [ 1246.207118] ? wait_for_completion_io+0x270/0x270 [ 1246.207564] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1246.208053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1246.208534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1246.209006] do_syscall_64+0x33/0x40 [ 1246.209347] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1246.209810] RIP: 0033:0x7fb639313b19 [ 1246.210153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1246.211796] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1246.212475] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1246.213137] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1246.213788] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1246.214434] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1246.215081] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1246.599561] perf: interrupt took too long (25856 > 19440), lowering kernel.perf_event_max_sample_rate to 7000 06:45:25 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x2c00}}}}}, 0x0) 06:45:25 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x8001, 0x8) 06:45:25 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:45:25 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 61) 06:45:25 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0xffffffffffffff78}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) sendto(r1, &(0x7f0000000640)="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", 0x1000, 0x5, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x3f, @mcast2, 0x4}}}, 0x80) 06:45:25 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:45:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 59) 06:45:25 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x812c}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:25 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x3000}}}}}, 0x0) [ 1259.948607] FAULT_INJECTION: forcing a failure. [ 1259.948607] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.948651] FAULT_INJECTION: forcing a failure. [ 1259.948651] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.949657] CPU: 1 PID: 8071 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1259.949682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.951925] Call Trace: [ 1259.952161] dump_stack+0x107/0x167 [ 1259.952475] should_fail.cold+0x5/0xa [ 1259.952826] ? xas_alloc+0x336/0x440 [ 1259.953151] should_failslab+0x5/0x20 [ 1259.953479] kmem_cache_alloc+0x5b/0x310 [ 1259.953834] xas_alloc+0x336/0x440 [ 1259.954142] xas_create+0x34a/0x10d0 [ 1259.954474] ? kernel_text_address+0xf2/0x120 [ 1259.954862] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1259.955311] xas_store+0x8c/0x1c40 [ 1259.955629] __xa_store+0x164/0x2d0 [ 1259.955943] ? xa_delete_node+0x280/0x280 [ 1259.956307] ? trace_hardirqs_on+0x5b/0x180 [ 1259.956693] xa_store+0x31/0x50 [ 1259.956989] __io_uring_add_tctx_node+0x1cf/0x520 [ 1259.957403] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1259.957849] ? alloc_fd+0x2e7/0x670 [ 1259.958174] io_uring_setup+0x1f6a/0x2910 [ 1259.958537] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1259.958972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.959438] ? __x64_sys_io_uring_setup+0xd/0x70 [ 1259.959855] do_syscall_64+0x33/0x40 [ 1259.960174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1259.960608] RIP: 0033:0x7fb639313b19 [ 1259.960943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.962493] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1259.963137] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1259.963743] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1259.964344] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1259.964960] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1259.965561] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1259.966190] CPU: 0 PID: 8074 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1259.966821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.967556] Call Trace: [ 1259.967793] dump_stack+0x107/0x167 [ 1259.968102] should_fail.cold+0x5/0xa [ 1259.968427] ? create_object.isra.0+0x3a/0xa20 [ 1259.968884] should_failslab+0x5/0x20 [ 1259.969209] kmem_cache_alloc+0x5b/0x310 [ 1259.969624] create_object.isra.0+0x3a/0xa20 [ 1259.969997] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1259.970428] kmem_cache_alloc+0x159/0x310 [ 1259.970831] vm_area_dup+0x78/0x290 [ 1259.971146] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1259.971589] ? lock_downgrade+0x6d0/0x6d0 [ 1259.971938] ? copy_page_range+0x24e9/0x3810 [ 1259.972317] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1259.972770] ? avc_has_extended_perms+0xf40/0xf40 [ 1259.973184] ? vm_area_alloc+0x110/0x110 [ 1259.973604] ? selinux_vm_enough_memory+0x114/0x180 [ 1259.974032] ? selinux_sb_statfs+0x250/0x250 [ 1259.974407] ? percpu_counter_add_batch+0x8b/0x140 [ 1259.974869] ? __vm_enough_memory+0x184/0x360 [ 1259.975250] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1259.975740] copy_process+0x291b/0x7800 [ 1259.976100] ? __cleanup_sighand+0xb0/0xb0 [ 1259.976460] ? lock_acquire+0x197/0x470 [ 1259.976868] ? find_held_lock+0x2c/0x110 [ 1259.977214] kernel_clone+0xe7/0x980 [ 1259.977600] ? lock_downgrade+0x6d0/0x6d0 [ 1259.977948] ? find_held_lock+0x2c/0x110 [ 1259.978287] ? create_io_thread+0xf0/0xf0 [ 1259.978685] ? ksys_write+0x12d/0x260 [ 1259.979015] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1259.979423] __do_sys_fork+0x8a/0xc0 [ 1259.979790] ? kernel_thread+0xf0/0xf0 [ 1259.980128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.980614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1259.981071] ? trace_hardirqs_on+0x5b/0x180 [ 1259.981552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1259.982193] do_syscall_64+0x33/0x40 [ 1259.982618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1259.983134] RIP: 0033:0x7f8f4b3d9b19 [ 1259.983577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.985408] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1259.986240] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1259.987011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1259.987786] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.988554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1259.989238] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:45:25 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8130}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:25 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x4000}}}}}, 0x0) 06:45:25 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000011d40), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/85) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40485404, &(0x7f0000011d80)) preadv(r0, &(0x7f0000000080), 0x0, 0x20400, 0x0) 06:45:25 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8160}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 60) 06:45:25 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x6000}}}}}, 0x0) [ 1260.200471] FAULT_INJECTION: forcing a failure. [ 1260.200471] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.201478] CPU: 0 PID: 8094 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1260.202058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.202751] Call Trace: [ 1260.202984] dump_stack+0x107/0x167 [ 1260.203296] should_fail.cold+0x5/0xa [ 1260.203624] ? xas_alloc+0x336/0x440 [ 1260.203944] should_failslab+0x5/0x20 [ 1260.204269] kmem_cache_alloc+0x5b/0x310 [ 1260.204616] xas_alloc+0x336/0x440 [ 1260.204938] xas_create+0x34a/0x10d0 [ 1260.205271] ? kernel_text_address+0xf2/0x120 [ 1260.205656] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1260.206103] xas_store+0x8c/0x1c40 [ 1260.206423] __xa_store+0x164/0x2d0 [ 1260.206739] ? xa_delete_node+0x280/0x280 [ 1260.207102] ? trace_hardirqs_on+0x5b/0x180 [ 1260.207477] xa_store+0x31/0x50 [ 1260.207763] __io_uring_add_tctx_node+0x1cf/0x520 [ 1260.208177] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1260.208621] ? alloc_fd+0x2e7/0x670 [ 1260.208967] io_uring_setup+0x1f6a/0x2910 [ 1260.209326] ? wait_for_completion_io+0x270/0x270 [ 1260.209735] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1260.210188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.210634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.211077] do_syscall_64+0x33/0x40 [ 1260.211395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1260.211829] RIP: 0033:0x7fb639313b19 [ 1260.212149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.213721] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1260.214367] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1260.214970] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1260.215569] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1260.216168] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1260.216785] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:45:25 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0xffff}}}}}, 0x0) 06:45:25 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8847}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:25 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 62) [ 1260.324910] FAULT_INJECTION: forcing a failure. [ 1260.324910] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.325908] CPU: 0 PID: 8103 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1260.326483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.327186] Call Trace: [ 1260.327421] dump_stack+0x107/0x167 [ 1260.327737] should_fail.cold+0x5/0xa [ 1260.328068] ? create_object.isra.0+0x3a/0xa20 [ 1260.328460] should_failslab+0x5/0x20 [ 1260.328808] kmem_cache_alloc+0x5b/0x310 [ 1260.329167] create_object.isra.0+0x3a/0xa20 [ 1260.329543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1260.329985] kmem_cache_alloc+0x159/0x310 [ 1260.330352] vm_area_dup+0x78/0x290 [ 1260.330676] ? _cond_resched+0x12/0x80 [ 1260.331013] ? copy_page_range+0x24e9/0x3810 [ 1260.331426] ? vm_area_alloc+0x110/0x110 [ 1260.331782] ? up_write+0x191/0x550 [ 1260.332098] ? vm_iomap_memory+0x190/0x190 [ 1260.332460] ? downgrade_write+0x3a0/0x3a0 [ 1260.332848] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1260.333313] ? __vma_link_rb+0x540/0x700 [ 1260.333669] copy_process+0x291b/0x7800 [ 1260.334046] ? __cleanup_sighand+0xb0/0xb0 [ 1260.334421] ? lock_acquire+0x197/0x470 [ 1260.334771] ? find_held_lock+0x2c/0x110 [ 1260.335125] kernel_clone+0xe7/0x980 [ 1260.335446] ? lock_downgrade+0x6d0/0x6d0 [ 1260.335802] ? find_held_lock+0x2c/0x110 [ 1260.336150] ? create_io_thread+0xf0/0xf0 [ 1260.336512] ? ksys_write+0x12d/0x260 [ 1260.336869] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1260.337291] __do_sys_fork+0x8a/0xc0 [ 1260.337850] ? kernel_thread+0xf0/0xf0 [ 1260.338198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.338646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.339084] ? trace_hardirqs_on+0x5b/0x180 [ 1260.339453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.339890] do_syscall_64+0x33/0x40 [ 1260.340210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1260.340647] RIP: 0033:0x7f8f4b3d9b19 [ 1260.340990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.342546] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1260.343195] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1260.343798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1260.344406] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.345026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.345629] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:45:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 61) 06:45:38 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:45:38 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:45:38 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8848}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:38 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 63) 06:45:38 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f00000002c0)='./file1\x00', 0x81) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) pipe(&(0x7f0000000300)) execve(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)=[&(0x7f0000000100)='#}*&\x00'], &(0x7f0000000240)=[&(0x7f0000000200)='vfat\x00']) io_uring_enter(0xffffffffffffffff, 0x2ff, 0xdeeb, 0x3, &(0x7f0000000280)={[0xc4a4]}, 0x8) 06:45:38 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x77baea28dc8b509d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1273.699964] FAULT_INJECTION: forcing a failure. sendmmsg$unix(r0, &(0x7f0000003400)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000003c0)="3fef50db96e3171e528d62583b8e5636a2d603770a8984e165b07247fd75ba4a25270ac7ee38a4c36550ee80d9781c5745a2d46bf543e96919da52c20677817b451d77001b6a6ef42c03df7593afd800376f514fd1a017e2b97eec769025a03e7e8836f7128bae99cbd7895c5a793f37bac915c3ca1190567d1de13844e284f423250432a7845715429535325055adc941be78a5cfbc93ce1c089bf2acfd4a3620361800d013a5af9ca8b3e120c8b5bf15bbe006aa79a8dc134b4c725e5f15a716f082c1d5c61e2600b5c79f2726cbf7fe870a", 0xd3}, {&(0x7f00000004c0)="865d778250ce53a4de04df7fd251f49be2dc80da1a11a8c6e13b4ec7bc1a679fdfb2edd43e0cbb62296d3e85dfd51da6703ff4266ccd9e801fdfa3b96e63a282a670fa4d97e9243e547ea6be6adfa35b46d9e8818d6fd5cffd27a1bcfec881d260972f62d49d61e70e9e5cd7a54f8aa58a937c6b03177c25025ce2948b6d78b46f", 0x81}, {&(0x7f0000000580)="00e0e9fa56fcbaec6b1258a06d2aa8019463a80ff575c24ed2495bcec7f6e64b9c665a0863b0b89dba80702e291712934e558513e47482e0c266e8c6aa1b8b232fe8", 0x42}, {&(0x7f0000000600)="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", 0x1000}], 0x4, &(0x7f0000001780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x80, 0x240000c1}}, {{&(0x7f0000001800)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001880)="35a2d2e87ec7946ff44a8f14b30e8843c93ff17b849f03efb681521da6eee82929e87fb11d2fcd945a6faa4dc279032df541d91bd60bca55e750aca1b9c1a45962e9226647cae94cb228b89896ca42ce138f4ba308e81e6d5cc6a51b2abbb0238c313178f65551bd676cd6c3dc66c6f7ad7e4e5c1b91f136c82b3cdba1c7e9fd1433b677baae3c2adb4b095dfbecdd4521ba68f84e75af251cb330e4fdbbab1084022f24683379228edc66bf1d7579c2667a8a59a795cce60930dc4f23fe6d7d5eb1e99c3abb93e570edbd818ae1e41d2ba6a917186b9c732946135fe89e522ec11494e72c0550bc6a5c56fedeb98e00e0c984100d", 0xf5}, {&(0x7f0000001980)="d4e694e1ad8debdf7245fad55b5ea6f26012e3138247c7b054897b50931db74e36147fd35f4fef54ac481efe86855e1fff9a187081efaf05138f709fc233c78c42641a9683a1cd6b4bba724929ad0d151ad10590e14cc2480b90c7de32d1b0d42bc8399a441dfa332abcc71320ec32c0422bd524838d862a33c2d470d2982b7e79473ff67ea83a113ee982556742310ec1b012dd78f091734d273f69731392b73b60bfce1a9b995954841fb18b40a3f5f676f39a304cd0fa051098e957a7ae655a840a555f4804dd0bf5df7964b20e5f19e2da07a6c9873e8f", 0xd9}, {&(0x7f0000001a80)="7f3cbb5c9856", 0x6}, {&(0x7f0000001ac0)="2455ec60605bddd114e8476d50a2e36e7432bee0bfcb0699125e3ae5494a1265a7c9b6a81eb65fafc9f1f8a662de0da568593ebaf5f3d3a8ed4041df72b6777f8bddfd232dbd925829092263241a956fa5e926ac8fadc4a3924a993cf74d4ff7ef4e188c0555c54ed35c9d3fef12622db07ca297197bc861dd3153a54805a567d342f7ebdd7946a6c641a41fbadceda9cc61c4731b384bb323dce84294497c136bb7b012b274f19fa02d86ee2495027081d52f531705586031", 0xb9}], 0x4, 0x0, 0x0, 0x440c0}}, {{&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001c40)="a9aeffbb9b911d55e0705c2b36898e3fa86515d13048e7bc253fb15b5a52fa0a55e8d68b56be7ccf90c79b72450144b4bb6697a8a2b4da45966a77a7c859a952813a04fa9d35a09f1a84b6c010e3333a1335ec174c096788de6a303032785df47bb0fa2883b2020b12e5b8efa4922d8e3bd3b02e9df4405863a809a4cd44d5fef59d336976840334c2d4aa3a4176d9caf34fb4f693f62c0986ef", 0x9a}], 0x1, &(0x7f0000001fc0)=[@cred={{0x1c}}], 0x20, 