kdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r4, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r4}]) [ 1409.264336] FAULT_INJECTION: forcing a failure. [ 1409.264336] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.266062] CPU: 1 UID: 0 PID: 32042 Comm: syz-executor.0 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1409.266093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.266106] Call Trace: [ 1409.266114] [ 1409.266130] dump_stack_lvl+0xfa/0x120 [ 1409.266166] should_fail_ex+0x4d7/0x5e0 [ 1409.266210] should_failslab+0xc2/0x120 [ 1409.266244] __kvmalloc_node_noprof+0x11f/0x770 [ 1409.266273] ? __pfx_get_random_u32+0x10/0x10 [ 1409.266309] ? bucket_table_alloc.isra.0+0x8e/0x480 [ 1409.266355] ? bucket_table_alloc.isra.0+0x8e/0x480 [ 1409.266375] bucket_table_alloc.isra.0+0x8e/0x480 [ 1409.266413] rhashtable_init_noprof+0x348/0x770 [ 1409.266450] ipc_init_ids+0x92/0x240 [ 1409.266474] copy_ipcs+0x455/0x570 [ 1409.266522] create_new_namespaces+0x210/0xab0 [ 1409.266550] ? security_capable+0x2f/0x90 [ 1409.266604] copy_namespaces+0x45c/0x580 [ 1409.266640] copy_process+0x26d4/0x7410 [ 1409.266673] ? __pfx_perf_trace_lock+0x10/0x10 [ 1409.266704] ? perf_tp_event+0x807/0xe70 [ 1409.266770] ? __pfx_copy_process+0x10/0x10 [ 1409.266802] ? __might_fault+0xe0/0x190 [ 1409.266846] ? _copy_from_user+0x5b/0xd0 [ 1409.266893] kernel_clone+0xea/0x7f0 [ 1409.266933] ? __pfx_kernel_clone+0x10/0x10 [ 1409.266988] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1409.267016] ? ksys_write+0x121/0x240 [ 1409.267046] ? lock_is_held_type+0x9e/0x120 [ 1409.267086] __do_sys_clone3+0x1f5/0x280 [ 1409.267117] ? __pfx___do_sys_clone3+0x10/0x10 [ 1409.267143] ? perf_trace_lock+0x337/0x5d0 [ 1409.267232] ? __pfx_perf_trace_lock+0x10/0x10 [ 1409.267268] ? __might_fault+0x138/0x190 [ 1409.267303] ? __might_fault+0xe0/0x190 [ 1409.267331] ? find_held_lock+0x2b/0x80 [ 1409.267357] ? syscall_trace_enter+0x1cf/0x240 [ 1409.267390] ? lock_release+0xc8/0x290 [ 1409.267450] do_syscall_64+0xbf/0x390 [ 1409.267485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.267509] RIP: 0033:0x7fc493ae1b19 [ 1409.267527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.267549] RSP: 002b:00007fc491057188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1409.267571] RAX: ffffffffffffffda RBX: 00007fc493bf4f60 RCX: 00007fc493ae1b19 [ 1409.267586] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1409.267600] RBP: 00007fc4910571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.267613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1409.267626] R13: 00007ffc5867cf2f R14: 00007fc491057300 R15: 0000000000022000 [ 1409.267692] [ 1409.309454] FAULT_INJECTION: forcing a failure. [ 1409.309454] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.311345] CPU: 1 UID: 0 PID: 32044 Comm: syz-executor.3 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1409.311378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.311391] Call Trace: [ 1409.311401] [ 1409.311412] dump_stack_lvl+0xfa/0x120 [ 1409.311447] should_fail_ex+0x4d7/0x5e0 [ 1409.311491] ? copy_pid_ns+0x2d8/0xc50 [ 1409.311513] should_failslab+0xc2/0x120 [ 1409.311549] kmem_cache_alloc_noprof+0x80/0x690 [ 1409.311619] ? copy_pid_ns+0x2d8/0xc50 [ 1409.311640] copy_pid_ns+0x2d8/0xc50 [ 1409.311670] ? copy_ipcs+0x46c/0x570 [ 1409.311715] ? __pfx_copy_pid_ns+0x10/0x10 [ 1409.311742] ? find_held_lock+0x2b/0x80 [ 1409.311771] ? copy_ipcs+0x46c/0x570 [ 1409.311807] ? lock_release+0xc8/0x290 [ 1409.311849] ? do_raw_spin_unlock+0x53/0x220 [ 1409.311894] ? _raw_spin_unlock+0x1e/0x40 [ 1409.311932] ? copy_ipcs+0xb7/0x570 [ 1409.311982] create_new_namespaces+0x2b2/0xab0 [ 1409.312038] copy_namespaces+0x45c/0x580 [ 1409.312077] copy_process+0x26d4/0x7410 [ 1409.312112] ? __pfx_perf_trace_lock+0x10/0x10 [ 1409.312145] ? perf_tp_event+0x807/0xe70 [ 1409.312213] ? __pfx_copy_process+0x10/0x10 [ 1409.312248] ? __might_fault+0xe0/0x190 [ 1409.312293] ? _copy_from_user+0x5b/0xd0 [ 1409.312348] kernel_clone+0xea/0x7f0 [ 1409.312392] ? __pfx_kernel_clone+0x10/0x10 [ 1409.312451] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1409.312484] ? ksys_write+0x121/0x240 [ 1409.312515] ? lock_is_held_type+0x9e/0x120 [ 1409.312556] __do_sys_clone3+0x1f5/0x280 [ 1409.312591] ? __pfx___do_sys_clone3+0x10/0x10 [ 1409.312620] ? perf_trace_lock+0x337/0x5d0 [ 1409.312716] ? __pfx_perf_trace_lock+0x10/0x10 [ 1409.312754] ? __might_fault+0x138/0x190 [ 1409.312793] ? __might_fault+0xe0/0x190 [ 1409.312824] ? find_held_lock+0x2b/0x80 [ 1409.312852] ? syscall_trace_enter+0x1cf/0x240 [ 1409.312887] ? lock_release+0xc8/0x290 [ 1409.312952] do_syscall_64+0xbf/0x390 [ 1409.312990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.313016] RIP: 0033:0x7f061faddb19 [ 1409.313036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.313062] RSP: 002b:00007f061d053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1409.313086] RAX: ffffffffffffffda RBX: 00007f061fbf0f60 RCX: 00007f061faddb19 [ 1409.313102] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1409.313117] RBP: 00007f061d0531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.313132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1409.313146] R13: 00007ffcbaf4864f R14: 00007f061d053300 R15: 0000000000022000 [ 1409.313215] 01:02:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6401}, 0x58) 01:02:13 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r4, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r4}]) 01:02:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x8000001000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:02:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 94) 01:02:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6701}, 0x58) 01:02:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x10100000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:02:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8004}, 0x58) 01:02:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x10400000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:02:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xc800}, 0x58) 01:02:13 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r4, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r4}]) 01:02:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x100000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:02:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 92) 01:02:13 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:02:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 1) 01:02:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xda01}, 0x58) 01:02:25 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x55}, {0x6, [{@any, 0x1, 0x9, 0x1, "4cf976", 0x8}, {@none, 0x1, 0x1f, 0x3f, "8b7caf", 0x7}, {@none, 0x80, 0xa1, 0x7, "e7a8d5", 0x81}, {@none, 0x80, 0xf0, 0x1, "8bcae9", 0x36}, {@any, 0x5, 0x1f, 0x8, "a96f2d", 0x7}, {@none, 0x8, 0x8e, 0x2, "11bebc", 0xb6}]}}}, 0x58) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8e}, "ad46aa2afa41d540a03551d9758322e9305ce411891fe41be9d9e25673a084d950a2fa51350587b3953ef5328d20f34dafa67e1ecd014c66047bd42ebed44940073d2e9b5a4f16904c4825f96f57d54c4d3b94515b52eac6ff5b6daff4716071ce32086a38acad428af6f547c330a489b508f89097c4d7d586ac7c960c895f6853caa38bb11868a287a6d59b396d"}, 0x92) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x413}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c52012000e00050014800a000600ff01000003000700"], 0x17) 01:02:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 93) 01:02:25 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r4, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r4}]) 01:02:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x200000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:02:25 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:02:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 95) 01:02:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xef01}, 0x58) 01:02:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x300000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1422.100471] FAULT_INJECTION: forcing a failure. [ 1422.100471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1422.102383] CPU: 0 UID: 0 PID: 32605 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1422.102416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1422.102430] Call Trace: [ 1422.102439] [ 1422.102450] dump_stack_lvl+0xfa/0x120 [ 1422.102487] should_fail_ex+0x4d7/0x5e0 [ 1422.102531] _copy_from_user+0x30/0xd0 [ 1422.102570] copy_clone_args_from_user+0x152/0x7a0 [ 1422.102623] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1422.102678] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1422.102722] ? ksys_write+0x121/0x240 [ 1422.102754] ? lock_is_held_type+0x9e/0x120 [ 1422.102793] __do_sys_clone3+0xa5/0x280 [ 1422.102826] ? __pfx___do_sys_clone3+0x10/0x10 [ 1422.102853] ? perf_trace_lock+0x337/0x5d0 [ 1422.102890] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1422.102936] ? perf_trace_lock+0x337/0x5d0 [ 1422.102990] ? __pfx_perf_trace_lock+0x10/0x10 [ 1422.103026] ? __might_fault+0x138/0x190 [ 1422.103063] ? __might_fault+0xe0/0x190 [ 1422.103092] ? find_held_lock+0x2b/0x80 [ 1422.103119] ? syscall_trace_enter+0x1cf/0x240 [ 1422.103160] ? lock_release+0xc8/0x290 [ 1422.103223] do_syscall_64+0xbf/0x390 [ 1422.103261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.103286] RIP: 0033:0x7ff6d12e7b19 [ 1422.103305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1422.103328] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1422.103351] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1422.103367] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1422.103382] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1422.103396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1422.103411] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1422.103480] [ 1422.118716] FAULT_INJECTION: forcing a failure. [ 1422.118716] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.127982] CPU: 1 UID: 0 PID: 32615 Comm: syz-executor.0 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1422.127999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1422.128006] Call Trace: [ 1422.128010] [ 1422.128015] dump_stack_lvl+0xfa/0x120 [ 1422.128034] should_fail_ex+0x4d7/0x5e0 [ 1422.128056] ? copy_pid_ns+0x2d8/0xc50 [ 1422.128068] should_failslab+0xc2/0x120 [ 1422.128087] kmem_cache_alloc_noprof+0x80/0x690 [ 1422.128129] ? copy_pid_ns+0x2d8/0xc50 [ 1422.128139] copy_pid_ns+0x2d8/0xc50 [ 1422.128154] ? copy_ipcs+0x46c/0x570 [ 1422.128173] ? __pfx_copy_pid_ns+0x10/0x10 [ 1422.128187] ? find_held_lock+0x2b/0x80 [ 1422.128201] ? copy_ipcs+0x46c/0x570 [ 1422.128219] ? lock_release+0xc8/0x290 [ 1422.128240] ? do_raw_spin_unlock+0x53/0x220 [ 1422.128263] ? _raw_spin_unlock+0x1e/0x40 [ 1422.128282] ? copy_ipcs+0xb7/0x570 [ 1422.128307] create_new_namespaces+0x2b2/0xab0 [ 1422.128339] copy_namespaces+0x45c/0x580 [ 1422.128359] copy_process+0x26d4/0x7410 [ 1422.128376] ? __pfx_perf_trace_lock+0x10/0x10 [ 1422.128392] ? perf_tp_event+0x807/0xe70 [ 1422.128430] ? __pfx_copy_process+0x10/0x10 [ 1422.128448] ? __might_fault+0xe0/0x190 [ 1422.128470] ? _copy_from_user+0x5b/0xd0 [ 1422.128495] kernel_clone+0xea/0x7f0 [ 1422.128518] ? __pfx_kernel_clone+0x10/0x10 [ 1422.128549] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1422.128565] ? ksys_write+0x121/0x240 [ 1422.128581] ? lock_is_held_type+0x9e/0x120 [ 1422.128603] __do_sys_clone3+0x1f5/0x280 [ 1422.128621] ? __pfx___do_sys_clone3+0x10/0x10 [ 1422.128634] ? perf_trace_lock+0x337/0x5d0 [ 1422.128686] ? __pfx_perf_trace_lock+0x10/0x10 [ 1422.128705] ? __might_fault+0x138/0x190 [ 1422.128725] ? __might_fault+0xe0/0x190 [ 1422.128740] ? find_held_lock+0x2b/0x80 [ 1422.128754] ? syscall_trace_enter+0x1cf/0x240 [ 1422.128771] ? lock_release+0xc8/0x290 [ 1422.128802] do_syscall_64+0xbf/0x390 [ 1422.128821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.128833] RIP: 0033:0x7fc493ae1b19 [ 1422.128843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1422.128854] RSP: 002b:00007fc491057188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1422.128866] RAX: ffffffffffffffda RBX: 00007fc493bf4f60 RCX: 00007fc493ae1b19 [ 1422.128874] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1422.128881] RBP: 00007fc4910571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1422.128888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1422.128895] R13: 00007ffc5867cf2f R14: 00007fc491057300 R15: 0000000000022000 [ 1422.128928] [ 1422.135964] FAULT_INJECTION: forcing a failure. [ 1422.135964] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.168408] CPU: 0 UID: 0 PID: 32606 Comm: syz-executor.3 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1422.168442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1422.168455] Call Trace: [ 1422.168465] [ 1422.168476] dump_stack_lvl+0xfa/0x120 [ 1422.168511] should_fail_ex+0x4d7/0x5e0 [ 1422.168555] should_failslab+0xc2/0x120 [ 1422.168590] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 1422.168627] ? register_pidns_sysctls+0x4b/0x1c0 [ 1422.168684] kmemdup_noprof+0x2b/0x60 [ 1422.168722] register_pidns_sysctls+0x4b/0x1c0 [ 1422.168752] ? __ns_common_init+0x19a/0x220 [ 1422.168788] copy_pid_ns+0x526/0xc50 [ 1422.168818] ? copy_ipcs+0x46c/0x570 [ 1422.168855] ? __pfx_copy_pid_ns+0x10/0x10 [ 1422.168881] ? find_held_lock+0x2b/0x80 [ 1422.168908] ? copy_ipcs+0x46c/0x570 [ 1422.168944] ? lock_release+0xc8/0x290 [ 1422.168983] ? do_raw_spin_unlock+0x53/0x220 [ 1422.169026] ? _raw_spin_unlock+0x1e/0x40 [ 1422.169062] ? copy_ipcs+0xb7/0x570 [ 1422.169110] create_new_namespaces+0x2b2/0xab0 [ 1422.169172] copy_namespaces+0x45c/0x580 [ 1422.169209] copy_process+0x26d4/0x7410 [ 1422.169241] ? __pfx_perf_trace_lock+0x10/0x10 [ 1422.169273] ? perf_tp_event+0x807/0xe70 [ 1422.169341] ? __pfx_copy_process+0x10/0x10 [ 1422.169375] ? __might_fault+0xe0/0x190 [ 1422.169421] ? _copy_from_user+0x5b/0xd0 [ 1422.169471] kernel_clone+0xea/0x7f0 [ 1422.169514] ? __pfx_kernel_clone+0x10/0x10 [ 1422.169573] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1422.169603] ? ksys_write+0x121/0x240 [ 1422.169634] ? lock_is_held_type+0x9e/0x120 [ 1422.169673] __do_sys_clone3+0x1f5/0x280 [ 1422.169706] ? __pfx___do_sys_clone3+0x10/0x10 [ 1422.169733] ? perf_trace_lock+0x337/0x5d0 [ 1422.169826] ? __pfx_perf_trace_lock+0x10/0x10 [ 1422.169864] ? __might_fault+0x138/0x190 [ 1422.169901] ? __might_fault+0xe0/0x190 [ 1422.169931] ? find_held_lock+0x2b/0x80 [ 1422.169958] ? syscall_trace_enter+0x1cf/0x240 [ 1422.169991] ? lock_release+0xc8/0x290 [ 1422.170052] do_syscall_64+0xbf/0x390 [ 1422.170089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.170113] RIP: 0033:0x7f061faddb19 [ 1422.170134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1422.170156] RSP: 002b:00007f061d053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1422.170179] RAX: ffffffffffffffda RBX: 00007f061fbf0f60 RCX: 00007f061faddb19 [ 1422.170195] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1422.170209] RBP: 00007f061d0531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1422.170223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1422.170237] R13: 00007ffcbaf4864f R14: 00007f061d053300 R15: 0000000000022000 [ 1422.170303] 01:02:37 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x55}, {0x6, [{@any, 0x1, 0x9, 0x1, "4cf976", 0x8}, {@none, 0x1, 0x1f, 0x3f, "8b7caf", 0x7}, {@none, 0x80, 0xa1, 0x7, "e7a8d5", 0x81}, {@none, 0x80, 0xf0, 0x1, "8bcae9", 0x36}, {@any, 0x5, 0x1f, 0x8, "a96f2d", 0x7}, {@none, 0x8, 0x8e, 0x2, "11bebc", 0xb6}]}}}, 0x58) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8e}, "ad46aa2afa41d540a03551d9758322e9305ce411891fe41be9d9e25673a084d950a2fa51350587b3953ef5328d20f34dafa67e1ecd014c66047bd42ebed44940073d2e9b5a4f16904c4825f96f57d54c4d3b94515b52eac6ff5b6daff4716071ce32086a38acad428af6f547c330a489b508f89097c4d7d586ac7c960c895f6853caa38bb11868a287a6d59b396d"}, 0x92) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x413}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c52012000e00050014800a000600ff01000003000700"], 0x17) 01:02:37 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:02:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 1) 01:02:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 96) 01:02:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff03}, 0x58) 01:02:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x400000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:02:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 94) 01:02:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 2) [ 1433.625387] FAULT_INJECTION: forcing a failure. [ 1433.625387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.627586] CPU: 0 UID: 0 PID: 32724 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1433.627622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1433.627637] Call Trace: [ 1433.627648] [ 1433.627660] dump_stack_lvl+0xfa/0x120 [ 1433.627702] should_fail_ex+0x4d7/0x5e0 [ 1433.627752] _copy_from_user+0x30/0xd0 [ 1433.627795] copy_clone_args_from_user+0x152/0x7a0 [ 1433.627857] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1433.627918] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1433.627954] ? ksys_write+0x121/0x240 [ 1433.627990] ? lock_is_held_type+0x9e/0x120 [ 1433.628035] __do_sys_clone3+0xa5/0x280 [ 1433.628073] ? __pfx___do_sys_clone3+0x10/0x10 [ 1433.628104] ? perf_trace_lock+0x337/0x5d0 [ 1433.628153] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1433.628206] ? perf_trace_lock+0x337/0x5d0 [ 1433.628268] ? __pfx_perf_trace_lock+0x10/0x10 [ 1433.628308] ? __might_fault+0x138/0x190 [ 1433.628351] ? __might_fault+0xe0/0x190 [ 1433.628383] ? find_held_lock+0x2b/0x80 [ 1433.628414] ? syscall_trace_enter+0x1cf/0x240 [ 1433.628453] ? lock_release+0xc8/0x290 [ 1433.628524] do_syscall_64+0xbf/0x390 [ 1433.628566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.628594] RIP: 0033:0x7fc56dfaeb19 [ 1433.628616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1433.628643] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1433.628669] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1433.628686] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1433.628703] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1433.628719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.628735] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1433.628817] 01:02:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x500000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:02:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff0f}, 0x58) [ 1433.711052] FAULT_INJECTION: forcing a failure. [ 1433.711052] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.713240] CPU: 0 UID: 0 PID: 32735 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1433.713273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1433.713287] Call Trace: [ 1433.713295] [ 1433.713306] dump_stack_lvl+0xfa/0x120 [ 1433.713344] should_fail_ex+0x4d7/0x5e0 [ 1433.713388] should_failslab+0xc2/0x120 [ 1433.713423] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1433.713461] ? find_held_lock+0x2b/0x80 [ 1433.713490] ? copy_process+0x3da/0x7410 [ 1433.713518] ? copy_process+0x459/0x7410 [ 1433.713568] ? copy_process+0x459/0x7410 [ 1433.713596] copy_process+0x459/0x7410 [ 1433.713628] ? __pfx_perf_trace_lock+0x10/0x10 [ 1433.713660] ? perf_tp_event+0x807/0xe70 [ 1433.713699] ? lock_acquire+0x15e/0x2f0 [ 1433.713732] ? __might_fault+0xe0/0x190 [ 1433.713774] ? __pfx_copy_process+0x10/0x10 [ 1433.713808] ? __might_fault+0xe0/0x190 [ 1433.713852] ? _copy_from_user+0x5b/0xd0 [ 1433.713901] kernel_clone+0xea/0x7f0 [ 1433.713942] ? __pfx_kernel_clone+0x10/0x10 [ 1433.713997] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1433.714028] ? ksys_write+0x121/0x240 [ 1433.714060] ? lock_is_held_type+0x9e/0x120 [ 1433.714101] __do_sys_clone3+0x1f5/0x280 [ 1433.714142] ? __pfx___do_sys_clone3+0x10/0x10 [ 1433.714169] ? perf_trace_lock+0x337/0x5d0 [ 1433.714262] ? __pfx_perf_trace_lock+0x10/0x10 [ 1433.714298] ? __might_fault+0x138/0x190 [ 1433.714335] ? __might_fault+0xe0/0x190 [ 1433.714364] ? find_held_lock+0x2b/0x80 [ 1433.714391] ? syscall_trace_enter+0x1cf/0x240 [ 1433.714425] ? lock_release+0xc8/0x290 [ 1433.714488] do_syscall_64+0xbf/0x390 [ 1433.714525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.714550] RIP: 0033:0x7ff6d12e7b19 [ 1433.714570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1433.714594] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1433.714617] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1433.714633] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1433.714648] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1433.714662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.714676] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1433.714746] 01:02:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x20200}, 0x58) 01:02:37 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x55}, {0x6, [{@any, 0x1, 0x9, 0x1, "4cf976", 0x8}, {@none, 0x1, 0x1f, 0x3f, "8b7caf", 0x7}, {@none, 0x80, 0xa1, 0x7, "e7a8d5", 0x81}, {@none, 0x80, 0xf0, 0x1, "8bcae9", 0x36}, {@any, 0x5, 0x1f, 0x8, "a96f2d", 0x7}, {@none, 0x8, 0x8e, 0x2, "11bebc", 0xb6}]}}}, 0x58) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8e}, "ad46aa2afa41d540a03551d9758322e9305ce411891fe41be9d9e25673a084d950a2fa51350587b3953ef5328d20f34dafa67e1ecd014c66047bd42ebed44940073d2e9b5a4f16904c4825f96f57d54c4d3b94515b52eac6ff5b6daff4716071ce32086a38acad428af6f547c330a489b508f89097c4d7d586ac7c960c895f6853caa38bb11868a287a6d59b396d"}, 0x92) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x413}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c52012000e00050014800a000600ff01000003000700"], 0x17) 01:02:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3ffff}, 0x58) 01:02:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 95) 01:02:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 2) 01:02:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 3) [ 1433.922392] FAULT_INJECTION: forcing a failure. [ 1433.922392] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.923441] CPU: 1 UID: 0 PID: 32802 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1433.923458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1433.923466] Call Trace: [ 1433.923470] [ 1433.923475] dump_stack_lvl+0xfa/0x120 [ 1433.923494] should_fail_ex+0x4d7/0x5e0 [ 1433.923513] should_failslab+0xc2/0x120 [ 1433.923529] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1433.923549] ? find_held_lock+0x2b/0x80 [ 1433.923563] ? copy_process+0x3da/0x7410 [ 1433.923577] ? copy_process+0x459/0x7410 [ 1433.923595] ? copy_process+0x459/0x7410 [ 1433.923608] copy_process+0x459/0x7410 [ 1433.923621] ? __pfx_perf_trace_lock+0x10/0x10 [ 1433.923642] ? lock_acquire+0x15e/0x2f0 [ 1433.923658] ? __might_fault+0xe0/0x190 [ 1433.923673] ? __pfx_copy_process+0x10/0x10 [ 1433.923688] ? __might_fault+0xe0/0x190 [ 1433.923702] ? _copy_from_user+0x5b/0xd0 [ 1433.923720] kernel_clone+0xea/0x7f0 [ 1433.923733] ? get_pid_task+0xfd/0x250 [ 1433.923749] ? __pfx_kernel_clone+0x10/0x10 [ 1433.923762] ? perf_trace_lock+0xb5/0x5d0 [ 1433.923783] ? find_held_lock+0x2b/0x80 [ 1433.923794] ? ksys_write+0x121/0x240 [ 1433.923810] ? lock_is_held_type+0x9e/0x120 [ 1433.923826] __do_sys_clone3+0x1f5/0x280 [ 1433.923840] ? __pfx___do_sys_clone3+0x10/0x10 [ 1433.923855] ? perf_trace_lock+0xb5/0x5d0 [ 1433.923878] ? lock_acquire+0x15e/0x2f0 [ 1433.923894] ? __pfx_perf_trace_lock+0x10/0x10 [ 1433.923910] ? __might_fault+0x138/0x190 [ 1433.923922] ? lock_release+0xc8/0x290 [ 1433.923938] ? __might_fault+0xe0/0x190 [ 1433.923950] ? find_held_lock+0x2b/0x80 [ 1433.923962] ? syscall_trace_enter+0x1cf/0x240 [ 1433.923978] ? lock_release+0xc8/0x290 [ 1433.923998] do_syscall_64+0xbf/0x390 [ 1433.924013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.924026] RIP: 0033:0x7fc56dfaeb19 [ 1433.924036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1433.924048] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1433.924060] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1433.924068] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1433.924075] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1433.924083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.924090] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1433.924107] 01:02:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 96) 01:02:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 4) 01:02:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x40000}, 0x58) 01:02:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 1) 01:02:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 3) 01:02:48 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:02:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 97) 01:02:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x600000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1444.899861] FAULT_INJECTION: forcing a failure. [ 1444.899861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.902098] CPU: 0 UID: 0 PID: 32868 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1444.902141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.902156] Call Trace: [ 1444.902167] [ 1444.902179] dump_stack_lvl+0xfa/0x120 [ 1444.902221] should_fail_ex+0x4d7/0x5e0 [ 1444.902272] _copy_from_user+0x30/0xd0 [ 1444.902315] copy_clone_args_from_user+0x152/0x7a0 [ 1444.902377] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1444.902445] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1444.902483] ? ksys_write+0x121/0x240 [ 1444.902518] ? lock_is_held_type+0x9e/0x120 [ 1444.902563] __do_sys_clone3+0xa5/0x280 [ 1444.902600] ? __pfx___do_sys_clone3+0x10/0x10 [ 1444.902630] ? perf_trace_lock+0x337/0x5d0 [ 1444.902672] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1444.902725] ? perf_trace_lock+0x337/0x5d0 [ 1444.902787] ? __pfx_perf_trace_lock+0x10/0x10 [ 1444.902827] ? __might_fault+0x138/0x190 [ 1444.902869] ? __might_fault+0xe0/0x190 [ 1444.902901] ? find_held_lock+0x2b/0x80 [ 1444.902954] ? syscall_trace_enter+0x1cf/0x240 [ 1444.902993] ? lock_release+0xc8/0x290 [ 1444.903064] do_syscall_64+0xbf/0x390 [ 1444.903105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.903133] RIP: 0033:0x7f2be6d39b19 [ 1444.903154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.903179] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1444.903204] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1444.903222] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1444.903238] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.903254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.903270] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1444.903346] 01:02:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x603000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1444.968529] FAULT_INJECTION: forcing a failure. [ 1444.968529] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1444.976594] CPU: 0 UID: 0 PID: 32877 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1444.976629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.976643] Call Trace: [ 1444.976652] [ 1444.976663] dump_stack_lvl+0xfa/0x120 [ 1444.976697] should_fail_ex+0x4d7/0x5e0 [ 1444.976740] should_fail_alloc_page+0xe0/0x110 [ 1444.976779] prepare_alloc_pages+0x1eb/0x550 [ 1444.976811] ? perf_trace_lock+0x337/0x5d0 [ 1444.976860] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1444.976900] ? __pfx_perf_trace_lock+0x10/0x10 [ 1444.976953] ? lock_acquire+0x15e/0x2f0 [ 1444.976986] ? __memcg_slab_post_alloc_hook+0x443/0x9e0 [ 1444.977017] ? find_held_lock+0x2b/0x80 [ 1444.977045] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 1444.977074] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1444.977157] ? __create_object+0x59/0x80 [ 1444.977204] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1444.977233] ? kmem_cache_alloc_node_noprof+0x283/0x6b0 [ 1444.977271] ? find_held_lock+0x2b/0x80 [ 1444.977302] ? __asan_memset+0x24/0x50 [ 1444.977354] __alloc_pages_noprof+0xb/0x30 [ 1444.977389] copy_process+0x4e9/0x7410 [ 1444.977422] ? __pfx_perf_trace_lock+0x10/0x10 [ 1444.977455] ? perf_tp_event+0x807/0xe70 [ 1444.977495] ? lock_acquire+0x15e/0x2f0 [ 1444.977528] ? __might_fault+0xe0/0x190 [ 1444.977576] ? __pfx_copy_process+0x10/0x10 [ 1444.977612] ? __might_fault+0xe0/0x190 [ 1444.977654] ? _copy_from_user+0x5b/0xd0 [ 1444.977701] kernel_clone+0xea/0x7f0 [ 1444.977741] ? __pfx_kernel_clone+0x10/0x10 [ 1444.977796] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1444.977824] ? ksys_write+0x121/0x240 [ 1444.977852] ? lock_is_held_type+0x9e/0x120 [ 1444.977889] __do_sys_clone3+0x1f5/0x280 [ 1444.977920] ? __pfx___do_sys_clone3+0x10/0x10 [ 1444.977945] ? perf_trace_lock+0x337/0x5d0 [ 1444.978033] ? __pfx_perf_trace_lock+0x10/0x10 [ 1444.978067] ? __might_fault+0x138/0x190 [ 1444.978102] ? __might_fault+0xe0/0x190 [ 1444.978129] ? find_held_lock+0x2b/0x80 [ 1444.978155] ? syscall_trace_enter+0x1cf/0x240 [ 1444.978185] ? lock_release+0xc8/0x290 [ 1444.978245] do_syscall_64+0xbf/0x390 [ 1444.978279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.978302] RIP: 0033:0x7ff6d12e7b19 [ 1444.978319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.978340] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1444.978361] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1444.978376] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1444.978389] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.978403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.978416] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1444.978481] [ 1445.035367] FAULT_INJECTION: forcing a failure. [ 1445.035367] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.037079] CPU: 0 UID: 0 PID: 32875 Comm: syz-executor.3 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1445.037108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.037119] Call Trace: [ 1445.037134] [ 1445.037144] dump_stack_lvl+0xfa/0x120 [ 1445.037173] should_fail_ex+0x4d7/0x5e0 [ 1445.037214] should_failslab+0xc2/0x120 [ 1445.037246] __kmalloc_noprof+0xcd/0x680 [ 1445.037278] ? __create_object+0x59/0x80 [ 1445.037316] ? __register_sysctl_table+0xb5/0x16a0 [ 1445.037360] __register_sysctl_table+0xb5/0x16a0 [ 1445.037381] ? kasan_save_track+0x14/0x30 [ 1445.037410] ? __kasan_kmalloc+0x7f/0x90 [ 1445.037455] ? __pfx___register_sysctl_table+0x10/0x10 [ 1445.037476] ? register_pidns_sysctls+0x4b/0x1c0 [ 1445.037520] ? __asan_memcpy+0x3d/0x60 [ 1445.037560] register_pidns_sysctls+0x119/0x1c0 [ 1445.037588] ? __ns_common_init+0x19a/0x220 [ 1445.037624] copy_pid_ns+0x526/0xc50 [ 1445.037652] ? copy_ipcs+0x46c/0x570 [ 1445.037691] ? __pfx_copy_pid_ns+0x10/0x10 [ 1445.037718] ? find_held_lock+0x2b/0x80 [ 1445.037743] ? copy_ipcs+0x46c/0x570 [ 1445.037777] ? lock_release+0xc8/0x290 [ 1445.037814] ? do_raw_spin_unlock+0x53/0x220 [ 1445.037855] ? _raw_spin_unlock+0x1e/0x40 [ 1445.037889] ? copy_ipcs+0xb7/0x570 [ 1445.037936] create_new_namespaces+0x2b2/0xab0 [ 1445.037987] copy_namespaces+0x45c/0x580 [ 1445.038022] copy_process+0x26d4/0x7410 [ 1445.038053] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.038082] ? perf_tp_event+0x807/0xe70 [ 1445.038146] ? __pfx_copy_process+0x10/0x10 [ 1445.038179] ? __might_fault+0xe0/0x190 [ 1445.038222] ? _copy_from_user+0x5b/0xd0 [ 1445.038269] kernel_clone+0xea/0x7f0 [ 1445.038309] ? __pfx_kernel_clone+0x10/0x10 [ 1445.038364] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1445.038393] ? ksys_write+0x121/0x240 [ 1445.038426] ? lock_is_held_type+0x9e/0x120 [ 1445.038467] __do_sys_clone3+0x1f5/0x280 [ 1445.038497] ? __pfx___do_sys_clone3+0x10/0x10 [ 1445.038523] ? perf_trace_lock+0x337/0x5d0 [ 1445.038607] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.038641] ? __might_fault+0x138/0x190 [ 1445.038675] ? __might_fault+0xe0/0x190 [ 1445.038702] ? find_held_lock+0x2b/0x80 [ 1445.038728] ? syscall_trace_enter+0x1cf/0x240 [ 1445.038759] ? lock_release+0xc8/0x290 [ 1445.038816] do_syscall_64+0xbf/0x390 [ 1445.038850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.038873] RIP: 0033:0x7f061faddb19 [ 1445.038892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.038928] RSP: 002b:00007f061d053188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1445.038951] RAX: ffffffffffffffda RBX: 00007f061fbf0f60 RCX: 00007f061faddb19 [ 1445.038966] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1445.038979] RBP: 00007f061d0531d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.038993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.039007] R13: 00007ffcbaf4864f R14: 00007f061d053300 R15: 0000000000022000 [ 1445.039070] 01:02:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x80000}, 0x58) 01:02:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 4) 01:02:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 2) 01:02:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 5) [ 1445.257808] FAULT_INJECTION: forcing a failure. [ 1445.257808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1445.260094] CPU: 0 UID: 0 PID: 33050 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1445.260132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.260145] Call Trace: [ 1445.260154] [ 1445.260165] dump_stack_lvl+0xfa/0x120 01:02:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 98) [ 1445.260206] should_fail_ex+0x4d7/0x5e0 [ 1445.260247] should_fail_alloc_page+0xe0/0x110 [ 1445.260284] prepare_alloc_pages+0x1eb/0x550 [ 1445.260314] ? perf_trace_lock+0x337/0x5d0 [ 1445.260360] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1445.260397] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.260444] ? lock_acquire+0x15e/0x2f0 [ 1445.260475] ? __memcg_slab_post_alloc_hook+0x443/0x9e0 [ 1445.260503] ? find_held_lock+0x2b/0x80 [ 1445.260529] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 1445.260556] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1445.260623] ? __create_object+0x59/0x80 [ 1445.260666] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1445.260692] ? kmem_cache_alloc_node_noprof+0x283/0x6b0 [ 1445.260726] ? find_held_lock+0x2b/0x80 [ 1445.260753] ? __asan_memset+0x24/0x50 [ 1445.260800] __alloc_pages_noprof+0xb/0x30 [ 1445.260832] copy_process+0x4e9/0x7410 [ 1445.260863] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.260891] ? perf_tp_event+0x807/0xe70 [ 1445.260929] ? lock_acquire+0x15e/0x2f0 [ 1445.260959] ? __might_fault+0xe0/0x190 [ 1445.261001] ? __pfx_copy_process+0x10/0x10 [ 1445.261033] ? __might_fault+0xe0/0x190 [ 1445.261078] ? _copy_from_user+0x5b/0xd0 [ 1445.261128] kernel_clone+0xea/0x7f0 [ 1445.261168] ? __pfx_kernel_clone+0x10/0x10 [ 1445.261222] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1445.261251] ? ksys_write+0x121/0x240 [ 1445.261280] ? lock_is_held_type+0x9e/0x120 [ 1445.261322] __do_sys_clone3+0x1f5/0x280 [ 1445.261354] ? __pfx___do_sys_clone3+0x10/0x10 [ 1445.261380] ? perf_trace_lock+0x337/0x5d0 [ 1445.261468] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.261501] ? __might_fault+0x138/0x190 [ 1445.261535] ? __might_fault+0xe0/0x190 [ 1445.261563] ? find_held_lock+0x2b/0x80 [ 1445.261589] ? syscall_trace_enter+0x1cf/0x240 [ 1445.261619] ? lock_release+0xc8/0x290 [ 1445.261680] do_syscall_64+0xbf/0x390 [ 1445.261715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.261739] RIP: 0033:0x7fc56dfaeb19 [ 1445.261757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.261778] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1445.261799] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1445.261814] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1445.261827] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.261841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.261854] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1445.261920] [ 1445.322373] FAULT_INJECTION: forcing a failure. [ 1445.322373] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.324206] CPU: 0 UID: 0 PID: 33052 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1445.324238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.324250] Call Trace: [ 1445.324259] [ 1445.324268] dump_stack_lvl+0xfa/0x120 [ 1445.324299] should_fail_ex+0x4d7/0x5e0 [ 1445.324338] should_failslab+0xc2/0x120 [ 1445.324369] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1445.324403] ? find_held_lock+0x2b/0x80 [ 1445.324428] ? copy_process+0x3da/0x7410 [ 1445.324452] ? copy_process+0x459/0x7410 [ 1445.324499] ? copy_process+0x459/0x7410 [ 1445.324525] copy_process+0x459/0x7410 [ 1445.324555] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.324584] ? perf_tp_event+0x807/0xe70 [ 1445.324619] ? lock_acquire+0x15e/0x2f0 [ 1445.324650] ? __might_fault+0xe0/0x190 [ 1445.324688] ? __pfx_copy_process+0x10/0x10 [ 1445.324719] ? __might_fault+0xe0/0x190 [ 1445.324760] ? _copy_from_user+0x5b/0xd0 [ 1445.324804] kernel_clone+0xea/0x7f0 [ 1445.324842] ? __pfx_kernel_clone+0x10/0x10 [ 1445.324894] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1445.324923] ? ksys_write+0x121/0x240 [ 1445.324951] ? lock_is_held_type+0x9e/0x120 [ 1445.324988] __do_sys_clone3+0x1f5/0x280 [ 1445.325018] ? __pfx___do_sys_clone3+0x10/0x10 [ 1445.325043] ? perf_trace_lock+0x337/0x5d0 [ 1445.325139] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.325172] ? __might_fault+0x138/0x190 [ 1445.325207] ? __might_fault+0xe0/0x190 [ 1445.325235] ? find_held_lock+0x2b/0x80 [ 1445.325261] ? syscall_trace_enter+0x1cf/0x240 [ 1445.325291] ? lock_release+0xc8/0x290 [ 1445.325351] do_syscall_64+0xbf/0x390 [ 1445.325384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.325407] RIP: 0033:0x7f2be6d39b19 [ 1445.325425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.325446] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1445.325468] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1445.325482] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1445.325495] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.325509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.325522] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1445.325586] [ 1445.375079] FAULT_INJECTION: forcing a failure. [ 1445.375079] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.376780] CPU: 1 UID: 0 PID: 33092 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1445.376810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.376822] Call Trace: [ 1445.376831] [ 1445.376840] dump_stack_lvl+0xfa/0x120 [ 1445.376874] should_fail_ex+0x4d7/0x5e0 [ 1445.376911] ? prepare_creds+0x2c/0x7e0 [ 1445.376938] should_failslab+0xc2/0x120 [ 1445.376969] kmem_cache_alloc_noprof+0x80/0x690 [ 1445.377003] ? get_random_u64+0x37f/0x660 [ 1445.377052] ? prepare_creds+0x2c/0x7e0 [ 1445.377078] prepare_creds+0x2c/0x7e0 [ 1445.377117] copy_creds+0x7a/0xa20 [ 1445.377169] copy_process+0xf59/0x7410 [ 1445.377199] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.377228] ? perf_tp_event+0x807/0xe70 [ 1445.377286] ? __pfx_copy_process+0x10/0x10 [ 1445.377316] ? __might_fault+0xe0/0x190 [ 1445.377355] ? _copy_from_user+0x5b/0xd0 [ 1445.377398] kernel_clone+0xea/0x7f0 [ 1445.377434] ? __pfx_kernel_clone+0x10/0x10 [ 1445.377483] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1445.377510] ? ksys_write+0x121/0x240 [ 1445.377537] ? lock_is_held_type+0x9e/0x120 [ 1445.377573] __do_sys_clone3+0x1f5/0x280 [ 1445.377602] ? __pfx___do_sys_clone3+0x10/0x10 [ 1445.377625] ? perf_trace_lock+0x337/0x5d0 [ 1445.377703] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.377734] ? __might_fault+0x138/0x190 [ 1445.377767] ? __might_fault+0xe0/0x190 [ 1445.377792] ? find_held_lock+0x2b/0x80 [ 1445.377816] ? syscall_trace_enter+0x1cf/0x240 [ 1445.377846] ? lock_release+0xc8/0x290 [ 1445.377900] do_syscall_64+0xbf/0x390 [ 1445.377931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.377954] RIP: 0033:0x7ff6d12e7b19 [ 1445.377971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.377991] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1445.378011] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1445.378025] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1445.378038] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.378050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.378062] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1445.378120] 01:02:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x101000}, 0x58) 01:02:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 5) [ 1445.527763] FAULT_INJECTION: forcing a failure. [ 1445.527763] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.529336] CPU: 1 UID: 0 PID: 33096 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1445.529363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.529375] Call Trace: [ 1445.529382] [ 1445.529390] dump_stack_lvl+0xfa/0x120 [ 1445.529418] should_fail_ex+0x4d7/0x5e0 [ 1445.529447] ? prepare_creds+0x2c/0x7e0 [ 1445.529483] should_failslab+0xc2/0x120 [ 1445.529513] kmem_cache_alloc_noprof+0x80/0x690 [ 1445.529557] ? prepare_creds+0x2c/0x7e0 [ 1445.529584] prepare_creds+0x2c/0x7e0 [ 1445.529623] copy_creds+0x7a/0xa20 [ 1445.529666] copy_process+0xf59/0x7410 [ 1445.529695] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.529746] ? __pfx_copy_process+0x10/0x10 [ 1445.529776] ? __might_fault+0xe0/0x190 [ 1445.529808] ? _copy_from_user+0x5b/0xd0 [ 1445.529841] kernel_clone+0xea/0x7f0 [ 1445.529873] ? get_pid_task+0xfd/0x250 [ 1445.529902] ? __pfx_kernel_clone+0x10/0x10 [ 1445.529935] ? perf_trace_lock+0xb5/0x5d0 [ 1445.529986] ? find_held_lock+0x2b/0x80 [ 1445.530013] ? ksys_write+0x121/0x240 [ 1445.530037] ? lock_is_held_type+0x9e/0x120 [ 1445.530065] __do_sys_clone3+0x1f5/0x280 [ 1445.530092] ? __pfx___do_sys_clone3+0x10/0x10 [ 1445.530130] ? perf_trace_lock+0xb5/0x5d0 [ 1445.530176] ? lock_acquire+0x15e/0x2f0 [ 1445.530216] ? __pfx_perf_trace_lock+0x10/0x10 [ 1445.530259] ? __might_fault+0x138/0x190 [ 1445.530282] ? lock_release+0xc8/0x290 [ 1445.530328] ? __might_fault+0xe0/0x190 [ 