exploring error injection space