0x20000001}}, {{&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000002080)="fc5e792b79e300ecee023c4f31de36e23595070c8a44a0dd1b8e11273d30c70e84ba341f66c41a670cfab23293655212fd523edb92adfaf1eadc6fb69fde7c6630b6a8b8b803187ab7fdb226a7a02cbcc78be7e13b152a3d257f2dbee04b7105d9dc30d2894b6a62899dfa03be7eecefe1d63269c476ecab797c517f70b135924729456eeb77ac8258db53edc280c3665df453e438d4b7bf4f11e2f66dd8a2a836d12f95", 0xa4}, {&(0x7f0000002140)="f1ea9715bce425cc592b6879a96d72676b915b01452b13bc86100c9804ba8791de10929d161f194dc9ee34f4fc46821998d205f5e2f257e4792fba5c06c7388e10b21769f120b998b251f20b974c4cb518c4f2aa5337e2c5ad1ca85ed5555f32af2ce5", 0x63}, {&(0x7f00000021c0)="a799b21824d773708fc9afeafb30", 0xe}, {&(0x7f0000002200)="098243e5a8db26448bded6798ec844d377405bf702993acf441a5612ee6d6eb2c75d7f4dcec8599cc6c32341a6a69c349b61acdbad8a42995bfb97a8eaa8a02aeb49abbc57e17e8c897eea6bd562f0cc2c27ae4cd11ff27941e2838a0fa0ce172778c4e7f8d1a165c9df3bc59de99205bc2e29ba4b7ec443c09bd8cf8682bfb58a26e263fcfc4c164115dd793a64ca62f22407a7e96d9930f0f206ede5f3ab7bbbc9f303b50bde70ae592c06b693092d44cf5dd0da403fd7441273630de5ae2fea4da635eed185628bcf8afc9f91d61e52f53c1d420e958ef3a501a94464ce547cbe927371d9adafa3530c265f84c8c56091e3df1bf686434f65a4c871236de51171df080da7515e1ce434c12431526905c282853e1844a7fbf03b739b91b86d382bce30b2aa1707f19dd6c35712fb07adde2b102ebe760d0515e33b705fa585d898c02606266d428649fed3f81b86d60d21deb3c8e2251e69a40dfb931393b8dab0e2e36b37e30ce14ddc36bca306212a25cb02c38a7e9c57b3bbab7b3cc80e6cece5d1730381dcbe78998af52d22ec7252b2ca443711765367940a371aaf3b67cc00387972b804927a8f01f1a372986a9c9f256c7982ca1c27d67d8626443ebf8cf8a23ec6b7ec599cedc651d06672964841fa1a27a53d22dae16df30d6a79c788c76bb26917f880de3d166628899aaea8270b1dde4c141a34af0e6b8a98854c719d7be3d67d172160f741de903cbbaf00a6d405542a6af7efe929a4178836e2357ddf8c0550d3b7ad08a464bb4a511f8a1ed9c7fef6cd20b58f81178ef4c1b4ca8789e5831ea8bd32fac85e7f073e37f1bd979a76b636f271442e05e4f18f585007868eef26b1fc3f1e9bc3d7e60af835a7e47da5062727375fcaa32b55cd7fa97399cb1d2745607af462511870646f18c8935bb59dddd75520833396570e351e0f09abc2c49af53dd2696d28e7db631618d2576cecfae716049fa2bfbb9a112e8497f60edf4ba958ed7367182b006de846442102097887326c73481185f19979ac3ef6673de752ff541bd1be6f5d9dcf30b0d94c9908ea86cb220a12a44563a1acdc17fb4efa6d473a65a174b7dd54a94178bc23adc12994c305278dc02708563695a58ab7b53a82eb89bb7b36da2c1e52bfed21944479b8574c093310c710b2fe8fb374ad9a202cdcef05e054555398a9a37f6bc66e0e61fa6cebcc6418b017facb3febd5d31b2732695f574ef652dbd6469fd39721a137b3ba2d7c441f36c7665a8f95adf7c5fdfbb7dc9f3303acaab9a157412a2c5a43b665c2f69e49fc303fcebac9f82326d628189eba6d652f13d1d8ebd0e12d3f0339657d01e0c18c46fa84093a79cd47c44cc142a8e1e5bfdc31482275aa36ff650368b02f2698ed53b9b947a3dfc8f020bc62a06bfdf7434b43f07608de904ee60a8c3681fad72a9e07aa2392512c827a88bcc57caa0fe102c6195699c56b2144c5c18ce5b376694d4c7f3e730f075e175b15d58e005670495151bc4bc8d9901befdf9626f4fe63f48a0428051a1422b6cfbd7593cdbe7037bd1b6eff89c8ced03a47799e65a1c6f1148d79fd82e8ce06a3d9fd2787141956ebff206956ccc20451d681e88e302ccfba624cefa64ecfa9dc187678ce64aa55a12d588562cdad547f1346d160e8cd34349e2576eae85f550b15e4c935d63abac8d9457100eb946b042dfd9049c6b5379a60c81281dd6d5e9ffc3d630bd9f7342a77291062a005a78ff0ed9876608f3376fc6549ba0ab1f4c85581219396b1b5e6156fe480b71d11a4f0f8f87932155255eeb33aa3d4cd215078b41d5d5eed43715e160f8c3842861a2a7c8017bc3d669abd2736e56fc30eb72cd9b8e6215eaf916d8248eb9739ca8ba4265b7f99d01c8848b8f9321bd9e537c19e068492cd93a46351c20d059bedd8d9cf1ad831601d14d516bdf9f70f0936dcbc317bba4a0769d0b026beac7d920bcb67be4f8f6a4fec918ad71f904eae8d0c51b7c3bb4e7e8fa884e0331f0627f6e64b873fde16a8e554a1061f83fa8a4484f39b26b38076d7b40aece4f84959c1f7e149e2e6ed358607c51b441b12c7d564854b869ba28c7e3a335f3423152119cc79828342a05d8eba0cd708279e005f6b8f209b230b48d4ce3d9076154e67598a4c206a90c6f084a1df6808a78d462943aa665da946e72b41be9468e2d70787cd7994dfe9a4e7c77a988fddd3fc8e485cd25e66d6996eaebc32d16de4d4c777685cff50d3741869d9106110dbb7f62c2c0f2352c2e5130dfe5097898101e4716d4298ddae31d53ec8f6a2ee8f8023aa9d567a29ba3426366b6fdc281b3bd4cac2c26fa7e4089787a843c02d1dc3d8a7e0596714bfd9bba1a8dc52b1b0ac3e8d243346b627afd983b8ad9ff556d5d5e46c791946b015d4c353532aceee5335d1bd22593ceda4950350b18cd5b2feed32bf1f685dfc3dd934a6711ce8071f639e564d147bb36b5deeca29d9ad04ccf2398f4447e62d97418ae6406ea4b57c1d14a53def08685740e7fa442778d56a597c3e5482f6a54b8ecac912df539c13927327d3f32c13e1e147f3544072d5417703c431856dd61dcf5ff18bfb30e27a8b7e35f549bff50a0f6b1406eddb1ed89c1df989f09601895b2ed9bd91182eec5ce62524895568153a01c038f36b57a3525c268ba0f6cbf1a23354d782da31169b4d261e6d376720cee45da1544bec2af301a37ba890069499040af12f5766e74f7dcd3bd801e5db610359a10f6d8a95e3002c2ab7d983bb543cd47abaa49143adafb486524aa6cd2aaada104d21def88a118def9e1487f40e66b476703852440ab8997d6ef7c84b296abe7e90ac37b5ad70ef0e11d0ca31fa0573ab5df9b42bc3d984168425fdd57c962ced5ff19e40c0a2074163a389df2ef5f1e62820c22e2c515d873768e4dad29690e557fa6564e8f7f9735a8fce9f5f1b7a52886488f65a437d47b5c80e34ab896bc89322cee3d9f70d56906cca3ddfdda8a47c022a8632266919f4815df20dfd0d42c639a674169f908b82339b4f417cc055a1d6435e2a20d6ba6a899ab3b91dcce4b456d7bf5ef820848444d0d5cf8b162e0f391fb3a25b5da3cb7c051ffe73156b010b0f5c147b8df08e9be6f8e86053f12b916f6f075142c407660a59f91c3376694a25b4ee4b062faf0c7ecd039619b639695db3c24cd3fd97821c1e7cb6aa74a48dfc2beceb1101922dd083ecd147102f41597643d2a336c4387fa3b4b3b312a1b3ce8a102f529d5d343bd299cfe957bc4e45d3117ec5607e51481ee27fa77ebbdb1fb061eb70c6e533a5bd0f7807accd5e1ac8023e440def0dfb2b8e2a4454008c307a30ea88c42de25f50bf92c9da6d499fecf77f34fd5ff9c30b25d921d01d516d8302707bec0f9accecbcd60fec95634c38e83d7284b796147c9734d001c87618ba62ef525c2840a66912aaa8c71497d0633e94ed6943794ee040e391040a2d12bcd19ce54e3acd05614ed730a68430f76b42399f1646f7b121faa999475d8334c2cc2ddce2bad357ac8c4ef3b5519b60c00214697367162d4cb161376e02259350b466c87b8d9e16b62386a7d9cc0a754ba8b927ea02770932874673567ebad63d766ffc5b0f48f3d4e0892d6db632f77c39c5b6a4e80302667c73e036799a46cfe59f6d63750646568497f617b60e202968fb69dfbdad7ecf28cdf698590413c839f24d56ddb93ef63101d5a24db5b8f454b4010cea2bb8dce6eb8029cb0c895f8efec198a1e8d8f20016c04af1e08099d560f8b254f4759e824dbc67e7fbc7342fe1b0cc148635749711875965506d72fedf370724377552f27e723beae37aaa5a4ceb7dd50eb72dbde9880d0635b344e33bb5d9cf97bf125e5c19f7e02aa40e0bd3c42249e147f29dbbff3a1ea0e25fe3a3e7466c558610ca5932a80b285bbfb82299edb837ecfdd8c89047a721d936ac120994f793bd152938f2a9e4dc6789c736a9b585e870f192db389fe7ed29de8eb93304c119a1ecf013ff97b8dce6e5c740f565b166d006fc962a19a0d64e091cb89c04e69124c20d2e0c9aa5b3390c147afdfb0d8e316ba16fde25d9b27b579adc28118e5d5df3a9e41377551c3fc823a6525e4126fd52acd0433c7710df9ade545f3feae907bb72a7947b261090e2854627dde5fab184178af989c501c4c97374ef9fd910b2c49edc6688e696cb9d5c86a464ea848734e5bb58df8589cf712a8f4a4a76991adc07dfbaa65f74b9b6b55e27c5749c847ce96e49af5a2c638d4c7d587cb85e5ede266ebdc7b1365b444f35ff108713bf99bb7221473fdc8b9953a58cdd6707182de069cc9b74b9ddaad291604461fdf40cec5adf77dadc48aac2674cefad360a6a9b2c2295221cb0f60b6b9ceed818c62e3ae4c95132199ce9fa31b45c7cdeb3826734042c3f3327026fe4342aa2fd484749b508d9a51affe2c63b64ff7316c1b8b215c55de0b0eff1c69637385a81313e7cd752caa94d99798dd94b3a61448c79c58c07bcd7bee0c53a4bb7d54530408c5268bf4b8a4739f8deee25e58b64cad9520e22528ed9c9fdbbc0cacd591806e3c5747fb43d9e8a1f525d938e90a3606e2065e424eb0ee95e70eb28eb324f8c1af3c72aab86e00e8e17ad107cb9e93b06c9a5d530aa2161926ffd4a6d03eed2f6f0aec722171fa85a24863d2347fd65b1172eae0b2bba87e6e63f2362ec1e35d5176977d3d028fec0e5886b30db210f53680651bfa27eea537d878996d1f529a8269a664136047c9399f3b208445e2990876d8dd5798dd8540c931f6c9469db8b4af77bac4e186ad31578782cbd601272803c5fecb50ca4c61870f1eae8e3085493eab4ad4b098e7eaafa9bf952fc6e22527c6f0aa6903261b9833ffda0324a880ff0a6a79325c7fc7dd6509d666af24eba5e0265ffc4534e73dbea3273bcd06b493033fc05093063dae4d2592bb70bb0c7d9ebd5d17c67aec6a5bcd4b58df50c3e63a15c35cba9c7b2d02b12d5390afec2884351bb16c393d43e8bf6766b6e5291c32f9b326febd4075e9d237db5b270d35636aeb9e2bc05e0c8eb28a7cf314a6d6f0e3394fa2bb17630899afc06fa3cb5d10fd74789deb31f0c4ddfcc5f9df9c1b1b5acec050b36d0d60442f530d35016e36117779249cbc99803391b03f7e403a8b4ccb205272cfa98708674ac97bcf51692ef652cc23d6475bcda29b26cfecc60b339c8fdb6672e655f9f21f24da380b680d7cafb009aea46e97311192aa9061bcda22342792c926ddfbcdb54b5b1bc141de5dbba2836e1b101f39bafb23c03c338a880ffa6198ad8db5d49357482800f8d14adf4fbf7fa121c2ddb5df588881aa394226af5f58711df1e184107bb994520781a1590e3136aa5704215c55c6682d3cd98f50fa282f923165a4145c060b415be74fc6ca795d22cf63c849878e5520b744c43020f6374577bcb083d52b05294f9417d599c9d9e1cbbe98821ee04e07c96b85517f5612f8807c90766679f97e260ce4d987b331a430730c727c4fede05783620ec6d5206bc4b3681b50f12b1b4df8639ec0d6b1dfb5ca5a982ae266de9621864eda7c5d0a598fb3906d5051e1f55b8b35034eeb7fc31944a9a733de7f7b6dc468e998d9c4f2ed23ba9b21693f04730fc9785bfb2da7325b7e0ffa837c06bfd458d3daf59ddbf54ad21327863afedb424c6bf897bc2c4405189086d35bcd91e3c73a5f2960b6f29497f4705f724492454cbaf78c70f805062c917ac40edb39ee2110eba63080cdb3563", 0x1000}, {&(0x7f0000003200)}], 0x5, &(0x7f0000003380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='^\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4], 0x60}}], 0x4, 0x20048081) r5 = syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r9, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r11 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r11, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000001d40)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="080000005c0500002e2f66696c653000"]) dup3(r9, r8, 0x0) io_uring_enter(r5, 0x2271, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) [ 1273.699964] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.701040] CPU: 0 PID: 8113 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1273.701643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1273.702369] Call Trace: [ 1273.702629] dump_stack+0x107/0x167 [ 1273.702973] should_fail.cold+0x5/0xa [ 1273.703321] ? create_object.isra.0+0x3a/0xa20 [ 1273.703723] should_failslab+0x5/0x20 [ 1273.704059] kmem_cache_alloc+0x5b/0x310 [ 1273.704406] ? mark_held_locks+0x9e/0xe0 [ 1273.704757] create_object.isra.0+0x3a/0xa20 [ 1273.705156] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1273.705588] kmem_cache_alloc+0x159/0x310 [ 1273.705948] xas_alloc+0x336/0x440 [ 1273.706259] xas_create+0x34a/0x10d0 [ 1273.706591] ? kernel_text_address+0xf2/0x120 [ 1273.706973] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1273.707416] xas_store+0x8c/0x1c40 [ 1273.707731] __xa_store+0x164/0x2d0 [ 1273.708044] ? xa_delete_node+0x280/0x280 [ 1273.708402] ? trace_hardirqs_on+0x5b/0x180 [ 1273.708773] xa_store+0x31/0x50 [ 1273.709087] __io_uring_add_tctx_node+0x1cf/0x520 [ 1273.709504] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1273.709951] ? alloc_fd+0x2e7/0x670 [ 1273.710274] io_uring_setup+0x1f6a/0x2910 [ 1273.710633] ? wait_for_completion_io+0x270/0x270 [ 1273.711044] ? __do_sys_io_uring_enter+0x18c0/0x18c0 [ 1273.711497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1273.711943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1273.712382] do_syscall_64+0x33/0x40 [ 1273.712698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1273.713153] RIP: 0033:0x7fb639313b19 [ 1273.713471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1273.721922] RSP: 002b:00007fb636889108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1273.722562] RAX: ffffffffffffffda RBX: 00007fb639426f60 RCX: 00007fb639313b19 [ 1273.723162] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000004d4f [ 1273.723760] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1273.724356] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1273.724968] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1273.727662] FAULT_INJECTION: forcing a failure. [ 1273.727662] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.728617] CPU: 0 PID: 8122 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1273.733039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1273.733731] Call Trace: [ 1273.733956] dump_stack+0x107/0x167 [ 1273.734267] should_fail.cold+0x5/0xa [ 1273.734591] ? create_object.isra.0+0x3a/0xa20 [ 1273.734978] should_failslab+0x5/0x20 [ 1273.735299] kmem_cache_alloc+0x5b/0x310 [ 1273.735650] create_object.isra.0+0x3a/0xa20 [ 1273.736022] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1273.736453] kmem_cache_alloc+0x159/0x310 [ 1273.736837] anon_vma_fork+0xf1/0x640 [ 1273.737165] ? __vm_enough_memory+0x184/0x360 [ 1273.737554] copy_process+0x7218/0x7800 [ 1273.737925] ? __cleanup_sighand+0xb0/0xb0 [ 1273.738289] ? lock_acquire+0x197/0x470 [ 1273.738633] ? find_held_lock+0x2c/0x110 [ 1273.738984] kernel_clone+0xe7/0x980 [ 1273.739301] ? lock_downgrade+0x6d0/0x6d0 [ 1273.739655] ? find_held_lock+0x2c/0x110 [ 1273.740000] ? create_io_thread+0xf0/0xf0 [ 1273.740354] ? ksys_write+0x12d/0x260 [ 1273.740682] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1273.741121] __do_sys_fork+0x8a/0xc0 [ 1273.741436] ? kernel_thread+0xf0/0xf0 [ 1273.741782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1273.742222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1273.742654] ? trace_hardirqs_on+0x5b/0x180 [ 1273.743022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1273.743453] do_syscall_64+0x33/0x40 [ 1273.743768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1273.744194] RIP: 0033:0x7f8f4b3d9b19 [ 1273.744513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1273.746055] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1273.746697] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1273.747293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1273.747891] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.748488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1273.749103] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:45:38 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x3}}}}}, 0x0) 06:45:38 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8864}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 62) 06:45:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_coalesce={0x6}}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @remote, 0x1}, 0x1c) 06:45:38 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x2c}}}}}, 0x0) 06:45:39 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8906}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1273.895024] FAULT_INJECTION: forcing a failure. [ 1273.895024] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.897062] CPU: 0 PID: 8141 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1273.897885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1273.899741] Call Trace: [ 1273.900319] dump_stack+0x107/0x167 [ 1273.901156] should_fail.cold+0x5/0xa [ 1273.901994] ? create_object.isra.0+0x3a/0xa20 [ 1273.903005] should_failslab+0x5/0x20 [ 1273.903838] kmem_cache_alloc+0x5b/0x310 [ 1273.904732] create_object.isra.0+0x3a/0xa20 [ 1273.905706] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1273.906819] kmem_cache_alloc+0x159/0x310 [ 1273.907734] vm_area_dup+0x78/0x290 [ 1273.908527] ? lock_acquire+0x197/0x470 [ 1273.909418] ? create_object.isra.0+0x3ad/0xa20 [ 1273.910436] ? mark_lock+0xf5/0x2df0 [ 1273.911248] ? __lock_acquire+0x1657/0x5b00 [ 1273.912190] ? lock_chain_count+0x20/0x20 [ 1273.913122] ? mark_lock+0xf5/0x2df0 [ 1273.913957] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1273.915116] ? lock_chain_count+0x20/0x20 [ 1273.916021] ? mark_lock+0xf5/0x2df0 [ 1273.916842] ? vm_area_alloc+0x110/0x110 [ 1273.917826] ? __lock_acquire+0x1657/0x5b00 [ 1273.918871] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1273.920119] ? vmacache_find+0x55/0x2a0 [ 1273.921075] __split_vma+0xa8/0x570 [ 1273.921940] __do_munmap+0x365/0x1260 [ 1273.922856] mmap_region+0x776/0x1590 [ 1273.923773] ? get_unmapped_area+0x2f0/0x420 [ 