1445.530357] ? find_held_lock+0x2b/0x80 [ 1445.530387] ? syscall_trace_enter+0x1cf/0x240 [ 1445.530427] ? lock_release+0xc8/0x290 [ 1445.530472] do_syscall_64+0xbf/0x390 [ 1445.530510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.530542] RIP: 0033:0x7fc56dfaeb19 [ 1445.530563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.530592] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1445.530620] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1445.530638] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1445.530658] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.530677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.530693] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1445.530736] 01:03:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x700000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:02 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:03:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 6) 01:03:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 99) 01:03:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x104000}, 0x58) 01:03:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 6) 01:03:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 97) 01:03:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 3) 01:03:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x401000}, 0x58) 01:03:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0xe00000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x1000000}, 0x58) 01:03:16 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:03:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 100) 01:03:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 98) 01:03:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x1000000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 7) 01:03:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 7) 01:03:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 4) 01:03:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2000000}, 0x58) 01:03:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1473.203579] FAULT_INJECTION: forcing a failure. [ 1473.203579] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.204611] CPU: 1 UID: 0 PID: 33250 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1473.204627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.204635] Call Trace: [ 1473.204640] [ 1473.204645] dump_stack_lvl+0xfa/0x120 [ 1473.204664] should_fail_ex+0x4d7/0x5e0 [ 1473.204681] should_failslab+0xc2/0x120 [ 1473.204697] __kmalloc_noprof+0xcd/0x680 [ 1473.204716] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1473.204730] ? security_prepare_creds+0x101/0x160 [ 1473.204750] security_prepare_creds+0x101/0x160 [ 1473.204768] prepare_creds+0x579/0x7e0 [ 1473.204787] copy_creds+0x7a/0xa20 [ 1473.204806] copy_process+0xf59/0x7410 [ 1473.204822] ? __pfx_perf_trace_lock+0x10/0x10 [ 1473.204848] ? __pfx_copy_process+0x10/0x10 [ 1473.204862] ? __might_fault+0xe0/0x190 [ 1473.204878] ? _copy_from_user+0x5b/0xd0 [ 1473.204895] kernel_clone+0xea/0x7f0 [ 1473.204908] ? get_pid_task+0xfd/0x250 [ 1473.204924] ? __pfx_kernel_clone+0x10/0x10 [ 1473.204937] ? perf_trace_lock+0xb5/0x5d0 [ 1473.204958] ? find_held_lock+0x2b/0x80 [ 1473.204970] ? ksys_write+0x121/0x240 [ 1473.204985] ? lock_is_held_type+0x9e/0x120 [ 1473.205000] __do_sys_clone3+0x1f5/0x280 [ 1473.205015] ? __pfx___do_sys_clone3+0x10/0x10 [ 1473.205030] ? perf_trace_lock+0xb5/0x5d0 [ 1473.205053] ? lock_acquire+0x15e/0x2f0 [ 1473.205070] ? __pfx_perf_trace_lock+0x10/0x10 [ 1473.205087] ? __might_fault+0x138/0x190 [ 1473.205098] ? lock_release+0xc8/0x290 [ 1473.205114] ? __might_fault+0xe0/0x190 [ 1473.205131] ? find_held_lock+0x2b/0x80 [ 1473.205143] ? syscall_trace_enter+0x1cf/0x240 [ 1473.205159] ? lock_release+0xc8/0x290 [ 1473.205183] do_syscall_64+0xbf/0x390 [ 1473.205199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.205211] RIP: 0033:0x7fc56dfaeb19 [ 1473.205220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.205232] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1473.205244] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1473.205252] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1473.205259] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.205266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.205273] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1473.205290] [ 1473.226379] FAULT_INJECTION: forcing a failure. [ 1473.226379] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1473.227323] CPU: 1 UID: 0 PID: 33251 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1473.227339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.227345] Call Trace: [ 1473.227349] [ 1473.227355] dump_stack_lvl+0xfa/0x120 [ 1473.227370] should_fail_ex+0x4d7/0x5e0 [ 1473.227391] should_fail_alloc_page+0xe0/0x110 [ 1473.227409] prepare_alloc_pages+0x1eb/0x550 [ 1473.227425] ? perf_trace_lock+0x337/0x5d0 [ 1473.227449] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 1473.227468] ? __pfx_perf_trace_lock+0x10/0x10 [ 1473.227494] ? lock_acquire+0x15e/0x2f0 [ 1473.227510] ? __memcg_slab_post_alloc_hook+0x443/0x9e0 [ 1473.227525] ? find_held_lock+0x2b/0x80 [ 1473.227538] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 1473.227553] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1473.227589] ? __create_object+0x59/0x80 [ 1473.227612] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1473.227625] ? kmem_cache_alloc_node_noprof+0x283/0x6b0 [ 1473.227643] ? find_held_lock+0x2b/0x80 [ 1473.227658] ? __asan_memset+0x24/0x50 [ 1473.227682] __alloc_pages_noprof+0xb/0x30 [ 1473.227699] copy_process+0x4e9/0x7410 [ 1473.227715] ? __pfx_perf_trace_lock+0x10/0x10 [ 1473.227731] ? perf_tp_event+0x807/0xe70 [ 1473.227751] ? lock_acquire+0x15e/0x2f0 [ 1473.227767] ? __might_fault+0xe0/0x190 [ 1473.227788] ? __pfx_copy_process+0x10/0x10 [ 1473.227805] ? __might_fault+0xe0/0x190 [ 1473.227827] ? _copy_from_user+0x5b/0xd0 [ 1473.227851] kernel_clone+0xea/0x7f0 [ 1473.227871] ? __pfx_kernel_clone+0x10/0x10 [ 1473.227900] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1473.227915] ? ksys_write+0x121/0x240 [ 1473.227930] ? lock_is_held_type+0x9e/0x120 [ 1473.227949] __do_sys_clone3+0x1f5/0x280 [ 1473.227966] ? __pfx___do_sys_clone3+0x10/0x10 [ 1473.227979] ? perf_trace_lock+0x337/0x5d0 [ 1473.228024] ? __pfx_perf_trace_lock+0x10/0x10 [ 1473.228042] ? __might_fault+0x138/0x190 [ 1473.228060] ? __might_fault+0xe0/0x190 [ 1473.228075] ? find_held_lock+0x2b/0x80 [ 1473.228089] ? syscall_trace_enter+0x1cf/0x240 [ 1473.228105] ? lock_release+0xc8/0x290 [ 1473.228140] do_syscall_64+0xbf/0x390 [ 1473.228158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.228170] RIP: 0033:0x7f2be6d39b19 [ 1473.228179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.228190] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1473.228202] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1473.228209] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1473.228217] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.228224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.228231] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1473.228264] [ 1473.250808] FAULT_INJECTION: forcing a failure. [ 1473.250808] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.252823] CPU: 0 UID: 0 PID: 33255 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1473.252856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.252869] Call Trace: [ 1473.252878] [ 1473.252888] dump_stack_lvl+0xfa/0x120 [ 1473.252925] should_fail_ex+0x4d7/0x5e0 [ 1473.252967] should_failslab+0xc2/0x120 [ 1473.253002] __kmalloc_noprof+0xcd/0x680 [ 1473.253045] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1473.253073] ? security_prepare_creds+0x101/0x160 [ 1473.253132] security_prepare_creds+0x101/0x160 [ 1473.253176] prepare_creds+0x579/0x7e0 [ 1473.253224] copy_creds+0x7a/0xa20 [ 1473.253276] copy_process+0xf59/0x7410 [ 1473.253310] ? __pfx_perf_trace_lock+0x10/0x10 [ 1473.253343] ? perf_tp_event+0x807/0xe70 [ 1473.253409] ? __pfx_copy_process+0x10/0x10 [ 1473.253443] ? __might_fault+0xe0/0x190 [ 1473.253488] ? _copy_from_user+0x5b/0xd0 [ 1473.253538] kernel_clone+0xea/0x7f0 [ 1473.253579] ? __pfx_kernel_clone+0x10/0x10 [ 1473.253636] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1473.253666] ? ksys_write+0x121/0x240 [ 1473.253698] ? lock_is_held_type+0x9e/0x120 [ 1473.253738] __do_sys_clone3+0x1f5/0x280 [ 1473.253771] ? __pfx___do_sys_clone3+0x10/0x10 [ 1473.253799] ? perf_trace_lock+0x337/0x5d0 [ 1473.253888] ? __pfx_perf_trace_lock+0x10/0x10 [ 1473.253925] ? __might_fault+0x138/0x190 [ 1473.253961] ? __might_fault+0xe0/0x190 [ 1473.253991] ? find_held_lock+0x2b/0x80 [ 1473.254018] ? syscall_trace_enter+0x1cf/0x240 [ 1473.254052] ? lock_release+0xc8/0x290 [ 1473.254114] do_syscall_64+0xbf/0x390 [ 1473.254150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.254175] RIP: 0033:0x7ff6d12e7b19 [ 1473.254195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.254218] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1473.254241] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1473.254258] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1473.254272] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.254286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.254300] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1473.254367] 01:03:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 8) 01:03:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3000000}, 0x58) 01:03:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 5) [ 1473.388900] FAULT_INJECTION: forcing a failure. [ 1473.388900] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.389857] CPU: 1 UID: 0 PID: 33364 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1473.389873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.389880] Call Trace: [ 1473.389885] [ 1473.389890] dump_stack_lvl+0xfa/0x120 [ 1473.389912] should_fail_ex+0x4d7/0x5e0 [ 1473.389934] ? prepare_creds+0x2c/0x7e0 [ 1473.389950] should_failslab+0xc2/0x120 [ 1473.389968] kmem_cache_alloc_noprof+0x80/0x690 [ 1473.390002] ? prepare_creds+0x2c/0x7e0 [ 1473.390017] prepare_creds+0x2c/0x7e0 [ 1473.390039] copy_creds+0x7a/0xa20 [ 1473.390065] copy_process+0xf59/0x7410 [ 1473.390083] ? __pfx_perf_trace_lock+0x10/0x10 [ 1473.390102] ? perf_tp_event+0x807/0xe70 [ 1473.390142] ? __pfx_copy_process+0x10/0x10 [ 1473.390158] ? __might_fault+0xe0/0x190 [ 1473.390181] ? _copy_from_user+0x5b/0xd0 [ 1473.390206] kernel_clone+0xea/0x7f0 [ 1473.390226] ? __pfx_kernel_clone+0x10/0x10 [ 1473.390254] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1473.390269] ? ksys_write+0x121/0x240 [ 1473.390285] ? lock_is_held_type+0x9e/0x120 [ 1473.390306] __do_sys_clone3+0x1f5/0x280 [ 1473.390323] ? __pfx___do_sys_clone3+0x10/0x10 [ 1473.390336] ? perf_trace_lock+0x337/0x5d0 [ 1473.390381] ? __pfx_perf_trace_lock+0x10/0x10 [ 1473.390399] ? __might_fault+0x138/0x190 [ 1473.390417] ? __might_fault+0xe0/0x190 [ 1473.390431] ? find_held_lock+0x2b/0x80 [ 1473.390445] ? syscall_trace_enter+0x1cf/0x240 [ 1473.390463] ? lock_release+0xc8/0x290 [ 1473.390493] do_syscall_64+0xbf/0x390 [ 1473.390512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.390525] RIP: 0033:0x7f2be6d39b19 [ 1473.390535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.390546] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1473.390558] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1473.390566] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1473.390573] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.390580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.390587] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1473.390620] 01:03:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4000000}, 0x58) 01:03:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x3f00000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 8) 01:03:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 6) 01:03:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x4000000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 9) 01:03:28 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:03:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x5000000}, 0x58) 01:03:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 9) 01:03:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 7) 01:03:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 99) [ 1485.073206] FAULT_INJECTION: forcing a failure. [ 1485.073206] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.074992] CPU: 0 UID: 0 PID: 33386 Comm: syz-executor.0 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1485.075022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.075035] Call Trace: [ 1485.075044] [ 1485.075053] dump_stack_lvl+0xfa/0x120 [ 1485.075088] should_fail_ex+0x4d7/0x5e0 [ 1485.075137] should_failslab+0xc2/0x120 [ 1485.075177] __kmalloc_noprof+0xcd/0x680 [ 1485.075210] ? __register_sysctl_table+0xd3e/0x16a0 [ 1485.075236] ? lock_release+0xc8/0x290 [ 1485.075278] ? __register_sysctl_table+0xd4f/0x16a0 [ 1485.075318] __register_sysctl_table+0xd4f/0x16a0 [ 1485.075364] ? __pfx___register_sysctl_table+0x10/0x10 [ 1485.075384] ? register_pidns_sysctls+0x4b/0x1c0 [ 1485.075426] ? __asan_memcpy+0x3d/0x60 [ 1485.075464] register_pidns_sysctls+0x119/0x1c0 [ 1485.075492] ? __ns_common_init+0x19a/0x220 [ 1485.075525] copy_pid_ns+0x526/0xc50 [ 1485.075553] ? copy_ipcs+0x46c/0x570 [ 1485.075587] ? __pfx_copy_pid_ns+0x10/0x10 [ 1485.075611] ? find_held_lock+0x2b/0x80 [ 1485.075636] ? copy_ipcs+0x46c/0x570 [ 1485.075668] ? lock_release+0xc8/0x290 [ 1485.075704] ? do_raw_spin_unlock+0x53/0x220 [ 1485.075743] ? _raw_spin_unlock+0x1e/0x40 [ 1485.075777] ? copy_ipcs+0xb7/0x570 [ 1485.075820] create_new_namespaces+0x2b2/0xab0 [ 1485.075868] copy_namespaces+0x45c/0x580 [ 1485.075901] copy_process+0x26d4/0x7410 [ 1485.075931] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.075960] ? perf_tp_event+0x807/0xe70 [ 1485.076020] ? __pfx_copy_process+0x10/0x10 [ 