1273.924821] do_mmap+0xcdb/0x11e0 [ 1273.925675] vm_mmap_pgoff+0x198/0x1f0 [ 1273.926603] ? randomize_page+0xb0/0xb0 [ 1273.927561] ksys_mmap_pgoff+0x41c/0x560 [ 1273.928522] ? find_mergeable_anon_vma+0x250/0x250 06:45:39 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) getdents64(r1, &(0x7f00000001c0)=""/196, 0xc4) [ 1273.929743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1273.931114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1273.932366] do_syscall_64+0x33/0x40 [ 1273.937005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1273.937440] RIP: 0033:0x7fb639313b62 [ 1273.937759] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1273.940972] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1273.942262] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1273.943465] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1273.944664] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1273.946244] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1273.947823] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:45:52 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:45:52 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:45:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="340004000000009e57ed4b0b38bb00"/26, @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d8014cf108005000a000000375201dd76b08d91566d40407ba27fe75999a23c0acc841fed18e20006000500c1d15cbf14d7e77ba44f89c5f145daeeebbc1fc35899df9622210475d08e3ceebcb6220cc09ed5d92602bd09cdf50d6017c4c0a20109b6d06246448c5708b48e7afd7e58ffffffffa5224a8afe283f0c3eaf941eaf51be26dec90329f8f68d68266e94d57e8d5a429d9782537a6fff44090ef74aeb80188a9cfc540214927d149139277ec51a0be9b5174ac8baae183a0f311239dc52865925eb9dbf65"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x40) 06:45:52 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 64) 06:45:52 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:52 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x30}}}}}, 0x0) 06:45:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x200020, &(0x7f0000000200)={'trans=virtio,', {[{@nodevmap}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@access_client}, {@cache_fscache}, {@nodevmap}, {@msize={'msize', 0x3d, 0x7}}, {@access_client}, {@cache_mmap}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_lt}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise}]}}) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:45:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 63) [ 1287.428774] FAULT_INJECTION: forcing a failure. [ 1287.428774] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.430043] CPU: 0 PID: 8171 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1287.430693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.431409] Call Trace: [ 1287.431738] dump_stack+0x107/0x167 [ 1287.432081] should_fail.cold+0x5/0xa [ 1287.432408] ? create_object.isra.0+0x3a/0xa20 [ 1287.432917] should_failslab+0x5/0x20 [ 1287.433261] kmem_cache_alloc+0x5b/0x310 [ 1287.433660] create_object.isra.0+0x3a/0xa20 [ 1287.434036] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1287.434470] kmem_cache_alloc+0x159/0x310 [ 1287.434865] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev loop3, type vfat) errno=-22 [ 1287.434881] vm_area_dup+0x78/0x290 [ 1287.435704] ? visit_groups_merge.constprop.0.isra.0+0xae0/0xae0 [ 1287.435861] ? rwlock_bug.part.0+0x90/0x90 [ 1287.435872] ? group_sched_out.part.0+0x1a3/0x2e0 [ 1287.438107] ? mark_lock+0xf5/0x2df0 [ 1287.438428] ? __lock_acquire+0x1657/0x5b00 [ 1287.438849] ? lock_chain_count+0x20/0x20 [ 1287.439213] ? mark_lock+0xf5/0x2df0 [ 1287.439586] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1287.440038] ? lock_chain_count+0x20/0x20 [ 1287.440396] ? mark_lock+0xf5/0x2df0 [ 1287.440872] ? vm_area_alloc+0x110/0x110 [ 1287.441242] ? __lock_acquire+0x1657/0x5b00 [ 1287.441671] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1287.442119] ? vmacache_find+0x55/0x2a0 [ 1287.442459] __split_vma+0xa8/0x570 [ 1287.442818] __do_munmap+0x365/0x1260 [ 1287.443155] mmap_region+0x776/0x1590 [ 1287.445398] ? get_unmapped_area+0x2f0/0x420 [ 1287.445968] do_mmap+0xcdb/0x11e0 [ 1287.446276] vm_mmap_pgoff+0x198/0x1f0 [ 1287.446720] ? randomize_page+0xb0/0xb0 [ 1287.447074] ksys_mmap_pgoff+0x41c/0x560 [ 1287.447422] ? find_mergeable_anon_vma+0x250/0x250 [ 1287.448064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 06:45:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x105) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) [ 1287.448554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.449010] do_syscall_64+0x33/0x40 [ 1287.449331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1287.449816] RIP: 0033:0x7fb639313b62 [ 1287.450133] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1287.451849] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1287.452525] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1287.453166] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1287.453811] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1287.454415] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1287.455066] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1287.473726] FAULT_INJECTION: forcing a failure. [ 1287.473726] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.474837] CPU: 0 PID: 8177 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1287.475415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.476155] Call Trace: [ 1287.476383] dump_stack+0x107/0x167 [ 1287.476738] should_fail.cold+0x5/0xa [ 1287.477079] ? anon_vma_fork+0xf1/0x640 [ 1287.477417] should_failslab+0x5/0x20 [ 1287.477786] kmem_cache_alloc+0x5b/0x310 [ 1287.478137] anon_vma_fork+0xf1/0x640 06:45:52 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x3}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1287.478460] ? __vm_enough_memory+0x184/0x360 [ 1287.501282] copy_process+0x7218/0x7800 [ 1287.502162] ? __cleanup_sighand+0xb0/0xb0 [ 1287.502529] ? lock_acquire+0x197/0x470 [ 1287.502923] ? find_held_lock+0x2c/0x110 [ 1287.503276] kernel_clone+0xe7/0x980 [ 1287.503639] ? lock_downgrade+0x6d0/0x6d0 [ 1287.503999] ? find_held_lock+0x2c/0x110 06:45:52 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x122) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0xa4cc, 0x8, 0x2004, 0x3e0, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x88600, 0xc) creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 1287.504390] ? create_io_thread+0xf0/0xf0 [ 1287.505062] ? ksys_write+0x12d/0x260 [ 1287.505397] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1287.506009] __do_sys_fork+0x8a/0xc0 [ 1287.506328] ? kernel_thread+0xf0/0xf0 [ 1287.506727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1287.507770] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.508205] ? trace_hardirqs_on+0x5b/0x180 [ 1287.508573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.509093] do_syscall_64+0x33/0x40 [ 1287.509410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1287.509841] RIP: 0033:0x7f8f4b3d9b19 [ 1287.510159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1287.511699] RSP: 002b:00007f8f4892e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1287.512339] RAX: ffffffffffffffda RBX: 00007f8f4b4ed020 RCX: 00007f8f4b3d9b19 [ 1287.512945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1287.513559] RBP: 00007f8f4892e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.514164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1287.514763] R13: 00007ffd08982e1f R14: 00007f8f4892e300 R15: 0000000000022000 06:45:52 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x60}}}}}, 0x0) 06:45:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x3f, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0xa25d, 0x288002) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/227, 0xe3}], 0x5, &(0x7f00000017c0)=""/4096, 0x1000}, 0x0, 0x102, 0x0, {0x3, r1}}, 0x1) 06:45:52 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x300}}}}}, 0x0) 06:45:52 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x7}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:45:52 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1301.360045] FAULT_INJECTION: forcing a failure. [ 1301.360045] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.363769] CPU: 1 PID: 8207 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1301.364353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1301.365698] Call Trace: [ 1301.365933] dump_stack+0x107/0x167 [ 1301.366245] should_fail.cold+0x5/0xa [ 1301.366574] ? create_object.isra.0+0x3a/0xa20 [ 1301.367011] should_failslab+0x5/0x20 [ 1301.367338] kmem_cache_alloc+0x5b/0x310 [ 1301.367758] create_object.isra.0+0x3a/0xa20 [ 1301.368130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1301.368568] kmem_cache_alloc+0x159/0x310 06:46:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000011d40), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/85) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40485404, &(0x7f0000011d80)) preadv(r0, &(0x7f0000000080), 0x0, 0x20400, 0x0) 06:46:06 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x100000001, 0xa4ca) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001600)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x100000000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000280)="484c2b829aa828fd852296e608c7aff8ad6c386c0ffa83e848527916056d916bdb00f8bee5437f2f0c9d6b6192198c7fc9f907a82e8e2112ed8d597e222bea343dbff6f7e117323fcb03609f6643cdbbb4532c1722e54821e00d6f9604d6e966f6ea41e61574572656da51a20ff86a8a03b0d1f5c81e0e26b75bfc3c9a91fae8657d2e5bc1eeba275a450819b2620034a3b29a1845e334f8efecf3397e0cbafa49f9b4b2f52d7acd74ed348d0223b2f1220bf063e11acaf97d32df5dadc381bdce142ddccf0fd6bb72ae53732145957454f0ed658de15cf7f01bacfe1723c32019fa092f8bdbabb402c8809f28d948be44ad2c74aea58edd1783afefe26355cacf28cfb3d49541cab20fb843ba8a2c10a5a78346fa5e86a9c54f48901170504bac08c77ff39abad60333232f753bedaacd6fa19e3e62ff10a78c33bf3cfa902155f9f3adc155b55ddf3f60c8741d6fc30b638f4739b91d8bf8a46e6b363dd73d27439e7c0f4fbfe79e24316cc69ccc483922c4607727b3679463a6669e1c3d7caa6687c86e234311c50c49196f1901fa0b01820dc5d1521a0b57f368b729f4fcfb992ccfbaaacee783b9064367fd6a41c4ec0fe046ac8badb4fd776ffac86697dd1cd81e2e8168fe7d7e873a48589444f8cb798ba5a901b1f64713b40eefa3951ff704151322005df37fb7a4bf82801d69af4d901c9d99ea4d1f5a852f08bf9553138448e17ff99d3f09754975f87d1a077eb4c3fa4f19a3fc15b579a44d8f0a9fa644ffdc19db8618a0930aef3d1ecc487c5283b4d3e4ed1a85999a68d260795b2617a9d4ea8e039cfac6d27d2f86b2d54077e099949d453fbc3bc36baac1b80f37e529ef61b7a2ae8e8a7732e63685aa5fafad779237073a173b36da5808a74932e1aaa4f757c005ffc538802b9b0776b20fb5578f35319e1f8b6b45594e3fb901f96325f8111d1d6cf659ac85e4a94f28b14fb502ccaef5f3500a1a5163612c05d225559ed2e18705a0866764536947af11a03c3ca71f5979ba21cb4341f9c227273b7a60d05bf7fe61c6170e244648ba0f49f9471af04ae7b835b0797dc9161d6242bd966a0dd881ac5da8e1f9e2a144766562ab7876cf1f66230cf7b64c2f355a84d2d00b8c525089d6be3ac2e4fb8d0cd1e13911cca2c49fab2eb25e38c651abdd5e5f87e6b59a24c274b091a527889ac54e63c8a6864ceaa836d2f956dba4f44b75db5f4f54f800f64e97bb675f927ee088760b7df1f71f9ce78331e28d71dea34731693b3a5d47b171c803d517ead0200ca407ff4c38be0133104cf1016a5fd00b0ded1570fee8ff89b41d5aa24948321d428309c28cd82c9684c30beceda4c09e74ea6ad3266017a7e69a9d84f0654a4d090666452d6c3fa3a5e1fdd0cf7880c4804d6d2ba2932a3bcd3d4cfb4535ed0ccd7adcb3ea6718ef0b0b1fe07589caf4c72f9ea9502a20331bbb41b626fea8ee49431f0b4ff1a6260f78d7ff7962a5e6caaaf6f45759af7ca03bae17a8c0002dd48201d3660497c661d0e1dbffa31ff4e296054c59695e2daecfc7e813e1c77bf849d506102053ca3446e5b9acd07b45480008affc9560a1b4ed00d48f68ee9b8e7e5b650971a543dea25b0ea3925bf964fc241d84010eda064f795fdff593772c1e83c0d3f8af84d2425efc2e94a40a9aa7a3f9120a3c30b9c32132784af965a9522dd2abc253aa4b6d2c9288733894d5e431984c040a12cd096d6a9b9b1c52d67b24820e5c3a6faf8ee3cf659b0942a4c90b660a66ec6b3fac57b0df84cf0ff9b1eb8db60ed8848a0cf74df5a85ae51eeb9849a943149ed4b45a4791c43fcdc0752492fa5a4471977ce747894b5447c12aca24abd6580b7979c086101a9fe18ee90370af7925f2bd9afed63fe43b60fe307900342c1ba6eaa8189beb489c660fd2e0ec058f19d8ab78e5e54a569f5de6062257b26ec835c416e7292f113227bdbed0271620a15757001c352f143bbfa61ad1abeee030df06c29de81a7573940a319fe8bc2f30c0383e16ca0abd54f2fe12d41ee5966c5f15786ae697f4e308d3402eefe4bb400e29109ec626c4c0d4c4f9a626d2a210eb65b2ccbf1068fbaea052d528b7e9ec8e44b097df493fe34dbc11b682c9c0ce027285a6cda085a7ad49a31643240c99fdb730adc20fb090ddfd0f21e975b6978da1e5af409527c69c6927ad2421d6da9861e0a048ec5163b3b72b494af211012b0b3400d8acd4985d4d2870f790eb79fdec77498fff90de1f2efc15a604dab5f32f0996430b2cf108dbdbe364674d1c26b10a898d25b53d6396ae7c301625c23594ec2e0be3f344e8a1051171485994d7ad9b15608cd4f8fcd1b4b32781c59c42920617c5f62f420f41a7ee37af86a692afe79e9c8b396a552b0f7df8521b5ddf8fff262aacd1394c3cd419e43e3960a0a5fa3116b612392b08dbf02b85445cf4fc2ae52e2e145f4e53205eb09877e6ef8ec0c06f526b6160abc4705a2ac5c3f2debd0f76d4dcb60f6c3fd28a7a7944a145d081d46144904255ec9d294e603d53c0d962250c0916392f2ae1cdacc960e3face7737b3cdbc9b809abffa292ce9a8a2ce4b3ce309a4392fdcad58a72c81b1b9ee046674b6163d27588e7a5d7d56b9aa44272914cea0d8d11a8acbb5dc5e3f0027568bec65120ff373248da87cebf0da0b521a516483fed9ba40768b5b975ab17c33b757383a05136b29bd47a0650e506e22267a2bb687e6d52563a0a7b759dc91dc57a9328f4040baa72364cb2c913ac78289e527a079280bfb82886cf3085775e570804b2f1f525e2bcc53076e25b78d246128e93af7e9d803064c269bb3f51860144269d4056924cb4d91c856ecb12ba9dbe5c5006c914aad2d895b86fb30f488193429cfb422415db720e7d85a1aafb718c9454d638384dc81e48f6f67635fa088eaccddda32d650b370bcb5c696c78d889faf7c5dee56c376e315bb2d5839ad947bc657604ae65e7718762ff4365fbca4eb1b645fe03e9cb387f77a0ee9570637daa4ab9de7f304ff824d6a0025b067ecb3b3027b36a198466483154cd17b543f6cb5183a29230532888d86a38eb255e08bf096872e8363baa8c19e51869afd21b7594be584fb7c293d559ae76372d4e7839a3a6a1b231f0f7180f1de9bc455a73f238b3628a43c12a74ba187f58580c863c534d02463d07425e7de1cc0ccedb13621e60bac9dff84cbe8692eb90cdd5743847915ad585c7bd4385a06d350c834144f1b2b7c0e43ff48e73a15fb561f35eb6d750c893b269bf181887e544bc56e2b0370553e73b061c640846b91498ecf9d491b31fb9187e82b56ac43875736e0f3010f28215fb0ee3ca60899eb68b0827131d5c3a01d70d8f05d1874c4b7341ee97c5eb94c7e67ea14c44a3be84c7d1340f0dedbc8c9c1b0c9e23065ce9de71aba6f4f8316f69bc1734d2bb71b1cb7374811ee4817d77bad5f0a3e40929318c996a22dbde0bcfec137fe7a4895aec411f057311d000ec731069c959b0ebafdc14d96aa2ede40b1c78c5c71cce9eddea70cc22165f1681bc76e3fa55303293dd7019dcb473c4e2117158af62f8ae2f268ddeda8cce1d100a02b834245bf95648789d3c5b9d0557bc04600c995ce56d9ae5cb4c944377890cb6b3cf0918ae0c79f811a8cc86bb50779a360a63f0c79aded5765fb5a2d4179fc8861f47984f25dd039724f8556c6df18b182425d6f30321ca5f36da072cf8c3a49c2a1388d7482e5ab41e6f804fed591c0c9b732237cd0fe6336dfe13d28004b7a832cae9a88d567df1ecb10b1197d316d7ea9c62c5c2587ca37cc3dd9da6d7ed72e7b84f1c9b132fe9f71382e754f94238efe74a04e3804e4fb010efb7c6f85b8b10d64a09ce59eb69cf51910040d497e719cbb4b75a7b0745011e0cf7687154aa1a942473e2c4b5c24fd4b88f69ba454f5e23405580ac9c89725f9ca9f08c9d9b3dc7cca8804aac128d22cc85dfb3df6c66aa5b7947de822c43ee1ddef65ec4138de655923fd19d1e8ebf1e8738a38170dc3e6160ba92b65b5ebb12c3b292d60827c670bf92ae30e3d71a7f72dc645e4f190ad866149a155b287fdddb342b3500b8815ae3865466bc11feaaeb5ced42184d89d8facaa6d53204d6f332b9ac61348480c7ee9eafb01d38c1e54ed8ac68cfeefbdf7285773b1fb50c6a23901a88719c2311d633c1988d95fee9c89c8a924dfc767eda24b2364d46212559f4e3ff13c03c32cd56d218043b44e8c6267834a02ecf5b01eaf268e9477bee2d1b5d72cafd66a5833906120c3d327d76a38fa637559c55efe76755c4a6c142303a4faae933674c71d21a16bf55405b5c9603fc854fc722a8e99f402f345d23b8f8f02d98c627960b555cb7eccf21c228fb6f149b204c85238cb0adcf24ddc59043bf977bd60c70f54e3aac830fc27ff4d533eb856b1074afe6207d0b70a5379f7cef2c826374f43eae8d2741b6c5752597489b31aa0566b87e6c2fb340656623f813a101115627d574c2b88e0e9b9243ba43d26b98754852bd74161fd2eb95fcee91328807773af55f990e50180a68d8151b22ac97732624f7fe20df679d1bd28c3126bc61755dc6f87f6644acc67102b300e09a96e273ffcd3d0585f24f2768daee20776b1877e85868f455aa529d760022255d67502c77eba5b98ec01ad0144e90f28dffa4b8e10317414ce839b8a7298c789ac07d6c20021069c6d035082254e18f1d5b89d0e102d5090f70d56d748d90e737547adef0765c91b8fadc293a9a50092f3f54c067f83272ed93ed5d3f4a890ee59f165201a1dab41ed29c7c607172cf294d37c8f4ea82430a3e4d2b07535c4b833cceee4c1d20a96b3fc4a47b746b5c2927ff97a69a1b7aae726eec9ed779947d4f82c6e2782b1e0739115f44d6804bfa321934db00fe67fd2a425e72613ce05b82efdd5f9f64f436cfe5e59d034a2beb2df256ac796eba42ce028878cfde5964364a70286dddb17b2ba0092aaf1435651b5ed1029f8d5a4e47d79e001543ae0f634a8b0d5f8388a95214762d808893c1807936604984334f7db9d36caed0deeef47e7edda33954877e0d93ad9b28a048c7034ab2f21a24951bb90b3eaa8991bdecb69bcbd36bce408b6f0278c2006bd4ae0a0e08068858defb6842dcba30876ebb9534a7df4e0729bee61d977ef572324cdb98342bb88a196f3df902747df80ee07fd0b2943ab1876751f6240770e501aac2ca3398c50d789cf1fd9fda89068c75bd23245737daaf7c47ff305e6ee56a79b088052d14be2dd9b9062478c215b71aa6b92b0b7e09d89251e1db518dcf53c0871e7bdcb6a6ab0c451b7cd5ae8bc5f094bad518a9220aa83436709c70df7aca6e1fe4eb265bb006bde3b37e718fddea53b18e86b59d2d39edd48ca147cba5769e4fea966de390b3baec9b48b3253b34a69e3e5e6a639aec999c6fadd59d40644245675d098df15dff0046be7bb3372b4af307f007a016e43321e61ccaf10cc6549ef424d7b168a318d5029ae75dd334da81f9bdb01728e9cb8c816dacbe8713647647cf109aef53778d3723f78042bfb90b9a54958f6a4e77504df4038b5398c150d3879d3a325cc4d683c4eeb8498c89b330903a8df844b63c87efe3a835d136252b56da257e8cd97749c95d547480dbb229dfd13390ba5629779747eb62eed3ab93bd4e884825bd693527ad10fc12bed33b9c8621d67fa0c08fd831c7a3b5983b54e08347946994d30dea20ee2efd81509810093d94c16602ca43ba6bb1f71f3eb28ce", 0x1000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001580)={0x0, 0xfffffffffffffffc, 0x96, 0x9, @scatter={0x2, 0x0, &(0x7f0000000100)=[{&(0x7f0000001280)=""/111, 0x6f}, {&(0x7f0000001300)=""/242, 0xf2}]}, &(0x7f0000001400)="7badd5fd26c3fc76f4bd3b408008bfba38500ba647093b28017a8873a2b9f3a358a9a85d3b66f26160ff3e6b1781b09b25ba436fe5c131baa931eef9c867709eb487b51e70394a5833b550a6032e6c1e6054a821692f6d5a2f63fcb47d05f515d36e1ff5e325cfb2b1cfb45cbf9a402e8a4496ee847c675d14e4be907f9327cf498db3bd3e0d52247ef450d78334fe9646e892b1bdd9", &(0x7f00000014c0)=""/69, 0x1, 0x22, 0x0, &(0x7f0000001540)}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000180)=""/219, 0xdb}], 0x1, 0x400, 0x20000000) 06:46:06 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:46:06 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x2c00}}}}}, 0x0) 06:46:06 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 65) [ 1301.368980] anon_vma_fork+0x1ff/0x640 [ 1301.369333] copy_process+0x7218/0x7800 [ 1301.369750] ? __cleanup_sighand+0xb0/0xb0 06:46:06 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/119, 0x77) 06:46:06 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 64) [ 1301.372030] ? lock_acquire+0x197/0x470 [ 1301.382522] ? find_held_lock+0x2c/0x110 [ 1301.383148] kernel_clone+0xe7/0x980 [ 1301.383465] ? lock_downgrade+0x6d0/0x6d0 [ 1301.383968] ? find_held_lock+0x2c/0x110 [ 1301.384409] ? create_io_thread+0xf0/0xf0 [ 1301.385028] ? ksys_write+0x12d/0x260 [ 1301.385399] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1301.385964] __do_sys_fork+0x8a/0xc0 [ 1301.386279] ? kernel_thread+0xf0/0xf0 [ 1301.386796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1301.387237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1301.387724] ? trace_hardirqs_on+0x5b/0x180 [ 1301.388092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1301.388526] do_syscall_64+0x33/0x40 [ 1301.388915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1301.389366] RIP: 0033:0x7f8f4b3d9b19 [ 1301.389732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1301.391304] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1301.392077] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1301.392843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1301.393462] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1301.394146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1301.394833] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1301.409680] FAULT_INJECTION: forcing a failure. [ 1301.409680] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.410934] CPU: 1 PID: 8215 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1301.411580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1301.412342] Call Trace: [ 1301.412713] dump_stack+0x107/0x167 06:46:06 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x3000}}}}}, 0x0) [ 1301.413042] should_fail.cold+0x5/0xa [ 1301.413386] ? create_object.isra.0+0x3a/0xa20 [ 1301.413996] should_failslab+0x5/0x20 [ 1301.414550] kmem_cache_alloc+0x5b/0x310 [ 1301.414959] create_object.isra.0+0x3a/0xa20 [ 1301.415333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1301.415815] kmem_cache_alloc+0x159/0x310 [ 1301.416175] anon_vma_clone+0xdc/0x590 [ 1301.416513] __split_vma+0x17c/0x570 [ 1301.416906] __do_munmap+0x365/0x1260 [ 1301.417280] mmap_region+0x776/0x1590 [ 1301.417657] ? get_unmapped_area+0x2f0/0x420 [ 1301.418035] do_mmap+0xcdb/0x11e0 [ 1301.418340] vm_mmap_pgoff+0x198/0x1f0 [ 1301.418724] ? randomize_page+0xb0/0xb0 [ 1301.419073] ksys_mmap_pgoff+0x41c/0x560 [ 1301.419418] ? find_mergeable_anon_vma+0x250/0x250 [ 1301.419884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1301.420329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1301.420841] do_syscall_64+0x33/0x40 [ 1301.421222] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1301.421702] RIP: 0033:0x7fb639313b62 [ 1301.422020] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1301.423627] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1301.424271] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 06:46:06 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r1 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10040, 0x8, 0x11}, 0x18) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) [ 1301.424983] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1301.428769] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1301.429390] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1301.430028] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:46:06 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) (fail_nth: 1) 06:46:06 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:06 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x4000}}}}}, 0x0) 06:46:06 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x121602, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)=0x800000) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a2, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) renameat(r0, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:46:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 65) [ 1301.545791] FAULT_INJECTION: forcing a failure. [ 1301.545791] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.547300] CPU: 1 PID: 8236 Comm: syz-executor.2 Not tainted 5.10.225 #1 [ 1301.547883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1301.548585] Call Trace: [ 1301.548821] dump_stack+0x107/0x167 [ 1301.549155] should_fail.cold+0x5/0xa [ 1301.549491] ? kvmalloc_node+0x119/0x170 [ 1301.549840] should_failslab+0x5/0x20 [ 1301.550167] __kmalloc_node+0x76/0x420 [ 1301.550508] kvmalloc_node+0x119/0x170 [ 1301.550844] seq_read_iter+0x81c/0x12b0 [ 1301.551189] ? lock_release+0x680/0x680 [ 1301.551533] ? lock_acquire+0x197/0x470 [ 1301.551881] proc_reg_read_iter+0x20a/0x2e0 [ 1301.552259] new_sync_read+0x424/0x6f0 [ 1301.552593] ? ksys_lseek+0x1b0/0x1b0 [ 1301.552934] ? fsnotify_perm.part.0+0x22d/0x620 [ 1301.553357] ? security_file_permission+0xb1/0xe0 [ 1301.553781] vfs_read+0x4da/0x620 [ 1301.554087] ksys_read+0x12d/0x260 [ 1301.554394] ? vfs_write+0xb10/0xb10 [ 1301.554720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1301.555173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1301.555614] do_syscall_64+0x33/0x40 [ 1301.555934] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1301.556368] RIP: 0033:0x7fb7901bdb19 [ 1301.556687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1301.558254] RSP: 002b:00007fb78d733188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1301.558906] RAX: ffffffffffffffda RBX: 00007fb7902d0f60 RCX: 00007fb7901bdb19 [ 1301.559511] RDX: 0000000000000091 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1301.560117] RBP: 00007fb78d7331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1301.560723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.561347] R13: 00007ffd568b463f R14: 00007fb78d733300 R15: 0000000000022000 [ 1301.570335] FAULT_INJECTION: forcing a failure. [ 1301.570335] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.571373] CPU: 0 PID: 8239 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1301.571948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1301.572640] Call Trace: [ 1301.572874] dump_stack+0x107/0x167 [ 1301.573211] should_fail.cold+0x5/0xa [ 1301.573544] ? vm_area_dup+0x78/0x290 [ 1301.573873] should_failslab+0x5/0x20 [ 1301.574198] kmem_cache_alloc+0x5b/0x310 [ 1301.574546] vm_area_dup+0x78/0x290 [ 1301.574860] ? find_held_lock+0x2c/0x110 [ 1301.575208] ? __vma_adjust+0x612/0x25b0 [ 1301.575553] ? lock_downgrade+0x6d0/0x6d0 [ 1301.575903] ? find_held_lock+0x2c/0x110 [ 1301.576261] ? up_write+0x191/0x550 [ 1301.576572] ? downgrade_write+0x3a0/0x3a0 [ 1301.576932] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 1301.577414] ? vm_area_alloc+0x110/0x110 [ 1301.577767] ? __vma_adjust+0xc11/0x25b0 [ 1301.578132] ? vmacache_find+0x55/0x2a0 [ 1301.578472] __split_vma+0xa8/0x570 [ 1301.578789] __do_munmap+0xf40/0x1260 [ 1301.579130] mmap_region+0x776/0x1590 [ 1301.579463] ? get_unmapped_area+0x2f0/0x420 [ 1301.579845] do_mmap+0xcdb/0x11e0 [ 1301.580157] vm_mmap_pgoff+0x198/0x1f0 [ 1301.580497] ? randomize_page+0xb0/0xb0 [ 1301.580857] ksys_mmap_pgoff+0x41c/0x560 [ 1301.581228] ? find_mergeable_anon_vma+0x250/0x250 [ 1301.581650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1301.582101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1301.582546] do_syscall_64+0x33/0x40 [ 1301.582868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1301.583305] RIP: 0033:0x7fb639313b62 [ 1301.583626] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1301.585196] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1301.585854] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1301.586466] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1301.587071] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1301.587677] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1301.588282] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:46:06 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:06 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x5, 0x3, 0x9, 0x1, 0x0, 0xff, 0xd406, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91ce, 0x0, @perf_config_ext={0xbf40000000000000, 0x5}, 0x400, 0x6, 0xa483, 0x5, 0x5bc, 0x5, 0x1000, 0x0, 0xa19d, 0x0, 0x4}, 0x0, 0x4, r0, 0xf) open_by_handle_at(r0, &(0x7f0000000240)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x886, 0x4c}, 0x8, 0x5}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xc9, 0x10001, 0x40, @local, @empty, 0x20, 0x80, 0x80000001, 0x70000000}}) r1 = socket$unix(0x1, 0x5, 0x0) copy_file_range(r1, &(0x7f0000000100)=0x7, r0, &(0x7f0000000180)=0x8313, 0xdd, 0x0) 06:46:06 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 66) [ 1301.656896] FAULT_INJECTION: forcing a failure. [ 1301.656896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1301.658057] CPU: 0 PID: 8250 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1301.658628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1301.659321] Call Trace: [ 1301.659553] dump_stack+0x107/0x167 [ 1301.659864] should_fail.cold+0x5/0xa [ 1301.660193] __alloc_pages_nodemask+0x182/0x600 [ 1301.660590] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1301.661121] ? copy_page_range+0x28e1/0x3810 [ 1301.661505] alloc_pages_current+0x187/0x280 [ 1301.661888] get_zeroed_page+0x14/0xb0 [ 1301.662219] __pud_alloc+0x33/0x270 [ 1301.662533] copy_page_range+0x2ca1/0x3810 [ 1301.662895] ? lock_chain_count+0x20/0x20 [ 1301.663268] ? lock_downgrade+0x6d0/0x6d0 [ 1301.663637] ? up_write+0x191/0x550 [ 1301.663947] ? vm_iomap_memory+0x190/0x190 [ 1301.664312] ? downgrade_write+0x3a0/0x3a0 [ 1301.664677] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1301.665147] ? __vma_link_rb+0x540/0x700 [ 1301.665507] copy_process+0x759b/0x7800 [ 1301.665881] ? __cleanup_sighand+0xb0/0xb0 [ 1301.666245] ? lock_acquire+0x197/0x470 [ 1301.666591] ? find_held_lock+0x2c/0x110 [ 1301.666943] kernel_clone+0xe7/0x980 [ 1301.667260] ? lock_downgrade+0x6d0/0x6d0 [ 1301.667610] ? find_held_lock+0x2c/0x110 [ 1301.667955] ? create_io_thread+0xf0/0xf0 [ 1301.668311] ? ksys_write+0x12d/0x260 [ 1301.668645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1301.669063] __do_sys_fork+0x8a/0xc0 [ 1301.669397] ? kernel_thread+0xf0/0xf0 [ 1301.669741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1301.670184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1301.670617] ? trace_hardirqs_on+0x5b/0x180 [ 1301.670986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1301.671426] do_syscall_64+0x33/0x40 [ 1301.671743] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1301.672177] RIP: 0033:0x7f8f4b3d9b19 [ 1301.672494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1301.674051] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1301.674695] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1301.675297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1301.675903] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1301.676504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1301.677114] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1315.424389] FAULT_INJECTION: forcing a failure. [ 1315.424389] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.425428] CPU: 0 PID: 8259 Comm: syz-executor.2 Not tainted 5.10.225 #1 [ 1315.426004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.426703] Call Trace: [ 1315.426940] dump_stack+0x107/0x167 [ 1315.427257] should_fail.cold+0x5/0xa [ 1315.427591] ? create_object.isra.0+0x3a/0xa20 [ 1315.427986] should_failslab+0x5/0x20 [ 1315.428316] kmem_cache_alloc+0x5b/0x310 [ 1315.428672] create_object.isra.0+0x3a/0xa20 [ 1315.429052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1315.429531] __kmalloc_node+0x1ae/0x420 [ 1315.429883] kvmalloc_node+0x119/0x170 [ 1315.430224] seq_read_iter+0x81c/0x12b0 [ 1315.430566] ? lock_release+0x680/0x680 [ 1315.430913] ? lock_acquire+0x197/0x470 [ 1315.431262] proc_reg_read_iter+0x20a/0x2e0 [ 1315.431633] new_sync_read+0x424/0x6f0 [ 1315.431970] ? ksys_lseek+0x1b0/0x1b0 [ 1315.432309] ? fsnotify_perm.part.0+0x22d/0x620 [ 1315.432711] ? security_file_permission+0xb1/0xe0 [ 1315.433131] vfs_read+0x4da/0x620 [ 1315.433453] ksys_read+0x12d/0x260 [ 1315.433757] ? vfs_write+0xb10/0xb10 [ 1315.434078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.434524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.434966] do_syscall_64+0x33/0x40 [ 1315.435286] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.435720] RIP: 0033:0x7fb7901bdb19 [ 1315.436038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.437598] RSP: 002b:00007fb78d733188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1315.438247] RAX: ffffffffffffffda RBX: 00007fb7902d0f60 RCX: 00007fb7901bdb19 [ 1315.438850] RDX: 0000000000000091 