1485.076051] ? __might_fault+0xe0/0x190 [ 1485.076091] ? _copy_from_user+0x5b/0xd0 [ 1485.076138] kernel_clone+0xea/0x7f0 [ 1485.076178] ? __pfx_kernel_clone+0x10/0x10 [ 1485.076230] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1485.076257] ? ksys_write+0x121/0x240 [ 1485.076285] ? lock_is_held_type+0x9e/0x120 [ 1485.076320] __do_sys_clone3+0x1f5/0x280 [ 1485.076350] ? __pfx___do_sys_clone3+0x10/0x10 [ 1485.076375] ? perf_trace_lock+0x337/0x5d0 [ 1485.076456] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.076490] ? __might_fault+0x138/0x190 [ 1485.076523] ? __might_fault+0xe0/0x190 [ 1485.076549] ? find_held_lock+0x2b/0x80 [ 1485.076574] ? syscall_trace_enter+0x1cf/0x240 [ 1485.076605] ? lock_release+0xc8/0x290 [ 1485.076662] do_syscall_64+0xbf/0x390 [ 1485.076702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.076725] RIP: 0033:0x7fc493ae1b19 [ 1485.076744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.076765] RSP: 002b:00007fc491057188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1485.076787] RAX: ffffffffffffffda RBX: 00007fc493bf4f60 RCX: 00007fc493ae1b19 [ 1485.076803] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1485.076816] RBP: 00007fc4910571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.076830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1485.076843] R13: 00007ffc5867cf2f R14: 00007fc491057300 R15: 0000000000022000 [ 1485.076904] [ 1485.123399] sysctl could not get directory: /kernel -12 [ 1485.124579] FAULT_INJECTION: forcing a failure. [ 1485.124579] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.124625] CPU: 1 UID: 0 PID: 33395 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1485.124654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.124667] Call Trace: [ 1485.124675] [ 1485.124685] dump_stack_lvl+0xfa/0x120 [ 1485.124721] should_fail_ex+0x4d7/0x5e0 [ 1485.124762] should_failslab+0xc2/0x120 [ 1485.124796] __kmalloc_noprof+0xcd/0x680 [ 1485.124842] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1485.124869] ? security_prepare_creds+0x101/0x160 [ 1485.124917] security_prepare_creds+0x101/0x160 [ 1485.124958] prepare_creds+0x579/0x7e0 [ 1485.125002] copy_creds+0x7a/0xa20 [ 1485.125050] copy_process+0xf59/0x7410 [ 1485.125081] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.125113] ? perf_tp_event+0x807/0xe70 [ 1485.125173] ? __pfx_copy_process+0x10/0x10 [ 1485.125205] ? __might_fault+0xe0/0x190 [ 1485.125246] ? _copy_from_user+0x5b/0xd0 [ 1485.125292] kernel_clone+0xea/0x7f0 [ 1485.125330] ? __pfx_kernel_clone+0x10/0x10 [ 1485.125381] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1485.125410] ? ksys_write+0x121/0x240 [ 1485.125439] ? lock_is_held_type+0x9e/0x120 [ 1485.125477] __do_sys_clone3+0x1f5/0x280 [ 1485.125507] ? __pfx___do_sys_clone3+0x10/0x10 [ 1485.125532] ? perf_trace_lock+0x337/0x5d0 [ 1485.125614] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.125647] ? __might_fault+0x138/0x190 [ 1485.125681] ? __might_fault+0xe0/0x190 [ 1485.125707] ? find_held_lock+0x2b/0x80 [ 1485.125733] ? syscall_trace_enter+0x1cf/0x240 [ 1485.125765] ? lock_release+0xc8/0x290 [ 1485.125822] do_syscall_64+0xbf/0x390 [ 1485.125856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.125880] RIP: 0033:0x7f2be6d39b19 [ 1485.125898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.125919] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1485.125940] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1485.125955] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1485.125968] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.125981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.125994] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1485.126054] [ 1485.192299] FAULT_INJECTION: forcing a failure. [ 1485.192299] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.193025] FAULT_INJECTION: forcing a failure. [ 1485.193025] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.193982] CPU: 0 UID: 0 PID: 33399 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1485.194012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.194026] Call Trace: [ 1485.194036] [ 1485.194045] dump_stack_lvl+0xfa/0x120 [ 1485.194077] should_fail_ex+0x4d7/0x5e0 [ 1485.194115] ? create_user_ns+0x1ea/0xd30 [ 1485.194153] should_failslab+0xc2/0x120 [ 1485.194186] kmem_cache_alloc_noprof+0x80/0x690 [ 1485.194248] ? create_user_ns+0x1ea/0xd30 [ 1485.194282] create_user_ns+0x1ea/0xd30 [ 1485.194322] ? prepare_creds+0x58d/0x7e0 [ 1485.194364] copy_creds+0x497/0xa20 [ 1485.194413] copy_process+0xf59/0x7410 [ 1485.194443] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.194473] ? perf_tp_event+0x807/0xe70 [ 1485.194534] ? __pfx_copy_process+0x10/0x10 [ 1485.194565] ? __might_fault+0xe0/0x190 [ 1485.194606] ? _copy_from_user+0x5b/0xd0 [ 1485.194651] kernel_clone+0xea/0x7f0 [ 1485.194690] ? __pfx_kernel_clone+0x10/0x10 [ 1485.194742] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1485.194770] ? ksys_write+0x121/0x240 [ 1485.194799] ? lock_is_held_type+0x9e/0x120 [ 1485.194836] __do_sys_clone3+0x1f5/0x280 [ 1485.194866] ? __pfx___do_sys_clone3+0x10/0x10 [ 1485.194891] ? perf_trace_lock+0x337/0x5d0 [ 1485.194974] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.195008] ? __might_fault+0x138/0x190 [ 1485.195042] ? __might_fault+0xe0/0x190 [ 1485.195069] ? find_held_lock+0x2b/0x80 [ 1485.195094] ? syscall_trace_enter+0x1cf/0x240 [ 1485.195125] ? lock_release+0xc8/0x290 [ 1485.195182] do_syscall_64+0xbf/0x390 [ 1485.195215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.195238] RIP: 0033:0x7fc56dfaeb19 [ 1485.195256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.195291] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1485.195312] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1485.195327] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1485.195340] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.195353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.195365] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1485.195427] [ 1485.240415] CPU: 1 UID: 0 PID: 33398 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1485.240447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.240460] Call Trace: [ 1485.240469] [ 1485.240480] dump_stack_lvl+0xfa/0x120 [ 1485.240517] should_fail_ex+0x4d7/0x5e0 [ 1485.240556] ? create_user_ns+0x1ea/0xd30 [ 1485.240590] should_failslab+0xc2/0x120 [ 1485.240623] kmem_cache_alloc_noprof+0x80/0x690 [ 1485.240689] ? create_user_ns+0x1ea/0xd30 [ 1485.240723] create_user_ns+0x1ea/0xd30 [ 1485.240764] ? prepare_creds+0x58d/0x7e0 [ 1485.240808] copy_creds+0x497/0xa20 [ 1485.240859] copy_process+0xf59/0x7410 [ 1485.240891] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.240922] ? perf_tp_event+0x807/0xe70 [ 1485.240986] ? __pfx_copy_process+0x10/0x10 [ 1485.241018] ? __might_fault+0xe0/0x190 [ 1485.241060] ? _copy_from_user+0x5b/0xd0 [ 1485.241108] kernel_clone+0xea/0x7f0 [ 1485.241155] ? __pfx_kernel_clone+0x10/0x10 [ 1485.241209] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1485.241238] ? ksys_write+0x121/0x240 [ 1485.241268] ? lock_is_held_type+0x9e/0x120 [ 1485.241307] __do_sys_clone3+0x1f5/0x280 [ 1485.241338] ? __pfx___do_sys_clone3+0x10/0x10 [ 1485.241364] ? perf_trace_lock+0x337/0x5d0 [ 1485.241451] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.241485] ? __might_fault+0x138/0x190 [ 1485.241520] ? __might_fault+0xe0/0x190 [ 1485.241547] ? find_held_lock+0x2b/0x80 [ 1485.241574] ? syscall_trace_enter+0x1cf/0x240 [ 1485.241606] ? lock_release+0xc8/0x290 [ 1485.241665] do_syscall_64+0xbf/0x390 [ 1485.241700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.241725] RIP: 0033:0x7ff6d12e7b19 [ 1485.241743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.241765] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1485.241787] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1485.241802] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1485.241816] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.241829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.241842] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1485.241906] 01:03:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x6200000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 10) 01:03:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 8) 01:03:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6000000}, 0x58) 01:03:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 100) 01:03:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 10) 01:03:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x7810000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7000000}, 0x58) [ 1485.578369] FAULT_INJECTION: forcing a failure. [ 1485.578369] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.580095] CPU: 1 UID: 0 PID: 33502 Comm: syz-executor.0 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1485.580131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.580144] Call Trace: [ 1485.580152] [ 1485.580162] dump_stack_lvl+0xfa/0x120 [ 1485.580197] should_fail_ex+0x4d7/0x5e0 [ 1485.580239] should_failslab+0xc2/0x120 [ 1485.580271] __kmalloc_noprof+0xcd/0x680 [ 1485.580304] ? __create_object+0x59/0x80 [ 1485.580343] ? __register_sysctl_table+0xb5/0x16a0 [ 1485.580384] __register_sysctl_table+0xb5/0x16a0 [ 1485.580405] ? kasan_save_track+0x14/0x30 [ 1485.580434] ? __kasan_kmalloc+0x7f/0x90 [ 1485.580478] ? __pfx___register_sysctl_table+0x10/0x10 [ 1485.580499] ? register_pidns_sysctls+0x4b/0x1c0 [ 1485.580541] ? __asan_memcpy+0x3d/0x60 [ 1485.580580] register_pidns_sysctls+0x119/0x1c0 [ 1485.580608] ? __ns_common_init+0x19a/0x220 [ 1485.580642] copy_pid_ns+0x526/0xc50 [ 1485.580670] ? copy_ipcs+0x46c/0x570 [ 1485.580705] ? __pfx_copy_pid_ns+0x10/0x10 [ 1485.580729] ? find_held_lock+0x2b/0x80 [ 1485.580756] ? copy_ipcs+0x46c/0x570 [ 1485.580788] ? lock_release+0xc8/0x290 [ 1485.580825] ? do_raw_spin_unlock+0x53/0x220 [ 1485.580865] ? _raw_spin_unlock+0x1e/0x40 [ 1485.580899] ? copy_ipcs+0xb7/0x570 [ 1485.580943] create_new_namespaces+0x2b2/0xab0 [ 1485.580992] copy_namespaces+0x45c/0x580 [ 1485.581026] copy_process+0x26d4/0x7410 [ 1485.581057] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.581086] ? perf_tp_event+0x807/0xe70 [ 1485.581147] ? __pfx_copy_process+0x10/0x10 [ 1485.581178] ? __might_fault+0xe0/0x190 [ 1485.581219] ? _copy_from_user+0x5b/0xd0 [ 1485.581265] kernel_clone+0xea/0x7f0 [ 1485.581303] ? __pfx_kernel_clone+0x10/0x10 [ 1485.581355] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1485.581383] ? ksys_write+0x121/0x240 [ 1485.581412] ? lock_is_held_type+0x9e/0x120 [ 1485.581448] __do_sys_clone3+0x1f5/0x280 [ 1485.581478] ? __pfx___do_sys_clone3+0x10/0x10 [ 1485.581503] ? perf_trace_lock+0x337/0x5d0 [ 1485.581585] ? __pfx_perf_trace_lock+0x10/0x10 [ 1485.581619] ? __might_fault+0x138/0x190 [ 1485.581652] ? __might_fault+0xe0/0x190 [ 1485.581679] ? find_held_lock+0x2b/0x80 [ 1485.581704] ? syscall_trace_enter+0x1cf/0x240 [ 1485.581742] ? lock_release+0xc8/0x290 [ 1485.581800] do_syscall_64+0xbf/0x390 01:03:29 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) [ 1485.581834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.581857] RIP: 0033:0x7fc493ae1b19 [ 1485.581876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.581898] RSP: 002b:00007fc491057188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1485.581920] RAX: ffffffffffffffda RBX: 00007fc493bf4f60 RCX: 00007fc493ae1b19 [ 1485.581935] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1485.581948] RBP: 00007fc4910571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.581961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1485.581974] R13: 00007ffc5867cf2f R14: 00007fc491057300 R15: 0000000000022000 [ 1485.582036] 01:03:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x7c01000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xc000000}, 0x58) 01:03:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804102, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xd000000}, 0x58) 01:03:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x8004000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804103, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804104, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 11) 01:03:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 9) 01:03:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0xfeffffff00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x20000000}, 0x58) [ 1486.343650] FAULT_INJECTION: forcing a failure. [ 1486.343650] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.345333] CPU: 1 UID: 0 PID: 33648 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1486.345363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.345377] Call Trace: [ 1486.345386] [ 1486.345396] dump_stack_lvl+0xfa/0x120 [ 1486.345432] should_fail_ex+0x4d7/0x5e0 [ 1486.345471] ? create_user_ns+0x1ea/0xd30 [ 1486.345504] should_failslab+0xc2/0x120 [ 1486.345537] kmem_cache_alloc_noprof+0x80/0x690 [ 1486.345599] ? create_user_ns+0x1ea/0xd30 [ 1486.345632] create_user_ns+0x1ea/0xd30 [ 1486.345673] ? prepare_creds+0x58d/0x7e0 [ 1486.345716] copy_creds+0x497/0xa20 [ 1486.345765] copy_process+0xf59/0x7410 [ 1486.345796] ? __pfx_perf_trace_lock+0x10/0x10 [ 1486.345827] ? perf_tp_event+0x807/0xe70 [ 1486.345888] ? __pfx_copy_process+0x10/0x10 [ 1486.345919] ? __might_fault+0xe0/0x190 [ 1486.345961] ? _copy_from_user+0x5b/0xd0 [ 1486.346009] kernel_clone+0xea/0x7f0 [ 1486.346048] ? __pfx_kernel_clone+0x10/0x10 [ 1486.346101] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1486.346138] ? ksys_write+0x121/0x240 [ 1486.346169] ? lock_is_held_type+0x9e/0x120 [ 1486.346208] __do_sys_clone3+0x1f5/0x280 [ 1486.346238] ? __pfx___do_sys_clone3+0x10/0x10 [ 1486.346263] ? perf_trace_lock+0x337/0x5d0 [ 1486.346349] ? __pfx_perf_trace_lock+0x10/0x10 [ 1486.346383] ? __might_fault+0x138/0x190 [ 1486.346418] ? __might_fault+0xe0/0x190 [ 1486.346445] ? find_held_lock+0x2b/0x80 [ 1486.346471] ? syscall_trace_enter+0x1cf/0x240 [ 