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1315.439457] RBP: 00007fb78d7331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1315.440058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.440659] R13: 00007ffd568b463f R14: 00007fb78d733300 R15: 0000000000022000 [ 1315.448380] FAULT_INJECTION: forcing a failure. [ 1315.448380] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.449518] CPU: 1 PID: 8265 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1315.450096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.450803] Call Trace: [ 1315.451037] dump_stack+0x107/0x167 [ 1315.451348] should_fail.cold+0x5/0xa [ 1315.451689] ? create_object.isra.0+0x3a/0xa20 [ 1315.452078] should_failslab+0x5/0x20 [ 1315.452402] kmem_cache_alloc+0x5b/0x310 [ 1315.452761] create_object.isra.0+0x3a/0xa20 [ 1315.453134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1315.453580] kmem_cache_alloc+0x159/0x310 [ 1315.453949] vm_area_dup+0x78/0x290 [ 1315.454264] ? find_held_lock+0x2c/0x110 [ 1315.454610] ? __vma_adjust+0x612/0x25b0 [ 1315.454966] ? lock_downgrade+0x6d0/0x6d0 [ 1315.455315] ? find_held_lock+0x2c/0x110 [ 1315.455667] ? up_write+0x191/0x550 [ 1315.455989] ? downgrade_write+0x3a0/0x3a0 [ 1315.456347] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 1315.456811] ? vm_area_alloc+0x110/0x110 06:46:20 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x6000}}}}}, 0x0) 06:46:20 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) (fail_nth: 2) 06:46:20 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 67) 06:46:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:46:20 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2c}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:20 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x77baea28dc8b509d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}], [{@obj_user={'obj_user', 0x3d, '/proc/tty/ldiscs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x9c\xc2*'}}, {@smackfsfloor}, {@subj_user}, {@uid_lt={'uid<', r2}}, {@seclabel}, {@fowner_lt}]}}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x7, 0x2}) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:46:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 66) 06:46:20 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) [ 1315.457160] ? __vma_adjust+0xc11/0x25b0 [ 1315.457532] ? vmacache_find+0x55/0x2a0 [ 1315.457880] __split_vma+0xa8/0x570 [ 1315.458193] __do_munmap+0xf40/0x1260 [ 1315.458524] mmap_region+0x776/0x1590 [ 1315.458853] ? get_unmapped_area+0x2f0/0x420 [ 1315.459477] do_mmap+0xcdb/0x11e0 [ 1315.459869] vm_mmap_pgoff+0x198/0x1f0 [ 1315.460212] ? randomize_page+0xb0/0xb0 [ 1315.460557] ksys_mmap_pgoff+0x41c/0x560 [ 1315.460903] ? find_mergeable_anon_vma+0x250/0x250 [ 1315.461403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.461761] FAULT_INJECTION: forcing a failure. [ 1315.461761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1315.461850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.461868] do_syscall_64+0x33/0x40 [ 1315.463594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.464024] RIP: 0033:0x7fb639313b62 [ 1315.464350] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1315.465920] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1315.466569] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1315.467165] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1315.467769] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1315.468367] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1315.468974] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1315.469626] CPU: 0 PID: 8272 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1315.470218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.470923] Call Trace: [ 1315.471156] dump_stack+0x107/0x167 [ 1315.471472] should_fail.cold+0x5/0xa [ 1315.471806] __alloc_pages_nodemask+0x182/0x600 [ 1315.472205] ? lock_acquire+0x197/0x470 [ 1315.472548] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1315.473066] ? lock_downgrade+0x6d0/0x6d0 [ 1315.473434] ? do_raw_spin_lock+0x121/0x260 [ 1315.473819] alloc_pages_current+0x187/0x280 [ 1315.474207] __pmd_alloc+0x37/0x5e0 [ 1315.474526] copy_page_range+0x2bd8/0x3810 [ 1315.474892] ? lock_chain_count+0x20/0x20 [ 1315.475285] ? up_write+0x191/0x550 [ 1315.475600] ? vm_iomap_memory+0x190/0x190 [ 1315.475962] ? downgrade_write+0x3a0/0x3a0 [ 1315.476329] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1315.476797] ? __vma_link_rb+0x540/0x700 [ 1315.477159] copy_process+0x759b/0x7800 [ 1315.477549] ? __cleanup_sighand+0xb0/0xb0 [ 1315.477916] ? lock_acquire+0x197/0x470 [ 1315.478264] ? find_held_lock+0x2c/0x110 [ 1315.478617] kernel_clone+0xe7/0x980 [ 1315.478938] ? lock_downgrade+0x6d0/0x6d0 [ 1315.479290] ? find_held_lock+0x2c/0x110 [ 1315.479637] ? create_io_thread+0xf0/0xf0 [ 1315.479997] ? ksys_write+0x12d/0x260 [ 1315.480339] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1315.480759] __do_sys_fork+0x8a/0xc0 [ 1315.481083] ? kernel_thread+0xf0/0xf0 [ 1315.481449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.481899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.482335] ? trace_hardirqs_on+0x5b/0x180 [ 1315.482705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.483144] do_syscall_64+0x33/0x40 [ 1315.483472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.483909] RIP: 0033:0x7f8f4b3d9b19 [ 1315.484228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.485796] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1315.486440] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1315.487044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1315.487653] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1315.488256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1315.488860] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:46:20 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply={0x10, 0x0, 0x0, 0x0, 0xffff}}}}}, 0x0) 06:46:20 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x30}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 67) 06:46:20 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x400, 0x0) 06:46:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') getdents(r0, &(0x7f00000001c0)=""/22, 0x16) r1 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0x29) creat(&(0x7f0000000100)='./file0\x00', 0x108) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) unshare(0x48020200) unshare(0x4000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r3, 0x0, 0x1) r6 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r1, 0xffff, 0x0, 0x1ff, 0x0, 0x1}, 0x8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:46:20 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) (fail_nth: 3) [ 1315.600824] FAULT_INJECTION: forcing a failure. [ 1315.600824] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.601824] CPU: 0 PID: 8280 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1315.602402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.603096] Call Trace: [ 1315.603331] dump_stack+0x107/0x167 [ 1315.603650] should_fail.cold+0x5/0xa [ 1315.603979] ? anon_vma_clone+0xdc/0x590 [ 1315.604326] should_failslab+0x5/0x20 [ 1315.604651] kmem_cache_alloc+0x5b/0x310 [ 1315.605006] anon_vma_clone+0xdc/0x590 [ 1315.605367] __split_vma+0x17c/0x570 [ 1315.605692] __do_munmap+0xf40/0x1260 [ 1315.606035] mmap_region+0x776/0x1590 [ 1315.606369] ? get_unmapped_area+0x2f0/0x420 [ 1315.606748] do_mmap+0xcdb/0x11e0 [ 1315.607054] vm_mmap_pgoff+0x198/0x1f0 [ 1315.607393] ? randomize_page+0xb0/0xb0 [ 1315.607749] ksys_mmap_pgoff+0x41c/0x560 [ 1315.608100] ? find_mergeable_anon_vma+0x250/0x250 [ 1315.608523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.608971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.609429] do_syscall_64+0x33/0x40 [ 1315.609750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.610184] RIP: 0033:0x7fb639313b62 [ 1315.610509] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1315.612054] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1315.612699] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1315.613318] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1315.613930] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1315.614535] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1315.615138] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1315.636405] FAULT_INJECTION: forcing a failure. [ 1315.636405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.637505] CPU: 1 PID: 8291 Comm: syz-executor.2 Not tainted 5.10.225 #1 [ 1315.638102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.638805] Call Trace: [ 1315.639052] dump_stack+0x107/0x167 [ 1315.639368] should_fail.cold+0x5/0xa [ 1315.639704] _copy_to_iter+0x264/0x12d0 [ 1315.640075] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1315.640502] ? __virt_addr_valid+0x170/0x5d0 [ 1315.640883] ? __check_object_size+0x319/0x440 [ 1315.641303] seq_read_iter+0xdcb/0x12b0 [ 1315.641670] proc_reg_read_iter+0x20a/0x2e0 [ 1315.642057] new_sync_read+0x424/0x6f0 [ 1315.642395] ? ksys_lseek+0x1b0/0x1b0 [ 1315.642741] ? fsnotify_perm.part.0+0x22d/0x620 [ 1315.643163] ? security_file_permission+0xb1/0xe0 [ 1315.643594] vfs_read+0x4da/0x620 [ 1315.643901] ksys_read+0x12d/0x260 [ 1315.644221] ? vfs_write+0xb10/0xb10 [ 1315.644547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.644994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.645463] do_syscall_64+0x33/0x40 [ 1315.645784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.646218] RIP: 0033:0x7fb7901bdb19 [ 1315.646550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.648106] RSP: 002b:00007fb78d733188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1315.648762] RAX: ffffffffffffffda RBX: 00007fb7902d0f60 RCX: 00007fb7901bdb19 [ 1315.649383] RDX: 0000000000000091 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1315.649998] RBP: 00007fb78d7331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1315.650608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.651210] R13: 00007ffd568b463f R14: 00007fb78d733300 R15: 0000000000022000 06:46:20 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 68) 06:46:20 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x60}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1315.723865] FAULT_INJECTION: forcing a failure. [ 1315.723865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1315.725009] CPU: 1 PID: 8295 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1315.725611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.726328] Call Trace: [ 1315.726563] dump_stack+0x107/0x167 [ 1315.726890] should_fail.cold+0x5/0xa [ 1315.727225] __alloc_pages_nodemask+0x182/0x600 [ 1315.727628] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1315.728166] ? copy_page_range+0x28e1/0x3810 [ 1315.728553] alloc_pages_current+0x187/0x280 [ 1315.728946] get_zeroed_page+0x14/0xb0 [ 1315.729331] __pud_alloc+0x33/0x270 [ 1315.729650] copy_page_range+0x2ca1/0x3810 [ 1315.730028] ? lock_chain_count+0x20/0x20 [ 1315.730401] ? lock_downgrade+0x6d0/0x6d0 [ 1315.730778] ? up_write+0x191/0x550 [ 1315.731099] ? vm_iomap_memory+0x190/0x190 [ 1315.731460] ? downgrade_write+0x3a0/0x3a0 [ 1315.731825] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1315.732295] ? __vma_link_rb+0x540/0x700 [ 1315.732653] copy_process+0x759b/0x7800 [ 1315.733024] ? __cleanup_sighand+0xb0/0xb0 [ 1315.733416] ? lock_acquire+0x197/0x470 [ 1315.733764] ? find_held_lock+0x2c/0x110 [ 1315.734126] kernel_clone+0xe7/0x980 [ 1315.734454] ? lock_downgrade+0x6d0/0x6d0 [ 1315.734808] ? find_held_lock+0x2c/0x110 [ 1315.735165] ? create_io_thread+0xf0/0xf0 [ 1315.735529] ? ksys_write+0x12d/0x260 [ 1315.735866] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1315.736292] __do_sys_fork+0x8a/0xc0 [ 1315.736611] ? kernel_thread+0xf0/0xf0 [ 1315.736959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.737429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.737867] ? trace_hardirqs_on+0x5b/0x180 [ 1315.738236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.738686] do_syscall_64+0x33/0x40 [ 1315.739005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.739452] RIP: 0033:0x7f8f4b3d9b19 [ 1315.739771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.741334] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1315.741988] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1315.742597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1315.743204] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1315.743817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1315.744422] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1335.530291] FAULT_INJECTION: forcing a failure. [ 1335.530291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.531456] CPU: 0 PID: 8316 Comm: syz-executor.2 Not tainted 5.10.225 #1 [ 1335.532039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.532735] Call Trace: [ 1335.533003] dump_stack+0x107/0x167 [ 1335.533317] should_fail.cold+0x5/0xa [ 1335.533669] _copy_to_user+0x2e/0x180 [ 1335.534002] simple_read_from_buffer+0xcc/0x160 [ 1335.534403] proc_fail_nth_read+0x198/0x230 [ 1335.534772] ? proc_sessionid_read+0x230/0x230 [ 1335.535164] ? security_file_permission+0xb1/0xe0 [ 1335.535580] ? proc_sessionid_read+0x230/0x230 [ 1335.535970] vfs_read+0x228/0x620 [ 1335.536274] ksys_read+0x12d/0x260 [ 1335.536578] ? vfs_write+0xb10/0xb10 [ 1335.536902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1335.537348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1335.537804] do_syscall_64+0x33/0x40 [ 1335.538127] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1335.538558] RIP: 0033:0x7fb79017069c [ 1335.538876] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1335.540410] RSP: 002b:00007fb78d733170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1335.541050] RAX: ffffffffffffffda RBX: 0000000000000091 RCX: 00007fb79017069c [ 1335.541667] RDX: 000000000000000f RSI: 00007fb78d7331e0 RDI: 0000000000000004 [ 1335.542270] RBP: 00007fb78d7331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.542867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.543469] R13: 00007ffd568b463f R14: 00007fb78d733300 R15: 0000000000022000 [ 1335.550519] FAULT_INJECTION: forcing a failure. [ 1335.550519] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.551503] CPU: 0 PID: 8306 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1335.552078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.552771] Call Trace: [ 1335.553003] dump_stack+0x107/0x167 06:46:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 68) 06:46:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') pipe(0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x82307201, &(0x7f0000000300)) creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) 06:46:40 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:46:40 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000008004900002c0000000000019078ac1414aa640101010714bb07020000001000907800"/62], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x40, 0xb, 0x20, 0x8, 0x0, 0x8, 0x80444, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x10280, 0xe7, 0x8, 0x2, 0x546, 0x1, 0x4ad5, 0x0, 0x200, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x4b0c, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x10800) dup2(r0, r1) 06:46:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000640)) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000005c0)=0x1) clone3(&(0x7f0000000400)={0x244866000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x20}, &(0x7f0000000180)=""/158, 0x9e, &(0x7f0000000240)=""/101, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x9, {r0}}, 0x58) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x220000, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x40}, {r2, 0x420}, {r0, 0x4020}, {r5, 0x608}, {r0, 0x100}, {r6, 0x2050}, {r7, 0x84}, {r0, 0x8040}, {r0}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0xfb]}, 0x8) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:46:40 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x300}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) (fail_nth: 4) 06:46:40 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 69) [ 1335.553318] should_fail.cold+0x5/0xa [ 1335.557670] ? create_object.isra.0+0x3a/0xa20 [ 1335.558061] should_failslab+0x5/0x20 [ 1335.558384] kmem_cache_alloc+0x5b/0x310 [ 1335.558733] create_object.isra.0+0x3a/0xa20 [ 1335.559106] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1335.559538] kmem_cache_alloc+0x159/0x310 [ 1335.559896] anon_vma_clone+0xdc/0x590 [ 1335.560236] __split_vma+0x17c/0x570 [ 1335.560556] __do_munmap+0xf40/0x1260 [ 1335.560894] mmap_region+0x776/0x1590 [ 1335.561225] ? get_unmapped_area+0x2f0/0x420 [ 1335.561619] do_mmap+0xcdb/0x11e0 [ 1335.561920] vm_mmap_pgoff+0x198/0x1f0 [ 1335.562253] ? randomize_page+0xb0/0xb0 [ 1335.562603] ksys_mmap_pgoff+0x41c/0x560 [ 1335.562946] ? find_mergeable_anon_vma+0x250/0x250 [ 1335.563367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1335.563808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1335.564243] do_syscall_64+0x33/0x40 [ 1335.564558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1335.564987] RIP: 0033:0x7fb639313b62 06:46:40 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0xc00}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1335.565303] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1335.570185] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1335.570830] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1335.571437] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1335.572038] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1335.572640] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1335.573249] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:46:40 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x74fd, &(0x7f0000000180)={0x0, 0x6d03, 0x4, 0x0, 0x165}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_coalesce={0x6}}) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f0000000280)="040a5b8851276de4416c07f2f063384fd15766c2279bd1c8dcedf763ab8ca3e25c05a912f83564059d5aa2", 0x2b, 0x12001}, 0x7da4aa3d) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x48, 0x82000, 0x12345}, 0x10001) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{}, 0x3, 0x40, 0xff}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabaaaaaaaaaaa8100000008004900002c0000000000019078ac1414aa64010101070b0700000000ac1414bb07020000001000907800000000"], 0x0) 06:46:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x91) [ 1335.680342] FAULT_INJECTION: forcing a failure. [ 1335.680342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1335.681526] CPU: 0 PID: 8328 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1335.682153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.682893] Call Trace: [ 1335.683145] dump_stack+0x107/0x167 [ 1335.683483] should_fail.cold+0x5/0xa [ 1335.683846] __alloc_pages_nodemask+0x182/0x600 [ 1335.684280] ? lock_acquire+0x197/0x470 [ 1335.684651] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1335.685208] ? lock_downgrade+0x6d0/0x6d0 [ 1335.685606] ? do_raw_spin_lock+0x121/0x260 [ 1335.686014] alloc_pages_current+0x187/0x280 [ 1335.686422] __pmd_alloc+0x37/0x5e0 [ 1335.686766] copy_page_range+0x2bd8/0x3810 [ 1335.687158] ? lock_chain_count+0x20/0x20 [ 1335.687581] ? up_write+0x191/0x550 [ 1335.687917] ? vm_iomap_memory+0x190/0x190 [ 1335.688308] ? downgrade_write+0x3a0/0x3a0 [ 1335.688698] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1335.689193] ? __vma_link_rb+0x540/0x700 [ 1335.693617] copy_process+0x759b/0x7800 [ 1335.694025] ? __cleanup_sighand+0xb0/0xb0 [ 1335.694422] ? lock_acquire+0x197/0x470 [ 1335.694802] ? find_held_lock+0x2c/0x110 [ 1335.695184] kernel_clone+0xe7/0x980 [ 1335.695526] ? lock_downgrade+0x6d0/0x6d0 [ 1335.695909] ? find_held_lock+0x2c/0x110 [ 1335.696282] ? create_io_thread+0xf0/0xf0 [ 1335.696668] ? ksys_write+0x12d/0x260 [ 1335.697036] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1335.697499] __do_sys_fork+0x8a/0xc0 [ 1335.697850] ? kernel_thread+0xf0/0xf0 [ 1335.698214] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1335.698644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1335.699124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1335.699594] ? trace_hardirqs_on+0x5b/0x180 [ 1335.699988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1335.700465] do_syscall_64+0x33/0x40 [ 1335.700814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1335.701283] RIP: 0033:0x7f8f4b3d9b19 [ 1335.701652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.703288] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1335.703979] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1335.704625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1335.705274] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.705937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1335.706582] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:46:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 69) 06:46:40 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x46a400, 0x121) chdir(&(0x7f0000000040)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat(r2, &(0x7f0000000300)='./file1\x00', 0x20540, 0xa6) creat(&(0x7f0000000600)='./file1\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="b8cef9e74c8cee2077d1d3d23914234b2bb65b1b6c947497fa1b9996b79f48051a7da5a93ab8d34ed49b4bb5d000a27c3aecc5fed1eb9c81e6a767848eb348f67d2a0270ab650594968825e6788183726fa5b6ac11260f6edad5a2fadfd2fc59e928e64a5b936a46d2b21adf7e669c511966efb48e2f42073c3b719746383bdabc273f174c354e0e2419", 0x8a, 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) [ 1335.818210] FAULT_INJECTION: forcing a failure. [ 1335.818210] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.819272] CPU: 1 PID: 8337 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1335.819886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.820624] Call Trace: [ 1335.820878] dump_stack+0x107/0x167 06:46:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x2010, r0, 0x8000000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r4, &(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x40, 0x100}, 0xffffff81) [ 1335.821238] should_fail.cold+0x5/0xa [ 1335.821585] ? create_object.isra.0+0x3a/0xa20 [ 1335.821971] should_failslab+0x5/0x20 [ 1335.822296] kmem_cache_alloc+0x5b/0x310 [ 1335.822645] create_object.isra.0+0x3a/0xa20 [ 1335.823018] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1335.823455] kmem_cache_alloc+0x159/0x310 [ 1335.823813] anon_vma_clone+0xdc/0x590 [ 1335.824152] __split_vma+0x17c/0x570 [ 1335.824471] __do_munmap+0xf40/0x1260 [ 1335.824804] mmap_region+0x776/0x1590 [ 1335.825135] ? get_unmapped_area+0x2f0/0x420 [ 1335.829557] do_mmap+0xcdb/0x11e0 [ 1335.829887] vm_mmap_pgoff+0x198/0x1f0 [ 1335.830253] ? randomize_page+0xb0/0xb0 [ 1335.830636] ksys_mmap_pgoff+0x41c/0x560 [ 1335.831017] ? find_mergeable_anon_vma+0x250/0x250 [ 1335.831474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1335.831963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1335.832441] do_syscall_64+0x33/0x40 [ 1335.832798] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1335.833261] RIP: 0033:0x7fb639313b62 [ 1335.833628] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1335.835256] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1335.835940] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1335.836590] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1335.837243] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1335.841924] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1335.842567] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:46:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0xa4) 06:46:54 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:46:54 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$int_in(r0, 0x73, &(0x7f0000000180)=0x7) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000200)='net/ip_vs_stats_percpu\x00') ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r3, 0x3f, 0x9}) r5 = mq_open(&(0x7f0000000040)='\'\x00', 0xcec070f8a2980749, 0x8, &(0x7f00000000c0)={0x80000000009a, 0x208, 0xfffffffffffffffc, 0x101}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r3, 0x1, r5, 0x3}) 06:46:54 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 70) 06:46:54 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa81000000080049050000000000000001b378ac1414aa64010101070b0700000000ac1414bb07020000001000907800000000"], 0x0) 06:46:54 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x500, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 70) 06:46:54 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r0, &(0x7f0000000540)=""/126, 0x7e) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0xfff, 0x0, 0x1, 0x2, 0x1}, 0x20) [ 1349.669535] FAULT_INJECTION: forcing a failure. [ 1349.669535] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.670677] CPU: 0 PID: 8357 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1349.671292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.672018] Call Trace: [ 1349.672256] dump_stack+0x107/0x167 [ 1349.672568] should_fail.cold+0x5/0xa [ 1349.672897] ? create_object.isra.0+0x3a/0xa20 [ 1349.673290] should_failslab+0x5/0x20 [ 1349.673631] kmem_cache_alloc+0x5b/0x310 [ 1349.674004] create_object.isra.0+0x3a/0xa20 [ 1349.674399] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1349.674855] kmem_cache_alloc+0x159/0x310 [ 1349.675235] vm_area_alloc+0x1c/0x110 [ 1349.675575] mmap_region+0x819/0x1590 [ 1349.675923] ? get_unmapped_area+0x2f0/0x420 [ 1349.676303] do_mmap+0xcdb/0x11e0 [ 1349.676609] vm_mmap_pgoff+0x198/0x1f0 [ 1349.676952] ? randomize_page+0xb0/0xb0 [ 1349.677308] ksys_mmap_pgoff+0x41c/0x560 [ 1349.677653] FAULT_INJECTION: forcing a failure. [ 1349.677653] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.678584] ? find_mergeable_anon_vma+0x250/0x250 [ 1349.678603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.678616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.678635] do_syscall_64+0x33/0x40 [ 1349.680287] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.680724] RIP: 0033:0x7fb639313b62 [ 1349.681045] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 06:46:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0xfdef) [ 1349.682636] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1349.683283] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1349.683884] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1349.684487] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1349.685086] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1349.685693] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1349.686324] CPU: 1 PID: 8364 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1349.687429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.688559] Call Trace: [ 1349.688853] dump_stack+0x107/0x167 [ 1349.689200] should_fail.cold+0x5/0xa [ 1349.689633] ? create_object.isra.0+0x3a/0xa20 [ 1349.690066] should_failslab+0x5/0x20 [ 1349.690424] kmem_cache_alloc+0x5b/0x310 [ 1349.690866] create_object.isra.0+0x3a/0xa20 [ 1349.691278] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1349.691883] kmem_cache_alloc+0x159/0x310 [ 1349.692281] anon_vma_fork+0x1ff/0x640 [ 1349.692781] copy_process+0x7218/0x7800 [ 1349.693189] ? __cleanup_sighand+0xb0/0xb0 [ 1349.693601] ? lock_acquire+0x197/0x470 [ 1349.693987] ? find_held_lock+0x2c/0x110 [ 1349.694374] kernel_clone+0xe7/0x980 [ 1349.694726] ? lock_downgrade+0x6d0/0x6d0 [ 1349.695110] ? find_held_lock+0x2c/0x110 [ 1349.695490] ? create_io_thread+0xf0/0xf0 [ 1349.695880] ? ksys_write+0x12d/0x260 [ 1349.696250] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.696707] __do_sys_fork+0x8a/0xc0 [ 1349.697055] ? kernel_thread+0xf0/0xf0 [ 1349.697436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.697944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.698418] ? trace_hardirqs_on+0x5b/0x180 [ 1349.698819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.699294] do_syscall_64+0x33/0x40 [ 1349.699644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.700117] RIP: 0033:0x7f8f4b3d9b19 [ 1349.700468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.702152] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1349.707005] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1349.707793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1349.708448] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.709345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.710123] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 06:46:54 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x803, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0x20000151) 06:46:54 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x806, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:46:54 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000600)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) openat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x2) getdents(r0, &(0x7f00000001c0)=""/117, 0x75) 06:46:54 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xc) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:46:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 71) 06:46:54 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 71) [ 1349.905344] FAULT_INJECTION: forcing a failure. [ 1349.905344] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.907323] CPU: 0 PID: 8386 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1349.907906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.908605] Call Trace: [ 1349.908839] dump_stack+0x107/0x167 [ 1349.909154] should_fail.cold+0x5/0xa [ 1349.909485] ? create_object.isra.0+0x3a/0xa20 [ 1349.909897] should_failslab+0x5/0x20 [ 1349.910225] kmem_cache_alloc+0x5b/0x310 [ 1349.910577] create_object.isra.0+0x3a/0xa20 [ 1349.910954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1349.911392] kmem_cache_alloc+0x159/0x310 [ 1349.911753] __pmd_alloc+0x94/0x5e0 [ 1349.912072] copy_page_range+0x2bd8/0x3810 [ 1349.912441] ? lock_chain_count+0x20/0x20 [ 1349.912835] ? up_write+0x191/0x550 [ 1349.913147] ? vm_iomap_memory+0x190/0x190 [ 1349.913506] ? downgrade_write+0x3a0/0x3a0 [ 1349.913902] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1349.914364] ? __vma_link_rb+0x540/0x700 [ 1349.914723] copy_process+0x759b/0x7800 [ 1349.915100] ? __cleanup_sighand+0xb0/0xb0 [ 1349.915467] ? lock_acquire+0x197/0x470 [ 1349.915813] ? find_held_lock+0x2c/0x110 [ 1349.916170] kernel_clone+0xe7/0x980 [ 1349.916581] ? lock_downgrade+0x6d0/0x6d0 [ 1349.916933] ? find_held_lock+0x2c/0x110 [ 1349.917278] ? create_io_thread+0xf0/0xf0 [ 1349.917671] ? ksys_write+0x12d/0x260 [ 1349.918008] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.918429] __do_sys_fork+0x8a/0xc0 [ 1349.918749] ? kernel_thread+0xf0/0xf0 [ 1349.919097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.919545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.919985] ? trace_hardirqs_on+0x5b/0x180 [ 1349.920374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.920813] do_syscall_64+0x33/0x40 [ 1349.921133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.921572] RIP: 0033:0x7f8f4b3d9b19 [ 