1486.346503] ? lock_release+0xc8/0x290 [ 1486.346562] do_syscall_64+0xbf/0x390 [ 1486.346596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.346620] RIP: 0033:0x7f2be6d39b19 [ 1486.346640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.346661] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1486.346682] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1486.346697] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1486.346710] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.346724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.346737] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1486.346801] 01:03:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 12) 01:03:40 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 11) 01:03:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804102, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804105, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0xff03000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3b9ac9ff}, 0x58) 01:03:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 10) 01:03:40 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) [ 1496.677610] FAULT_INJECTION: forcing a failure. [ 1496.677610] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.678909] CPU: 1 UID: 0 PID: 33671 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1496.678926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1496.678935] Call Trace: [ 1496.678939] [ 1496.678945] dump_stack_lvl+0xfa/0x120 [ 1496.678967] should_fail_ex+0x4d7/0x5e0 [ 1496.678991] should_failslab+0xc2/0x120 [ 1496.679009] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 1496.679027] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1496.679042] ? setup_userns_sysctls+0x51/0x190 [ 1496.679070] kmemdup_noprof+0x2b/0x60 [ 1496.679089] setup_userns_sysctls+0x51/0x190 [ 1496.679111] create_user_ns+0x8f7/0xd30 [ 1496.679148] copy_creds+0x497/0xa20 [ 1496.679174] copy_process+0xf59/0x7410 [ 1496.679192] ? __pfx_perf_trace_lock+0x10/0x10 [ 1496.679209] ? perf_tp_event+0x807/0xe70 [ 1496.679246] ? __pfx_copy_process+0x10/0x10 [ 1496.679264] ? __might_fault+0xe0/0x190 [ 1496.679290] ? _copy_from_user+0x5b/0xd0 [ 1496.679318] kernel_clone+0xea/0x7f0 [ 1496.679340] ? __pfx_kernel_clone+0x10/0x10 [ 1496.679381] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1496.679402] ? ksys_write+0x121/0x240 [ 1496.679424] ? lock_is_held_type+0x9e/0x120 [ 1496.679452] __do_sys_clone3+0x1f5/0x280 [ 1496.679475] ? __pfx___do_sys_clone3+0x10/0x10 [ 1496.679492] ? perf_trace_lock+0x337/0x5d0 [ 1496.679542] ? __pfx_perf_trace_lock+0x10/0x10 [ 1496.679561] ? __might_fault+0x138/0x190 [ 1496.679580] ? __might_fault+0xe0/0x190 [ 1496.679595] ? find_held_lock+0x2b/0x80 [ 1496.679610] ? syscall_trace_enter+0x1cf/0x240 [ 1496.679628] ? lock_release+0xc8/0x290 [ 1496.679663] do_syscall_64+0xbf/0x390 [ 1496.679683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.679696] RIP: 0033:0x7ff6d12e7b19 [ 1496.679706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1496.679718] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1496.679730] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1496.679739] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1496.679746] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1496.679753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1496.679761] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1496.679800] 01:03:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3f000000}, 0x58) 01:03:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804103, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0xff0f000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 13) 01:03:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804104, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:03:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0xffc99a3b00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x40000000}, 0x58) 01:03:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 12) 01:03:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 11) 01:03:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804106, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804107, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0xffff030000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b80410f, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804105, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0xffffff7f00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x58010000}, 0x58) 01:03:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b80412b, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:03:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 12) 01:03:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 14) 01:03:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804162, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x5e000000}, 0x58) 01:04:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 13) 01:04:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 15) 01:04:03 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:04:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 13) 01:04:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffff00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804106, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1519.524411] FAULT_INJECTION: forcing a failure. [ 1519.524411] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.525398] CPU: 1 UID: 0 PID: 33944 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1519.525415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1519.525422] Call Trace: [ 1519.525427] [ 1519.525432] dump_stack_lvl+0xfa/0x120 [ 1519.525451] should_fail_ex+0x4d7/0x5e0 [ 1519.525469] should_failslab+0xc2/0x120 [ 1519.525487] __kmalloc_noprof+0xcd/0x680 [ 1519.525504] ? __register_sysctl_table+0xd3e/0x16a0 [ 1519.525518] ? lock_release+0xc8/0x290 [ 1519.525534] ? __register_sysctl_table+0xd4f/0x16a0 [ 1519.525549] __register_sysctl_table+0xd4f/0x16a0 [ 1519.525565] ? __pfx___register_sysctl_table+0x10/0x10 [ 1519.525576] ? setup_userns_sysctls+0x51/0x190 [ 1519.525593] ? __asan_memcpy+0x3d/0x60 [ 1519.525608] setup_userns_sysctls+0xcb/0x190 [ 1519.525625] create_user_ns+0x8f7/0xd30 [ 1519.525649] copy_creds+0x497/0xa20 [ 1519.525669] copy_process+0xf59/0x7410 [ 1519.525685] ? __pfx_perf_trace_lock+0x10/0x10 [ 1519.525710] ? __pfx_copy_process+0x10/0x10 [ 1519.525725] ? __might_fault+0xe0/0x190 [ 1519.525740] ? _copy_from_user+0x5b/0xd0 [ 1519.525758] kernel_clone+0xea/0x7f0 [ 1519.525772] ? find_held_lock+0x2b/0x80 [ 1519.525785] ? __pfx_kernel_clone+0x10/0x10 [ 1519.525807] ? trace_sched_exit_tp+0xbf/0x100 [ 1519.525822] __do_sys_clone3+0x1f5/0x280 [ 1519.525837] ? __pfx___do_sys_clone3+0x10/0x10 [ 1519.525851] ? perf_trace_lock+0xb5/0x5d0 [ 1519.525874] ? lock_acquire+0x15e/0x2f0 [ 1519.525891] ? __pfx_perf_trace_lock+0x10/0x10 [ 1519.525907] ? __might_fault+0x138/0x190 [ 1519.525919] ? lock_release+0xc8/0x290 [ 1519.525934] ? __might_fault+0xe0/0x190 [ 1519.525947] ? find_held_lock+0x2b/0x80 [ 1519.525959] ? syscall_trace_enter+0x1cf/0x240 [ 1519.525975] ? lock_release+0xc8/0x290 [ 1519.525995] do_syscall_64+0xbf/0x390 [ 1519.526012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.526025] RIP: 0033:0x7fc56dfaeb19 [ 1519.526034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1519.526046] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1519.526058] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1519.526067] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1519.526074] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.526081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.526088] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1519.526105] [ 1519.526109] sysctl could not get directory: /user -12 [ 1519.565082] FAULT_INJECTION: forcing a failure. [ 1519.565082] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.566032] CPU: 1 UID: 0 PID: 33954 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1519.566048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1519.566055] Call Trace: [ 1519.566059] [ 1519.566065] dump_stack_lvl+0xfa/0x120 [ 1519.566081] should_fail_ex+0x4d7/0x5e0 [ 1519.566101] should_failslab+0xc2/0x120 [ 1519.566122] __kmalloc_noprof+0xcd/0x680 [ 1519.566139] ? __create_object+0x59/0x80 [ 1519.566160] ? __register_sysctl_table+0xb5/0x16a0 [ 1519.566183] __register_sysctl_table+0xb5/0x16a0 [ 1519.566194] ? kasan_save_track+0x14/0x30 [ 1519.566210] ? __kasan_kmalloc+0x7f/0x90 [ 1519.566233] ? __pfx___register_sysctl_table+0x10/0x10 [ 1519.566244] ? setup_userns_sysctls+0x51/0x190 [ 1519.566264] ? __asan_memcpy+0x3d/0x60 [ 1519.566286] setup_userns_sysctls+0xcb/0x190 [ 1519.566307] create_user_ns+0x8f7/0xd30 [ 1519.566342] copy_creds+0x497/0xa20 [ 1519.566370] copy_process+0xf59/0x7410 [ 1519.566386] ? __pfx_perf_trace_lock+0x10/0x10 [ 1519.566402] ? perf_tp_event+0x807/0xe70 [ 1519.566440] ? __pfx_copy_process+0x10/0x10 [ 1519.566458] ? __might_fault+0xe0/0x190 [ 1519.566482] ? _copy_from_user+0x5b/0xd0 [ 1519.566509] kernel_clone+0xea/0x7f0 [ 1519.566531] ? __pfx_kernel_clone+0x10/0x10 [ 1519.566563] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1519.566578] ? ksys_write+0x121/0x240 [ 1519.566594] ? lock_is_held_type+0x9e/0x120 [ 1519.566616] __do_sys_clone3+0x1f5/0x280 [ 1519.566633] ? __pfx___do_sys_clone3+0x10/0x10 [ 1519.566647] ? perf_trace_lock+0x337/0x5d0 [ 1519.566699] ? __pfx_perf_trace_lock+0x10/0x10 [ 1519.566717] ? __might_fault+0x138/0x190 [ 1519.566737] ? __might_fault+0xe0/0x190 [ 1519.566752] ? find_held_lock+0x2b/0x80 [ 1519.566766] ? syscall_trace_enter+0x1cf/0x240 [ 1519.566783] ? lock_release+0xc8/0x290 [ 1519.566816] do_syscall_64+0xbf/0x390 [ 1519.566835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.566847] RIP: 0033:0x7f2be6d39b19 [ 1519.566857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1519.566868] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1519.566880] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1519.566888] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1519.566895] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.566902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.566909] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1519.566948] [ 1519.570867] FAULT_INJECTION: forcing a failure. [ 1519.570867] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.603551] CPU: 0 UID: 0 PID: 33952 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1519.603591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1519.603605] Call Trace: [ 1519.603614] [ 1519.603624] dump_stack_lvl+0xfa/0x120 [ 1519.603660] should_fail_ex+0x4d7/0x5e0 [ 1519.603702] should_failslab+0xc2/0x120 [ 1519.603735] __kmalloc_noprof+0xcd/0x680 [ 1519.603769] ? __create_object+0x59/0x80 [ 1519.603808] ? __register_sysctl_table+0xb5/0x16a0 [ 1519.603851] __register_sysctl_table+0xb5/0x16a0 [ 1519.603871] ? kasan_save_track+0x14/0x30 [ 1519.603900] ? __kasan_kmalloc+0x7f/0x90 [ 1519.603945] ? __pfx___register_sysctl_table+0x10/0x10 [ 1519.603965] ? setup_userns_sysctls+0x51/0x190 [ 1519.604006] ? __asan_memcpy+0x3d/0x60 [ 1519.604045] setup_userns_sysctls+0xcb/0x190 [ 1519.604087] create_user_ns+0x8f7/0xd30 [ 1519.604155] copy_creds+0x497/0xa20 [ 1519.604207] copy_process+0xf59/0x7410 [ 1519.604238] ? __pfx_perf_trace_lock+0x10/0x10 [ 1519.604269] ? perf_tp_event+0x807/0xe70 [ 1519.604334] ? __pfx_copy_process+0x10/0x10 [ 1519.604365] ? __might_fault+0xe0/0x190 [ 1519.604408] ? _copy_from_user+0x5b/0xd0 [ 1519.604455] kernel_clone+0xea/0x7f0 [ 1519.604495] ? __pfx_kernel_clone+0x10/0x10 [ 1519.604549] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1519.604577] ? ksys_write+0x121/0x240 [ 1519.604606] ? lock_is_held_type+0x9e/0x120 [ 1519.604644] __do_sys_clone3+0x1f5/0x280 [ 1519.604675] ? __pfx___do_sys_clone3+0x10/0x10 [ 1519.604700] ? perf_trace_lock+0x337/0x5d0 [ 1519.604787] ? __pfx_perf_trace_lock+0x10/0x10 [ 1519.604821] ? __might_fault+0x138/0x190 [ 1519.604856] ? __might_fault+0xe0/0x190 [ 1519.604883] ? find_held_lock+0x2b/0x80 [ 1519.604909] ? syscall_trace_enter+0x1cf/0x240 [ 1519.604942] ? lock_release+0xc8/0x290 [ 1519.605001] do_syscall_64+0xbf/0x390 [ 1519.605036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.605060] RIP: 0033:0x7ff6d12e7b19 [ 1519.605079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1519.605101] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1519.605123] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1519.605137] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1519.605151] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.605164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.605177] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1519.605243] 01:04:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804107, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 14) 01:04:15 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:04:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x62000000}, 0x58) 01:04:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 14) 01:04:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 16) 01:04:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2}, 0x58) 01:04:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3}, 0x58) 01:04:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x64010000}, 0x58) 01:04:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804110, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x5, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 17) [ 1531.431946] FAULT_INJECTION: forcing a failure. [ 1531.431946] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.432935] CPU: 1 UID: 0 PID: 34191 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1531.432952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1531.432960] Call Trace: [ 1531.432964] [ 1531.432969] dump_stack_lvl+0xfa/0x120 [ 1531.432989] should_fail_ex+0x4d7/0x5e0 [ 1531.433007] should_failslab+0xc2/0x120 [ 1531.433024] __kmalloc_cache_noprof+0x81/0x6b0 [ 1531.433043] ? __pfx_find_ucounts+0x10/0x10 [ 1531.433057] ? create_user_ns+0xa9a/0xd30 [ 1531.433077] ? alloc_ucounts+0x13e/0x450 [ 1531.433090] ? find_held_lock+0x2b/0x80 [ 1531.433105] ? alloc_ucounts+0x13e/0x450 [ 1531.433122] alloc_ucounts+0x13e/0x450 [ 1531.433136] ? __pfx_alloc_ucounts+0x10/0x10 [ 1531.433150] ? create_user_ns+0x143/0xd30 [ 1531.433172] copy_creds+0x56e/0xa20 [ 1531.433193] copy_process+0xf59/0x7410 [ 1531.433209] ? __pfx_perf_trace_lock+0x10/0x10 [ 1531.433234] ? __pfx_copy_process+0x10/0x10 [ 1531.433248] ? __might_fault+0xe0/0x190 [ 1531.433265] ? _copy_from_user+0x5b/0xd0 [ 1531.433282] kernel_clone+0xea/0x7f0 [ 1531.433296] ? get_pid_task+0xfd/0x250 [ 1531.433312] ? __pfx_kernel_clone+0x10/0x10 [ 1531.433325] ? perf_trace_lock+0xb5/0x5d0 [ 1531.433345] ? find_held_lock+0x2b/0x80 [ 1531.433357] ? ksys_write+0x121/0x240 [ 1531.433373] ? lock_is_held_type+0x9e/0x120 [ 1531.433389] __do_sys_clone3+0x1f5/0x280 [ 1531.433403] ? __pfx___do_sys_clone3+0x10/0x10 [ 1531.433418] ? perf_trace_lock+0xb5/0x5d0 [ 1531.433441] ? lock_acquire+0x15e/0x2f0 [ 1531.433459] ? __pfx_perf_trace_lock+0x10/0x10 [ 1531.433476] ? __might_fault+0x138/0x190 [ 1531.433488] ? lock_release+0xc8/0x290 [ 1531.433504] ? __might_fault+0xe0/0x190 [ 1531.433516] ? find_held_lock+0x2b/0x80 [ 1531.433528] ? syscall_trace_enter+0x1cf/0x240 [ 1531.433545] ? lock_release+0xc8/0x290 [ 1531.433565] do_syscall_64+0xbf/0x390 [ 1531.433581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.433594] RIP: 0033:0x7fc56dfaeb19 [ 1531.433603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1531.433616] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1531.433628] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1531.433636] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1531.433644] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1531.433651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1531.433658] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1531.433676] 01:04:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4}, 0x58) 01:04:15 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:04:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x67010000}, 0x58) 01:04:27 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:04:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b80412b, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 15) 01:04:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x5}, 0x58) 01:04:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x6, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 18) 01:04:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x80040000}, 0x58) 01:04:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 15) [ 1543.502046] FAULT_INJECTION: forcing a failure. [ 1543.502046] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.503365] CPU: 1 UID: 0 PID: 34315 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1543.503383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1543.503391] Call Trace: [ 1543.503396] [ 1543.503402] dump_stack_lvl+0xfa/0x120 [ 1543.503425] should_fail_ex+0x4d7/0x5e0 [ 1543.503450] should_failslab+0xc2/0x120 [ 1543.503470] __kmalloc_noprof+0xcd/0x680 [ 1543.503490] ? __register_sysctl_table+0xd3e/0x16a0 [ 1543.503507] ? lock_release+0xc8/0x290 [ 1543.503524] ? __register_sysctl_table+0xd4f/0x16a0 [ 1543.503548] __register_sysctl_table+0xd4f/0x16a0 [ 1543.503574] ? __pfx___register_sysctl_table+0x10/0x10 [ 1543.503587] ? setup_userns_sysctls+0x51/0x190 [ 1543.503610] ? __asan_memcpy+0x3d/0x60 [ 1543.503633] setup_userns_sysctls+0xcb/0x190 [ 1543.503657] create_user_ns+0x8f7/0xd30 [ 1543.503695] copy_creds+0x497/0xa20 [ 1543.503726] copy_process+0xf59/0x7410 [ 1543.503745] ? __pfx_perf_trace_lock+0x10/0x10 [ 1543.503764] ? perf_tp_event+0x807/0xe70 [ 1543.503839] ? __pfx_copy_process+0x10/0x10 [ 1543.503858] ? __might_fault+0xe0/0x190 [ 1543.503883] ? _copy_from_user+0x5b/0xd0 [ 1543.503910] kernel_clone+0xea/0x7f0 [ 1543.503934] ? __pfx_kernel_clone+0x10/0x10 [ 1543.503968] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1543.503985] ? ksys_write+0x121/0x240 [ 1543.504003] ? lock_is_held_type+0x9e/0x120 [ 1543.504028] __do_sys_clone3+0x1f5/0x280 [ 1543.504046] ? __pfx___do_sys_clone3+0x10/0x10 [ 1543.504061] ? perf_trace_lock+0x337/0x5d0 [ 1543.504121] ? __pfx_perf_trace_lock+0x10/0x10 [ 1543.504142] ? __might_fault+0x138/0x190 [ 1543.504163] ? __might_fault+0xe0/0x190 [ 1543.504179] ? find_held_lock+0x2b/0x80 [ 1543.504195] ? syscall_trace_enter+0x1cf/0x240 [ 1543.504214] ? lock_release+0xc8/0x290 [ 1543.504251] do_syscall_64+0xbf/0x390 [ 1543.504272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.504287] RIP: 0033:0x7ff6d12e7b19 [ 1543.504298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.504311] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1543.504324] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1543.504333] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1543.504341] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1543.504349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1543.504356] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1543.504398] [ 1543.525814] sysctl could not get directory: /user -12 [ 1543.528394] FAULT_INJECTION: forcing a failure. [ 1543.528394] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.530162] CPU: 0 UID: 0 PID: 34320 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1543.530193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1543.530206] Call Trace: [ 1543.530215] [ 1543.530226] dump_stack_lvl+0xfa/0x120 [ 1543.530262] should_fail_ex+0x4d7/0x5e0 [ 1543.530305] should_failslab+0xc2/0x120 [ 1543.530338] __kmalloc_noprof+0xcd/0x680 [ 1543.530371] ? __register_sysctl_table+0xd3e/0x16a0 [ 1543.530398] ? lock_release+0xc8/0x290 [ 1543.530428] ? __register_sysctl_table+0xd4f/0x16a0 [ 1543.530468] __register_sysctl_table+0xd4f/0x16a0 [ 1543.530513] ? __pfx___register_sysctl_table+0x10/0x10 [ 1543.530534] ? setup_userns_sysctls+0x51/0x190 [ 1543.530573] ? __asan_memcpy+0x3d/0x60 [ 1543.530611] setup_userns_sysctls+0xcb/0x190 [ 1543.530651] create_user_ns+0x8f7/0xd30 [ 1543.530713] copy_creds+0x497/0xa20 [ 1543.530764] copy_process+0xf59/0x7410 [ 1543.530796] ? __pfx_perf_trace_lock+0x10/0x10 [ 1543.530826] ? perf_tp_event+0x807/0xe70 [ 1543.530892] ? __pfx_copy_process+0x10/0x10 [ 1543.530924] ? __might_fault+0xe0/0x190 [ 1543.530967] ? _copy_from_user+0x5b/0xd0 [ 1543.531018] kernel_clone+0xea/0x7f0 [ 1543.531058] ? __pfx_kernel_clone+0x10/0x10 [ 1543.531112] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1543.531149] ? ksys_write+0x121/0x240 [ 1543.531180] ? lock_is_held_type+0x9e/0x120 [ 1543.531220] __do_sys_clone3+0x1f5/0x280 [ 1543.531250] ? __pfx___do_sys_clone3+0x10/0x10 [ 1543.531276] ? perf_trace_lock+0x337/0x5d0 [ 1543.531362] ? __pfx_perf_trace_lock+0x10/0x10 [ 1543.531396] ? __might_fault+0x138/0x190 [ 1543.531431] ? __might_fault+0xe0/0x190 [ 1543.531457] ? find_held_lock+0x2b/0x80 [ 1543.531483] ? syscall_trace_enter+0x1cf/0x240 [ 1543.531517] ? lock_release+0xc8/0x290 [ 1543.531577] do_syscall_64+0xbf/0x390 01:04:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6}, 0x58) 01:04:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804162, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1543.531612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.531635] RIP: 0033:0x7f2be6d39b19 [ 1543.531654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.531676] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1543.531698] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1543.531714] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1543.531727] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1543.531740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1543.531753] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1543.531832] [ 1543.567904] sysctl could not get directory: /user -12 01:04:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x7, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 16) 01:04:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7}, 0x58) 01:04:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xc8000000}, 0x58) 01:04:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 16) 01:04:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:39 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:04:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8}, 0x58) 01:04:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 17) 01:04:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xda010000}, 0x58) 01:04:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 19) 01:04:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 17) [ 1555.427415] FAULT_INJECTION: forcing a failure. [ 1555.427415] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.428359] CPU: 1 UID: 0 PID: 34459 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1555.428375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.428383] Call Trace: [ 1555.428387] [ 1555.428393] dump_stack_lvl+0xfa/0x120 [ 1555.428415] should_fail_ex+0x4d7/0x5e0 [ 1555.428437] should_failslab+0xc2/0x120 [ 1555.428456] __kmalloc_cache_noprof+0x81/0x6b0 [ 1555.428474] ? __pfx_find_ucounts+0x10/0x10 [ 1555.428489] ? create_user_ns+0xa9a/0xd30 [ 1555.428510] ? alloc_ucounts+0x13e/0x450 [ 1555.428524] ? find_held_lock+0x2b/0x80 [ 1555.428544] ? alloc_ucounts+0x13e/0x450 [ 1555.428557] alloc_ucounts+0x13e/0x450 [ 1555.428574] ? __pfx_alloc_ucounts+0x10/0x10 [ 1555.428590] ? create_user_ns+0x143/0xd30 [ 1555.428620] copy_creds+0x56e/0xa20 [ 1555.428647] copy_process+0xf59/0x7410 [ 1555.428665] ? __pfx_perf_trace_lock+0x10/0x10 [ 1555.428680] ? perf_tp_event+0x807/0xe70 [ 1555.428715] ? __pfx_copy_process+0x10/0x10 [ 1555.428731] ? __might_fault+0xe0/0x190 [ 1555.428754] ? _copy_from_user+0x5b/0xd0 [ 1555.428779] kernel_clone+0xea/0x7f0 [ 1555.428800] ? __pfx_kernel_clone+0x10/0x10 [ 1555.428828] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1555.428843] ? ksys_write+0x121/0x240 [ 1555.428859] ? lock_is_held_type+0x9e/0x120 [ 1555.428880] __do_sys_clone3+0x1f5/0x280 [ 1555.428897] ? __pfx___do_sys_clone3+0x10/0x10 [ 1555.428910] ? perf_trace_lock+0x337/0x5d0 [ 1555.428958] ? __pfx_perf_trace_lock+0x10/0x10 [ 1555.428976] ? __might_fault+0x138/0x190 [ 1555.428994] ? __might_fault+0xe0/0x190 [ 1555.429009] ? find_held_lock+0x2b/0x80 [ 1555.429022] ? syscall_trace_enter+0x1cf/0x240 [ 1555.429040] ? lock_release+0xc8/0x290 [ 1555.429071] do_syscall_64+0xbf/0x390 [ 1555.429089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.429103] RIP: 0033:0x7ff6d12e7b19 [ 1555.429117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.429128] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1555.429141] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1555.429149] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1555.429156] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.429163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.429170] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1555.429203] 01:04:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xe}, 0x58) [ 1555.479623] FAULT_INJECTION: forcing a failure. [ 1555.479623] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.480501] CPU: 1 UID: 0 PID: 34457 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1555.480517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.480525] Call Trace: [ 1555.480529] [ 1555.480534] dump_stack_lvl+0xfa/0x120 [ 1555.480553] should_fail_ex+0x4d7/0x5e0 [ 1555.480570] ? dup_fd+0x4d/0xa80 [ 1555.480583] should_failslab+0xc2/0x120 [ 1555.480601] kmem_cache_alloc_noprof+0x80/0x690 [ 1555.480619] ? __pfx_avc_has_perm+0x10/0x10 [ 1555.480640] ? dup_fd+0x4d/0xa80 [ 1555.480651] dup_fd+0x4d/0xa80 [ 1555.480668] copy_process+0x21b4/0x7410 01:04:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xef010000}, 0x58) [ 1555.480683] ? __pfx_perf_trace_lock+0x10/0x10 [ 1555.480709] ? __pfx_copy_process+0x10/0x10 [ 1555.480724] ? __might_fault+0xe0/0x190 [ 1555.480739] ? _copy_from_user+0x5b/0xd0 [ 1555.480756] kernel_clone+0xea/0x7f0 [ 1555.480770] ? get_pid_task+0xfd/0x250 [ 1555.480785] ? __pfx_kernel_clone+0x10/0x10 [ 1555.480798] ? perf_trace_lock+0xb5/0x5d0 [ 1555.480819] ? find_held_lock+0x2b/0x80 [ 1555.480831] ? ksys_write+0x121/0x240 [ 1555.480845] ? lock_is_held_type+0x9e/0x120 [ 1555.480860] __do_sys_clone3+0x1f5/0x280 [ 1555.480874] ? __pfx___do_sys_clone3+0x10/0x10 [ 1555.480889] ? perf_trace_lock+0xb5/0x5d0 [ 1555.480911] ? lock_acquire+0x15e/0x2f0 [ 1555.480929] ? __pfx_perf_trace_lock+0x10/0x10 [ 1555.480945] ? __might_fault+0x138/0x190 [ 1555.480956] ? lock_release+0xc8/0x290 [ 1555.480972] ? __might_fault+0xe0/0x190 [ 1555.480984] ? find_held_lock+0x2b/0x80 [ 1555.480996] ? syscall_trace_enter+0x1cf/0x240 [ 1555.481012] ? lock_release+0xc8/0x290 [ 1555.481032] do_syscall_64+0xbf/0x390 [ 1555.481047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.481059] RIP: 0033:0x7fc56dfaeb19 [ 1555.481069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.481080] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1555.481092] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1555.481101] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1555.481108] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.481119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.481126] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1555.481143] [ 1555.484012] FAULT_INJECTION: forcing a failure. [ 1555.484012] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.520835] CPU: 0 UID: 0 PID: 34467 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1555.520870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.520884] Call Trace: [ 1555.520893] [ 1555.520904] dump_stack_lvl+0xfa/0x120 [ 1555.520941] should_fail_ex+0x4d7/0x5e0 [ 1555.520985] should_failslab+0xc2/0x120 [ 1555.521023] __kmalloc_cache_noprof+0x81/0x6b0 [ 1555.521059] ? __pfx_find_ucounts+0x10/0x10 [ 