1349.921942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.923493] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1349.924137] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1349.924738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1349.925340] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.925959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.926559] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1349.959149] FAULT_INJECTION: forcing a failure. [ 1349.959149] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.960296] CPU: 1 PID: 8391 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1349.960919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.961691] Call Trace: [ 1349.961947] dump_stack+0x107/0x167 [ 1349.962291] should_fail.cold+0x5/0xa [ 1349.962650] ? vm_area_dup+0x78/0x290 [ 1349.963011] should_failslab+0x5/0x20 [ 1349.963367] kmem_cache_alloc+0x5b/0x310 [ 1349.963746] ? lock_chain_count+0x20/0x20 [ 1349.964139] vm_area_dup+0x78/0x290 [ 1349.964491] ? mark_lock+0xf5/0x2df0 [ 1349.964847] ? lock_chain_count+0x20/0x20 [ 1349.965242] ? __lock_acquire+0x1657/0x5b00 [ 1349.965864] ? mark_lock+0xf5/0x2df0 [ 1349.966213] ? vm_area_alloc+0x110/0x110 [ 1349.966594] ? __lock_acquire+0x1657/0x5b00 [ 1349.967004] ? lock_acquire+0x197/0x470 [ 1349.967372] ? __mm_populate+0x24e/0x360 [ 1349.967749] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1349.968238] ? vmacache_find+0x55/0x2a0 [ 1349.968607] __split_vma+0xa8/0x570 [ 1349.968949] __do_munmap+0x365/0x1260 [ 1349.969310] ? lock_release+0x680/0x680 [ 1349.969690] mmap_region+0x776/0x1590 [ 1349.970052] ? get_unmapped_area+0x2f0/0x420 [ 1349.985761] do_mmap+0xcdb/0x11e0 [ 1349.986096] vm_mmap_pgoff+0x198/0x1f0 [ 1349.986466] ? randomize_page+0xb0/0xb0 [ 1349.986853] ksys_mmap_pgoff+0x41c/0x560 [ 1349.987233] ? find_mergeable_anon_vma+0x250/0x250 [ 1349.987689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.988174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.988653] do_syscall_64+0x33/0x40 [ 1349.989001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.989472] RIP: 0033:0x7fb639313b62 [ 1349.989837] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1349.991496] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1349.992194] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1349.992844] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1349.993493] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1349.994160] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1349.994811] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:47:08 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x82c, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:47:08 executing program 1: syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x40000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10b142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 06:47:08 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000008004900002c0000000000019078ac1414aa76010101070b0700000000ac1414bb07020000001000907800000000"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000018c0), 0x180c1, 0x0) fcntl$dupfd(r2, 0x406, r3) write$tun(r1, &(0x7f0000001540)={@val={0x0, 0x4305}, @void, @ipv6=@gre_packet={0x1, 0x6, "a8d210", 0x353, 0x2f, 0xff, @dev={0xfe, 0x80, '\x00', 0x14}, @private1, {[@hopopts={0x2c, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x1f}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x50, {0x0, 0x12, 0xff, 0x2, [0x3, 0x6, 0x4, 0x3, 0x1d7, 0x8001, 0x4fbc, 0x9, 0x9]}}]}, @hopopts={0x6, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @srh={0x817c76ddc1668a2b, 0xa, 0x4, 0x5, 0x0, 0x10, 0x5, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @loopback}]}, @fragment={0x33, 0x0, 0x0, 0x0, 0x0, 0x6, 0x65}, @hopopts={0x84, 0x0, '\x00', [@ra={0x5, 0x2, 0x20}]}, @fragment={0x2c, 0x0, 0x9, 0x1, 0x0, 0x1, 0x67}, @routing={0x2c, 0x2, 0x0, 0x7f, 0x0, [@empty]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x51, 0x0, [0x20], "67c17d620cd4821b955e96362657787e243c6214c3757b1f408318a8b963dd1f8d30331235820cd736063131c66f9bbb68d9307f8a58c9639e420508d65556fd1a675329cc32183efc6ad1cd396dd412be"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xff], "0ed82197070dda8880dcd07c8d6e698a96928e1a6a63b2085d6c05db936f24bbd3a54838e509fbd67be871f742e86018acfc0e072795357c8d01389ce04d3ba5d0f8cfeea3f56607d59c0f31544c94cfb8b560b39eafc0a19ad104cf799e6d0da75d7ec0be349cf5b7958694e00d33de8e7cd8e8a298829a6ca0821ba14f808ba74ce89b30947802d88016241a7f8bea16da1d1cf9f04874b82fc2f67a6bd9389c99e04a400434b9b0bb14c56f7ae3ddbb982d529af4458c818e1f871109a6af3b0b57e1886eb8843717902796ac53dca3ca3e31176dcbff2ca32635ccefbf176668f5544fe388d2f30a7a9b48e727"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0x0], "896c5225bb9a637a8274269f160c4a294081ba255ebaeabfd260cea313e5f69d60017919d45e84b1d502e9aac0f5"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0xad, 0x0, 0x0, 0x0, 0x6, 0x91}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x2, 0x2, 0x2, 0x0, 0x1, 0x3, 0x0, 0xa4}, 0x2, {0x3, 0x8, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "5eea010a468867139dd9c3312d35af3817b384f9f47e629272911979d6ab88c0a6b6a5063400defcb7de45be629694614e0e407ab77c255c613fb62bfa6d4e1250926ac5781a3405192026c47f119d2428baffeb1aedd34cd7c4e11c15207e967fd58db1e4b6f1ea9ecb0de4b2300a35143839cd44eb5cd79f"}}}}}, 0x37f) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x9b4e, 0x401) syz_emit_ethernet(0x1019, &(0x7f0000000500)={@multicast, @random="1b280d51c7b6", @val={@val={0x9100, 0x1, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x1, 0x1, "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"}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8ce, 0x51e, 0xab6, 0x114]}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x20b) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0xfbfb}, @val={0x29263431ef5972bf, 0x4, 0x1, 0x3, 0x3f, 0x4}, @ipv6=@tcp={0x3, 0x6, "b1e20d", 0x1f9, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, @mcast1, {[@routing={0x3, 0xa, 0x2, 0x4, 0x0, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private2]}, @srh={0x3c, 0x4, 0x4, 0x2, 0x3f, 0x60, 0x2, [@remote, @dev={0xfe, 0x80, '\x00', 0x3a}]}, @srh={0x89, 0xc, 0x4, 0x6, 0x2, 0x68, 0x6, [@remote, @mcast2, @remote, @local, @mcast1, @dev={0xfe, 0x80, '\x00', 0x23}]}], {{0x4e21, 0x4e21, r0, r4, 0x0, 0x0, 0x6, 0x10, 0x9, 0x0, 0x2, {[@generic={0x2, 0x2}, @eol]}}, {"8ef3211deb208fccbe15ed4b5b713109f551dd1435781eb465324dcce95aa531f04afcb71cb2ba83fabb32f8c92b84855437fb38986faa06ff5a40e1b7dfcf9322bae2523861884ea2e9e010e9121dc7ec3e1bac9c376e5bdfc83d1f631abbf6eba4ba4b3469fea361857f372045952077ce4071e38aa53651ccc87c64c89eba0f1a29352d8da17931720a1ba4feea333578fd0cca535eafe21fc9df2f0da28355da3ce095f8c591cc52cb393a4be538cb28a09bd48552c5fd502c54ae982453a9a0f7337cdf3e00ba65a70a6e71ff8f5b12d8a0ca2dcade427bc246562d817ba32e7b2c83baee225b5caffebaf4466d103f61b865bbfe8183"}}}}}, 0x22f) 06:47:08 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x218000, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/137, 0x89}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000280)=""/25, 0x19}], 0x5) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) sendfile(r2, r0, &(0x7f0000001580), 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000580)={{r3}, 0x0, 0x10, @inherit={0x50, &(0x7f0000000500)={0x1, 0x1, 0x10000, 0x9, {0x0, 0x9, 0x8, 0x7, 0x2}, [0xffffffffffffffff]}}, @name="d7a90decef606bf6bdcab52b67748a43ff1b3df4670074621c766cf4948e151aa342eca83ef78c7e788bcd5f535103d1700e12577685ee10e1569a445d8c782f013ba01d9ecdcd9032efa9d20be23656ae9e54617a5eb155479b4b2b5f4dc6e02e28babb2a9440c017db39840b049d99ae3e515fc7bb0431b87f719791094c3c81379ffd45360d1d516e6ce5ecf3668da049e89239cac173d172778f8a2531458042db06a73bc31972bb6821c6017e3fada1ea889ffaa353e151a646464d51853412b1c557fdc605065f81e3bff1a3c75f0b1d733ce99f0f7f38f7bb4ae6f03b217cdd4a95447d0842db8fcd61fccedf90de49c96152f55eb983aa4abe932b95e9e977b4a5f3069c566c784ea230dd021efd00d699bf45af092bf1fd07433cea255e1b0c1ecb215d5bfcbc39380fc6f3bab5e5b03b82e4e4ecd6ce931ab7426b34f768635d6b387b05c5a1ea46023c0ff758eb267210b55a9aa0c9589d13556eee34a9df78a9832ea992342c25f61892cf728578c55fe0109c079c2138f2a5a7c7e61b779ad41a301b89fee182bc721077d640458e968d0039f7a1fe4d05f9389e72b76ff1744d367f3b92f3c2d0227dfe97f7cd9eb309764b51c7fb80096b670ceb6f8d114b05d5bc1771c8a799f201af05b837425c249420b8736aef92e4d6da362619fd78f318b191408434704f5255c8c994444e2b1c37c468d927c2a11c72af0828aa1751c1a8ac91ddf9620f581b2963eaf14c714e48beefe96db1c362a007f13775b3b7afccf87e0c1acb1252397c98afc9b47d3f3a4f5b6276b5ebbfb7353c6d8e8d3d93dde1a2339925bca5741d756d627faccd58d5680054133414b80445da87dd0672244fcb31cd285654892c2811e0ec0ba0a51586c9bb3b11bcd4bc1ac47051de599b6967f0723bc416b5d93d91fd89e4fc86b5ce5c6efbec734c17f3df135b27bff0e2caade1845ba8d6f3d432cda3c994d2cb66f14089b050a5b8532162de74215185d6d3001ea21aa65e4a3748167dbe542dae03d1f3d573394f03fd6e4f7a76028d9e5f5d55208520c3c85fe4bfecc48b2821cba966b5d09431cf70d008689ed8a0e52fdba6024ebd5d37a8224d6b33134ff3d82b4be7446bcdeebae7b85178adcaa1aedb1178226ebd7b2e2115c337e8c3b3c8f30b0734cf17c62df346bdc01aca1dbc5f44947c9d00ff9dc083ecf716872b61c7c4baa68febd11b61681b023ad0230a3031165311b8dbdf9acc8d109e164cd27509137cb3a53847dd014a679c614fbfd8822ecb71ba6c56475436cb3069fd81a7b5a7f80d1d3c9afc3505eac2289f145faa0ae4cc373e66efc8b5c160ba3b67c036f24adc80d24cdb51d1732706f78ce8591b80c32b31188142ee1029eea60ec5a5c56a00c1d6e50c63469848530e31c043034c4a79949194fc50b36ea48bec64568dbff8d732bad331f66b001d1be49bcbe4b3678cfe6d24da7fb3ef9f9c6539470d0f392dea49f32822274b84179a711d4d974a230530170c4c723020349041bfe7535894d678a7152d74c82947e838425d5dfd98ab0b7c1f62f58483a4457e0060072ba629a9b5124495a4a86525c3d71dd6cff2d6c367d3b664c029ba91bbf394b65a03ef5092527c59081c23679e885b4cf84b5402fc5b4085b7f7c4c575c441e601ae28fae384e813acd29c96a7645a1c16838b9f1aa9035dbf2a28f32893bec2e91111c544f63bda102cec088f178b7c760491b239e6f17689aecfb3c7fa16f03cdef0a16a609c897a90de184989bb7a433e52d36ff160cd4e16af7c2cacb74f643e58a8edbbbc409638516c70bffe64b2cc09005d9dc6c836670f5c6d4c1c8a6cbbae604c98fcd138c5729c83db61b46d8465336071e77754f988e88d479187e64d21738092834fffcf8092e66145071620f4ba3893dab89deaf4f14eed13f28ecc087c14e5be3b9569b37feb814f1e64624e4bf6214557e497809070ab1b88a3beadbe7bb94b642e62d895a334150273d53111665589651dbce41672a6bc2b64bf794848b91b5b4fd4b323090a40dfe6004ce87ecf7bfe9ad834635a610ae907e79fed0735ac3e2ee33458253ee6cf7ac4f1ac91d106daf15dff6112a2933e21af4c6fb3834e8dd7d86da836f6c588aaa93437f6a02cccf3771286cdf182c99880d94f0975db22f5ee2b0e2737918386a2a44871a37c1cfad2a012a2630adae48418e4512e11edcf2ef4f8b689cde0b59ed430a33ba926bfded3384148456275436a7197a60a2fca632b482c9093dc007bdfb56fd045f2f48abbe5e873203ddf49dac8ec2effdbd6b8ce90bd32a17b7f8d3a2c569398adda31cfedc6f990884c4fac4274194890dcfb31f2aebd4366aca9eec5cbc82b7c8563f219548b876d974a4ed92693ca528e65a51d59cf03b9c30fcaf668abae9fdff31932246a116b8610a901fac2651fa700fdf83a7737dadcdeaa06c0be9a6c67e875f04cbaf541d36a1583fe0e2b0ff715c49de96eef8c8a75b148caf40805859c9de36c77dcc636d3a418bbdeb4d89f8f0db9ea280d984d2420f3f80cd29b4c1de254a2e6f97a959867e83ead7e8d48e6db30292edf80df763752cb43a49a9c9fe2bcf2cc790abea5403f903fc424b69ef71dc2fdc389a0c817d963f77458467ae058f5e3dff71a5924cc702b10dc2b45f62ca5e7d8d20ae9493766b2f73542e5153cdddabd0d362ded87c55364d1724dcd52c827adfe0db1820cb45b919d8a64e4be39404429b4cd1c6f574e172a4b06f5d87b9a939e8e8b05866c014c673c8356f30a6dc29286cb8cdedb26e64408927205b4738876ced55ba023401a49b727906da35600db988a9c26c00b23c8cf407e182461bd6917047b7bd9877348ccdc2c3644a599534b04bdfa02e54f58d939bfa7edac57c3c782bb22e837dd4eb0d3f3681bf5121480ec112729a44b017f8076089389b5743f8644f9ba448770ea4747eed3bd6c00302ce6ead519d17b73094718b2b75424b3f3dc36dfbc0cb89bc925c50e45c65c0a7917204e3e1969477189078f86676699bfa29570ed480bafcb58998fafc1bd5723ce9b65779fc66437ddccc6aaba72ab0b5e90c26e7924b045860f9b0e8a224277231ab3bf8a5c01b6ad104fcd1c45a593828c3f9d410bb507ebde4c9bd772e86954f1b56cdc22200b131426ace8411fc0f8e27274d3c175d88039ff45fcd4c67a18cfb96bd1f744e81a3f2be7bcac84874f67eeec88a82cc159d2a3accf55b365dea20ea4da02ae71f98606485f5c6316fa26a6b1842e4bf36ce311fe18ded37084b6e54d57844faecb2de053d0eef32bf3d1e6c311b2eaf470c2c288ca89df540a4307e5547f86afe5315cc249f776e274b0dede1e561711edb4908f7e8bf7580c98159395ab47a9830fed1bdd13812a6c102d21da668729c62bed8901fcff01a8e042ee7a90f18bfc82c76e30a1348e7599df0a123b6547f3cf9840b47918eb4aefd087922fc2a763480d5f972aea595186112717d0d6e10ea2f42fc5379fc960f3b84f7a6d51ab3390c5256ee25b32a1baa3aca11f073648f0eee3b91f6f0d47be36d646450f432a4860ac4309864887cd2b4b095c5c28a7537f70117179a1f6a6b60517d4ae219ad46d364b5ee1b9ec4aa35a0b1685056504f3c8dae528f0f5d64c8df58dc1bef920569a75e6b42f11a7f600960eacdf1c6f84e02e69788f51b3dd098ce0f2680d952480f2e18e5bcfe4cb7b2e205bb2e529d6f51695fb34dc77952d36f88fd7b8da61e853450eb37af4d0f2e2467f3a129e05ff305d00925296b4782359e7fd3159b4a3fd408343fa6225ca5f65d73979cf3f346f60cd1a794bb3b0858545ad5fa687ed64686df52229acdd3f2ef9e86c718dd3bca2a302799fc52b915f4260e99d295b955ef7415fd1e0015b2939a945c24086e2c5052ace073243730656e5020e9ba956652ace9e092caffbf68b9653c656eacf8580a9633a8cb5a70a120939f6219cb6b604fc2e3644f811ccdb9affe67045a934c735aaa2b77f7d2c2199198cb0dc0afaa521d3674b1f4f6b6641f7f866526e3b60ccffca13c8f7daf7c71f4757418cb3f1c7f73fa066b2b8a24c3bb142f3d5a5476cfdde88a57edc925539ec7235527aabf55a83281a5c82ecfcbbcad979c626b693696042277731f44b68f2f1d5ee2389f3643859c62b0d4e58bff4e17f2ddd948d8702487949e514bd6ad592892be64242ca572ad2069d973361f03505795cc0798e37bd418986d87cf85a8d6be73dcc1012a6c19f921888098bd7272b5794609f21a2bf5a914cb4352b0c31702817547bc3ad11447fd94d4ab49b4e50226f5174bd6e91bfdebe9eeedf6025ee15baded1307462a4867eec20ac2d25e6d3558065efe786be6562770f2bc40cdf27056669ef4d4e599f8462698907706afb7a07eddf093e91655faf908958a4a95cf484e89a2a161c2454039e1b9fb868b20655e76eae45b73a60d93c21a8e88d52b65e33b7a13994bb03e1f7592cb54d1a7b6aa0cba6101da81d40e51d12644e5f7b56c73b6061d836241110bbedd2203e66b3daa74242e5a71d765bede475d360bb386471527e769aa597fae741cba91e261a1fb9608560cb9675500dc3d8884b88103b6d5e2aa08808c1ea1afd59bdc9e7cf1fa6c71fe4f87915ba623f7b256bdbd85a02476c1ebf69862d046b41a1d1f631cdc7775d97cac586adf03b89b3b89064749e694cd0eed8a60a606d34e290b9bc5871f5a0f303c9ded6bed688bb45cb97df36cfe8e1e79e0cbdd26b4beea52d2f34702291c25ff569657825b0c6d02548a5f70cb83987f1f50257e043742fdd9ee72226e0bd27365e3c943c3b6e1fb702841eb3a6568316fbd92392ed91c11aec09d56e21b6c1dd9dfa840a09bf47c09c3d0816c660880e5e38de8365d38ac04855924f2858b32deb3158122e5fd42f2eab1a47a8f49e496ab10d2fd74a79a8273642faf7fc532cfad1e659771e23ca1c74a3e17be1e3b792301ae63c9faf021b7a9cb085a1d27d542add0cd348e152db3458008d4af146d1d5ae44bea80200685f5d4ac0b603d426f10396f46c871338fc24f14a643561f8e89d2641020f7909f2ab5cabd557c7549e65edd81b1f5dcacfff3294320b8bd269ade501e050a56bb981f62a7a2e9cd338ca03db7405f9a8f3e28267109bad3f1e00c675d335219a051488cc97f825e0d4627dce582e0eafce5c85ca663b14570a69ba220fc49f1cf16ca4710bb9fb26269e2f7114972883dc5724c7c03a23472702f474043a4fae7c4646a82cbf389fe890832cc1c70fa8e27fa86b4cadb7cb06d0117ae0652a179d595ffee35578868c5af5bd2901d8dbded87b8eb300352354fd9ca691998e6ae71bb4ff23ff239db0427f359c1a06ca56dafd88bbc5e48d0f17af2c12ae952d82769ae6346867a2bfb923181f633a65dab2dbc15a5c9bce0d33cf3f1393a133f25caa5215faaab205ab76af8d8a20b57750d5fd33dd18b16f9cbfaba203ef7d70961e168dac214635a9290b6dbb29ff6d00ee15eae3b4cad7a40ba4ad6a37c66f6b3f1932d5215b305a89792e639a95386f6058ba6f9e304041975f5f12eb6620c4fd78cd3019ea16e1f27667da5c7f53c0548559a9c6b8f891ea1e1641c65cf4fee8e726b6a489bf4cb3bb442a82f5a588fe802f1eb43af6c9d3f75c9e66f6cb08606693830b"}) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 06:47:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0xfffffdef) 06:47:08 executing program 3: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_io_uring_setup(0xc54, &(0x7f00000001c0)={0x0, 0xcdbf, 0x0, 0x2, 0x397}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x405}, 0x0, {0x0, r2}}, 0x6) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000600)='./file1\x00', 0x0) getdents(r3, &(0x7f0000000540)=""/126, 0x7e) 06:47:08 executing program 0: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) fork() (fail_nth: 72) 06:47:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 72) 06:47:08 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x830, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) [ 1363.593608] FAULT_INJECTION: forcing a failure. [ 1363.593608] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.594705] CPU: 0 PID: 8408 Comm: syz-executor.0 Not tainted 5.10.225 #1 [ 1363.595284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1363.595986] Call Trace: [ 1363.596221] dump_stack+0x107/0x167 [ 1363.596539] should_fail.cold+0x5/0xa [ 1363.601773] ? create_object.isra.0+0x3a/0xa20 [ 1363.602163] should_failslab+0x5/0x20 [ 1363.602486] kmem_cache_alloc+0x5b/0x310 [ 1363.602831] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1363.603339] create_object.isra.0+0x3a/0xa20 [ 1363.603713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1363.604144] kmem_cache_alloc+0x159/0x310 [ 1363.604501] ptlock_alloc+0x1d/0x70 [ 1363.604812] pte_alloc_one+0x68/0x1a0 [ 1363.605134] __pte_alloc+0x1d/0x330 [ 1363.605448] copy_page_range+0x1b62/0x3810 [ 1363.605822] ? lock_chain_count+0x20/0x20 [ 1363.606211] ? up_write+0x191/0x550 [ 1363.606521] ? vm_iomap_memory+0x190/0x190 [ 1363.606880] ? downgrade_write+0x3a0/0x3a0 [ 1363.607241] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1363.607702] ? __vma_link_rb+0x540/0x700 [ 1363.608054] copy_process+0x759b/0x7800 [ 1363.608426] ? __cleanup_sighand+0xb0/0xb0 [ 1363.608790] ? lock_acquire+0x197/0x470 [ 1363.609135] ? find_held_lock+0x2c/0x110 [ 1363.609485] kernel_clone+0xe7/0x980 [ 1363.609818] ? lock_downgrade+0x6d0/0x6d0 [ 1363.610166] ? find_held_lock+0x2c/0x110 [ 1363.610509] ? create_io_thread+0xf0/0xf0 [ 1363.610863] ? ksys_write+0x12d/0x260 [ 1363.611197] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1363.611615] __do_sys_fork+0x8a/0xc0 [ 1363.611932] ? kernel_thread+0xf0/0xf0 [ 1363.612275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1363.612715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.613146] ? trace_hardirqs_on+0x5b/0x180 [ 1363.613511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.613961] do_syscall_64+0x33/0x40 [ 1363.614277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1363.614707] RIP: 0033:0x7f8f4b3d9b19 [ 1363.615024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1363.616561] RSP: 002b:00007f8f4894f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 06:47:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/145, 0xfffffffffffffdef) [ 1363.617202] RAX: ffffffffffffffda RBX: 00007f8f4b4ecf60 RCX: 00007f8f4b3d9b19 [ 1363.617816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1363.618415] RBP: 00007f8f4894f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.619012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1363.619610] R13: 00007ffd08982e1f R14: 00007f8f4894f300 R15: 0000000000022000 [ 1363.642600] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 1363.652634] FAULT_INJECTION: forcing a failure. [ 1363.652634] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.653619] CPU: 1 PID: 8413 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1363.654214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1363.654907] Call Trace: [ 1363.655139] dump_stack+0x107/0x167 [ 1363.655452] should_fail.cold+0x5/0xa [ 1363.655781] ? create_object.isra.0+0x3a/0xa20 [ 1363.656172] should_failslab+0x5/0x20 [ 1363.656496] kmem_cache_alloc+0x5b/0x310 [ 1363.656846] create_object.isra.0+0x3a/0xa20 [ 1363.657220] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1363.657653] kmem_cache_alloc+0x159/0x310 [ 1363.658444] vm_area_dup+0x78/0x290 [ 1363.659067] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1363.659961] ? mark_lock+0xf5/0x2df0 [ 1363.660596] ? lock_chain_count+0x20/0x20 [ 1363.661304] ? __lock_acquire+0x1657/0x5b00 [ 1363.662169] ? mark_lock+0xf5/0x2df0 [ 1363.662815] ? vm_area_alloc+0x110/0x110 [ 1363.663521] ? __lock_acquire+0x1657/0x5b00 [ 1363.664277] ? lock_acquire+0x197/0x470 [ 1363.664961] ? __mm_populate+0x24e/0x360 [ 1363.665665] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1363.666817] ? vmacache_find+0x55/0x2a0 [ 1363.667490] __split_vma+0xa8/0x570 [ 1363.668107] __do_munmap+0x365/0x1260 [ 1363.668754] ? lock_release+0x680/0x680 [ 1363.669426] mmap_region+0x776/0x1590 [ 1363.670203] ? get_unmapped_area+0x2f0/0x420 [ 1363.670966] do_mmap+0xcdb/0x11e0 [ 1363.671572] vm_mmap_pgoff+0x198/0x1f0 [ 1363.672250] ? randomize_page+0xb0/0xb0 [ 1363.672951] ksys_mmap_pgoff+0x41c/0x560 [ 1363.673654] ? find_mergeable_anon_vma+0x250/0x250 [ 1363.674117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1363.674562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.675000] do_syscall_64+0x33/0x40 [ 1363.675317] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1363.675748] RIP: 0033:0x7fb639313b62 [ 1363.676064] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1363.677595] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1363.679186] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1363.680420] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1363.681653] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1363.682298] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1363.682897] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 06:47:08 executing program 5: r0 = semget(0x0, 0x2, 0xc0) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000180)=""/230) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x2, 0x2000}, {0x2, 0xd7ac, 0x3800}], 0x2) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x400, 0x0) 06:47:08 executing program 6: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv4={0x860, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x44, 0xb, 0x7, [@empty, @remote]}, @generic={0x7, 0x2}]}}, @info_reply}}}}, 0x0) 06:47:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/149, 0x95) [ 1363.723772] FAT-fs (loop3): Unrecognized mount option "" or missing value 06:47:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 73) [ 1363.792579] FAULT_INJECTION: forcing a failure. [ 1363.792579] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.793625] CPU: 1 PID: 8431 Comm: syz-executor.4 Not tainted 5.10.225 #1 [ 1363.794250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1363.794939] Call Trace: [ 1363.795200] dump_stack+0x107/0x167 [ 1363.795511] should_fail.cold+0x5/0xa [ 1363.795837] ? create_object.isra.0+0x3a/0xa20 [ 1363.796227] should_failslab+0x5/0x20 [ 1363.796550] kmem_cache_alloc+0x5b/0x310 [ 1363.796900] create_object.isra.0+0x3a/0xa20 [ 1363.797272] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1363.797714] kmem_cache_alloc+0x159/0x310 [ 1363.798105] vm_area_alloc+0x1c/0x110 [ 1363.798456] mmap_region+0x819/0x1590 [ 1363.798787] ? get_unmapped_area+0x2f0/0x420 [ 1363.799164] do_mmap+0xcdb/0x11e0 [ 1363.799470] vm_mmap_pgoff+0x198/0x1f0 [ 1363.799807] ? randomize_page+0xb0/0xb0 [ 1363.800159] ksys_mmap_pgoff+0x41c/0x560 [ 1363.800505] ? find_mergeable_anon_vma+0x250/0x250 [ 1363.800928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1363.801376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.801843] do_syscall_64+0x33/0x40 [ 1363.802162] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1363.802595] RIP: 0033:0x7fb639313b62 [ 1363.802914] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1363.804456] RSP: 002b:00007fb6368890f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1363.805102] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb639313b62 [ 1363.805709] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1363.806359] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1363.806956] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1363.807552] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 1368.554756] Bluetooth: hci7: command 0x0409 tx timeout [ 1370.602707] Bluetooth: hci7: command 0x041b tx timeout [ 1372.653742] Bluetooth: hci7: command 0x040f tx timeout [ 1372.971003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.972076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.975793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1373.000503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.001349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.003115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1377.898756] Bluetooth: hci7: command 0x0409 tx timeout [ 1379.946748] Bluetooth: hci7: command 0x041b tx timeout [ 1381.994723] Bluetooth: hci7: command 0x040f tx timeout [ 1382.189255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.190505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.192323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1382.208491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.209360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.210841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1386.937993] Bluetooth: hci7: command 0x0409 tx timeout [ 1388.971868] Bluetooth: hci7: command 0x041b tx timeout [ 1391.026128] Bluetooth: hci7: command 0x040f tx timeout [ 1391.415862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.417025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.418757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1391.473105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.474194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.475886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1396.266695] Bluetooth: hci7: command 0x0409 tx timeout [ 1398.318001] Bluetooth: hci7: command 0x041b tx timeout [ 1400.363871] Bluetooth: hci7: command 0x040f tx timeout [ 1401.182819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.183954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.185816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1401.239245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.240478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.242336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1405.934283] Bluetooth: hci7: command 0x0409 tx timeout [ 1407.978725] Bluetooth: hci7: command 0x041b tx timeout [ 1410.027810] Bluetooth: hci7: command 0x040f tx timeout [ 1410.976912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.977742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.983153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1411.031485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.032630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.034543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1415.658762] Bluetooth: hci7: command 0x0409 tx timeout [ 1417.710364] Bluetooth: hci7: command 0x041b tx timeout [ 1419.761055] Bluetooth: hci7: command 0x040f tx timeout [ 1420.225413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.226891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.229391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1420.275706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.276843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.278636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1424.874690] Bluetooth: hci7: command 0x0409 tx timeout [ 1426.924874] Bluetooth: hci7: command 0x041b tx timeout [ 1428.973703] Bluetooth: hci7: command 0x040f tx timeout [ 1429.571427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.572534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.576796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1429.599644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.600973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.602568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1434.287258] Bluetooth: hci7: command 0x0409 tx timeout [ 1436.330705] Bluetooth: hci7: command 0x041b tx timeout [ 1438.378752] Bluetooth: hci7: command 0x040f tx timeout [ 1438.541514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.542507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.544233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1438.590139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.590963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.592262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1443.306708] Bluetooth: hci7: command 0x0409 tx timeout [ 1445.359143] Bluetooth: hci7: command 0x041b tx timeout [ 1447.406688] Bluetooth: hci7: command 0x040f tx timeout [ 1448.132018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.134091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.136804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1448.184483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.185369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.186719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1452.906697] Bluetooth: hci7: command 0x0409 tx timeout [ 1454.954751] Bluetooth: hci7: command 0x041b tx timeout [ 1457.002736] Bluetooth: hci7: command 0x040f tx timeout [ 1457.767460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.768706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.770312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1457.819186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.820068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.821315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1462.506699] Bluetooth: hci7: command 0x0409 tx timeout [ 1464.563730] Bluetooth: hci7: command 0x041b tx timeout [ 1466.623053] Bluetooth: hci7: command 0x040f tx timeout [ 1467.011381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.012689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.014266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1467.054322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.055244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.056567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2024/09/09 06:48:52 executor 7 failed 11 times: executor 7: exit status 67 SYZFAIL: tun read failed (errno 9: Bad file descriptor) SYZFAIL: child failed (errno 0: Success) loop exited with status 67 VM DIAGNOSIS: 06:48:52 Registers: info registers vcpu 0 RAX=0000000000000003 RBX=ffffea00007ca9c0 RCX=ffffffff816db3fd RDX=0000000000000000 RSI=0000000000000004 RDI=ffff888018270b00 RBP=ffff888018270b00 RSP=ffff88801edd76e8 R8 =0000000000000000 R9 =ffff888018270b03 R10=ffffed100304e160 R11=0000000000000001 R12=ffff888018270000 R13=fffff940000f953f R14=dffffc0000000000 R15=ffffea00007ca9f8 RIP=ffffffff816db418 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2302fb5fb8 CR3=000000000d0ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004183ef4e00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81641d1c RDX=fffff940001f60b7 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea0000fb0580 RSP=ffff88804481f720 R8 =0000000000000001 R9 =ffffea0000fb05b3 R10=fffff940001f60b6 R11=0000000000000001 R12=0000000000000000 R13=ffffea0000fb0588 R14=0000000000000000 R15=dead000000000100 RIP=ffffffff81409844 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005619fd4263b0 CR3=0000000044956000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000005 XMM01=ffffffffffffffff0000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000000000000033366c6c696b6672 XMM04=6d560a426b203430303820202020093a XMM05=00000000000000000000000000000000 XMM06=20090a426b2034300a38202020200920 XMM07=00000000000000000000000000000000 XMM08=722f6c6c696b66722f6372732f2e2e00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000