1555.521086] ? create_user_ns+0xa9a/0xd30 [ 1555.521134] ? alloc_ucounts+0x13e/0x450 [ 1555.521164] ? find_held_lock+0x2b/0x80 01:04:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 18) [ 1555.521202] ? alloc_ucounts+0x13e/0x450 [ 1555.521229] alloc_ucounts+0x13e/0x450 [ 1555.521262] ? __pfx_alloc_ucounts+0x10/0x10 [ 1555.521295] ? create_user_ns+0x143/0xd30 [ 1555.521355] copy_creds+0x56e/0xa20 [ 1555.521409] copy_process+0xf59/0x7410 [ 1555.521442] ? __pfx_perf_trace_lock+0x10/0x10 [ 1555.521474] ? perf_tp_event+0x807/0xe70 [ 1555.521541] ? __pfx_copy_process+0x10/0x10 [ 1555.521574] ? __might_fault+0xe0/0x190 [ 1555.521618] ? _copy_from_user+0x5b/0xd0 [ 1555.521668] kernel_clone+0xea/0x7f0 [ 1555.521709] ? __pfx_kernel_clone+0x10/0x10 [ 1555.521765] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1555.521795] ? ksys_write+0x121/0x240 [ 1555.521825] ? lock_is_held_type+0x9e/0x120 [ 1555.521865] __do_sys_clone3+0x1f5/0x280 [ 1555.521897] ? __pfx___do_sys_clone3+0x10/0x10 [ 1555.521924] ? perf_trace_lock+0x337/0x5d0 [ 1555.522015] ? __pfx_perf_trace_lock+0x10/0x10 [ 1555.522051] ? __might_fault+0x138/0x190 [ 1555.522087] ? __might_fault+0xe0/0x190 [ 1555.522116] ? find_held_lock+0x2b/0x80 [ 1555.522143] ? syscall_trace_enter+0x1cf/0x240 [ 1555.522178] ? lock_release+0xc8/0x290 [ 1555.522238] do_syscall_64+0xbf/0x390 [ 1555.522274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.522299] RIP: 0033:0x7f2be6d39b19 [ 1555.522319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:04:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x10}, 0x58) 01:04:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 20) [ 1555.522341] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1555.522367] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1555.522383] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1555.522398] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.522412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.522426] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1555.522492] 01:04:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xf, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x62}, 0x58) 01:04:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 18) 01:04:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xfeffffff}, 0x58) 01:04:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff030000}, 0x58) 01:04:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2b, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:39 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:04:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x17c}, 0x58) 01:04:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x5, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 21) 01:04:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x62, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff0f0000}, 0x58) [ 1556.061430] FAULT_INJECTION: forcing a failure. [ 1556.061430] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.062353] CPU: 1 UID: 0 PID: 34788 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1556.062376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.062384] Call Trace: [ 1556.062388] [ 1556.062393] dump_stack_lvl+0xfa/0x120 [ 1556.062412] should_fail_ex+0x4d7/0x5e0 [ 1556.062430] should_failslab+0xc2/0x120 [ 1556.062447] __kmalloc_cache_noprof+0x81/0x6b0 [ 1556.062467] ? alloc_fdtable+0x9e/0x2d0 [ 1556.062483] ? alloc_fdtable+0x9e/0x2d0 [ 1556.062494] alloc_fdtable+0x9e/0x2d0 [ 1556.062507] dup_fd+0x6ef/0xa80 [ 1556.062524] copy_process+0x21b4/0x7410 [ 1556.062540] ? __pfx_perf_trace_lock+0x10/0x10 [ 1556.062566] ? __pfx_copy_process+0x10/0x10 [ 1556.062580] ? __might_fault+0xe0/0x190 [ 1556.062595] ? _copy_from_user+0x5b/0xd0 [ 1556.062613] kernel_clone+0xea/0x7f0 [ 1556.062626] ? get_pid_task+0xfd/0x250 [ 1556.062641] ? __pfx_kernel_clone+0x10/0x10 [ 1556.062655] ? perf_trace_lock+0xb5/0x5d0 [ 1556.062675] ? find_held_lock+0x2b/0x80 [ 1556.062687] ? ksys_write+0x121/0x240 [ 1556.062702] ? lock_is_held_type+0x9e/0x120 [ 1556.062718] __do_sys_clone3+0x1f5/0x280 [ 1556.062732] ? __pfx___do_sys_clone3+0x10/0x10 [ 1556.062747] ? perf_trace_lock+0xb5/0x5d0 [ 1556.062770] ? lock_acquire+0x15e/0x2f0 [ 1556.062787] ? __pfx_perf_trace_lock+0x10/0x10 [ 1556.062803] ? __might_fault+0x138/0x190 [ 1556.062815] ? lock_release+0xc8/0x290 [ 1556.062831] ? __might_fault+0xe0/0x190 [ 1556.062843] ? find_held_lock+0x2b/0x80 [ 1556.062855] ? syscall_trace_enter+0x1cf/0x240 [ 1556.062871] ? lock_release+0xc8/0x290 [ 1556.062891] do_syscall_64+0xbf/0x390 [ 1556.062906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.062919] RIP: 0033:0x7fc56dfaeb19 [ 1556.062929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.062941] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1556.062953] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1556.062961] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1556.062968] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1556.062975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1556.062982] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1556.062999] 01:04:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 19) 01:04:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 19) 01:04:52 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:04:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x300}, 0x58) 01:04:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x6, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x300, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffc99a3b}, 0x58) 01:04:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 22) 01:04:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3be, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffff0300}, 0x58) [ 1568.492822] FAULT_INJECTION: forcing a failure. [ 1568.492822] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.494262] CPU: 0 UID: 0 PID: 34829 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1568.494281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1568.494289] Call Trace: [ 1568.494294] [ 1568.494300] dump_stack_lvl+0xfa/0x120 [ 1568.494324] should_fail_ex+0x4d7/0x5e0 [ 1568.494348] ? dup_fd+0x4d/0xa80 [ 1568.494362] should_failslab+0xc2/0x120 [ 1568.494381] kmem_cache_alloc_noprof+0x80/0x690 [ 1568.494404] ? __pfx_avc_has_perm+0x10/0x10 [ 1568.494435] ? dup_fd+0x4d/0xa80 [ 1568.494447] dup_fd+0x4d/0xa80 [ 1568.494475] copy_process+0x21b4/0x7410 [ 1568.494494] ? __pfx_perf_trace_lock+0x10/0x10 [ 1568.494513] ? perf_tp_event+0x807/0xe70 [ 1568.494550] ? __pfx_copy_process+0x10/0x10 [ 1568.494569] ? __might_fault+0xe0/0x190 [ 1568.494593] ? _copy_from_user+0x5b/0xd0 [ 1568.494621] kernel_clone+0xea/0x7f0 [ 1568.494643] ? __pfx_kernel_clone+0x10/0x10 [ 1568.494674] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1568.494690] ? ksys_write+0x121/0x240 [ 1568.494707] ? lock_is_held_type+0x9e/0x120 [ 1568.494730] __do_sys_clone3+0x1f5/0x280 [ 1568.494748] ? __pfx___do_sys_clone3+0x10/0x10 [ 1568.494763] ? perf_trace_lock+0x337/0x5d0 [ 1568.494811] ? __pfx_perf_trace_lock+0x10/0x10 [ 1568.494831] ? __might_fault+0x138/0x190 [ 1568.494851] ? __might_fault+0xe0/0x190 [ 1568.494866] ? find_held_lock+0x2b/0x80 [ 1568.494881] ? syscall_trace_enter+0x1cf/0x240 [ 1568.494900] ? lock_release+0xc8/0x290 [ 1568.494933] do_syscall_64+0xbf/0x390 [ 1568.494954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.494967] RIP: 0033:0x7f2be6d39b19 [ 1568.494978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1568.494991] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1568.495004] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1568.495013] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1568.495021] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1568.495028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1568.495035] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1568.495072] [ 1568.505494] FAULT_INJECTION: forcing a failure. [ 1568.505494] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.524029] CPU: 1 UID: 0 PID: 34830 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1568.524060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1568.524072] Call Trace: [ 1568.524082] [ 1568.524092] dump_stack_lvl+0xfa/0x120 [ 1568.524131] should_fail_ex+0x4d7/0x5e0 [ 1568.524169] ? dup_fd+0x4d/0xa80 [ 1568.524191] should_failslab+0xc2/0x120 [ 1568.524223] kmem_cache_alloc_noprof+0x80/0x690 [ 1568.524261] ? __pfx_avc_has_perm+0x10/0x10 [ 1568.524312] ? dup_fd+0x4d/0xa80 [ 1568.524333] dup_fd+0x4d/0xa80 [ 1568.524382] copy_process+0x21b4/0x7410 [ 1568.524413] ? __pfx_perf_trace_lock+0x10/0x10 [ 1568.524443] ? perf_tp_event+0x807/0xe70 [ 1568.524505] ? __pfx_copy_process+0x10/0x10 [ 1568.524536] ? __might_fault+0xe0/0x190 [ 1568.524578] ? _copy_from_user+0x5b/0xd0 [ 1568.524623] kernel_clone+0xea/0x7f0 [ 1568.524662] ? __pfx_kernel_clone+0x10/0x10 [ 1568.524714] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1568.524743] ? ksys_write+0x121/0x240 [ 1568.524771] ? lock_is_held_type+0x9e/0x120 [ 1568.524809] __do_sys_clone3+0x1f5/0x280 [ 1568.524839] ? __pfx___do_sys_clone3+0x10/0x10 [ 1568.524864] ? perf_trace_lock+0x337/0x5d0 [ 1568.524948] ? __pfx_perf_trace_lock+0x10/0x10 [ 1568.524981] ? __might_fault+0x138/0x190 [ 1568.525015] ? __might_fault+0xe0/0x190 [ 1568.525042] ? find_held_lock+0x2b/0x80 [ 1568.525067] ? syscall_trace_enter+0x1cf/0x240 [ 1568.525097] ? lock_release+0xc8/0x290 [ 1568.525154] do_syscall_64+0xbf/0x390 [ 1568.525187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.525211] RIP: 0033:0x7ff6d12e7b19 [ 1568.525229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1568.525249] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1568.525270] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1568.525285] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1568.525298] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1568.525311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1568.525324] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1568.525386] 01:04:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 20) 01:04:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffffff7f}, 0x58) 01:04:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x7, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:04:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x306}, 0x58) 01:05:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 20) 01:05:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 21) 01:05:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x480, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:04 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:05:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x480}, 0x58) 01:05:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 23) 01:05:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xfffffffe}, 0x58) [ 1580.424359] FAULT_INJECTION: forcing a failure. [ 1580.424359] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.426095] CPU: 1 UID: 0 PID: 34958 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1580.426130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1580.426144] Call Trace: [ 1580.426151] [ 1580.426160] dump_stack_lvl+0xfa/0x120 [ 1580.426191] should_fail_ex+0x4d7/0x5e0 [ 1580.426222] should_failslab+0xc2/0x120 [ 1580.426252] __kvmalloc_node_noprof+0x11f/0x770 [ 1580.426280] ? alloc_fdtable+0xf2/0x2d0 [ 1580.426310] ? alloc_fdtable+0xf2/0x2d0 [ 1580.426329] alloc_fdtable+0xf2/0x2d0 [ 1580.426353] dup_fd+0x6ef/0xa80 [ 1580.426384] copy_process+0x21b4/0x7410 [ 1580.426412] ? __pfx_perf_trace_lock+0x10/0x10 [ 1580.426460] ? __pfx_copy_process+0x10/0x10 [ 1580.426486] ? __might_fault+0xe0/0x190 [ 1580.426516] ? _copy_from_user+0x5b/0xd0 [ 1580.426547] kernel_clone+0xea/0x7f0 [ 1580.426572] ? get_pid_task+0xfd/0x250 [ 1580.426600] ? __pfx_kernel_clone+0x10/0x10 [ 1580.426625] ? perf_trace_lock+0xb5/0x5d0 [ 1580.426662] ? find_held_lock+0x2b/0x80 [ 1580.426685] ? ksys_write+0x121/0x240 [ 1580.426711] ? lock_is_held_type+0x9e/0x120 [ 1580.426740] __do_sys_clone3+0x1f5/0x280 [ 1580.426767] ? __pfx___do_sys_clone3+0x10/0x10 [ 1580.426794] ? perf_trace_lock+0xb5/0x5d0 [ 1580.426836] ? lock_acquire+0x15e/0x2f0 [ 1580.426868] ? __pfx_perf_trace_lock+0x10/0x10 [ 1580.426899] ? __might_fault+0x138/0x190 [ 1580.426921] ? lock_release+0xc8/0x290 [ 1580.426951] ? __might_fault+0xe0/0x190 [ 1580.426973] ? find_held_lock+0x2b/0x80 [ 1580.426996] ? syscall_trace_enter+0x1cf/0x240 [ 1580.427025] ? lock_release+0xc8/0x290 [ 1580.427063] do_syscall_64+0xbf/0x390 [ 1580.427092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.427115] RIP: 0033:0x7fc56dfaeb19 [ 1580.427132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.427154] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1580.427181] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1580.427196] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1580.427210] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1580.427223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1580.427236] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1580.427268] [ 1580.469787] FAULT_INJECTION: forcing a failure. [ 1580.469787] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.471830] CPU: 1 UID: 0 PID: 34960 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1580.471860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1580.471871] Call Trace: [ 1580.471879] [ 1580.471888] dump_stack_lvl+0xfa/0x120 [ 1580.471917] should_fail_ex+0x4d7/0x5e0 [ 1580.471955] should_failslab+0xc2/0x120 [ 1580.471984] __kmalloc_cache_noprof+0x81/0x6b0 [ 1580.472027] ? alloc_fdtable+0x9e/0x2d0 [ 1580.472066] ? alloc_fdtable+0x9e/0x2d0 [ 1580.472089] alloc_fdtable+0x9e/0x2d0 [ 1580.472134] dup_fd+0x6ef/0xa80 [ 1580.472181] copy_process+0x21b4/0x7410 [ 1580.472211] ? __pfx_perf_trace_lock+0x10/0x10 [ 1580.472240] ? perf_tp_event+0x807/0xe70 [ 1580.472304] ? __pfx_copy_process+0x10/0x10 [ 1580.472334] ? __might_fault+0xe0/0x190 [ 1580.472376] ? _copy_from_user+0x5b/0xd0 [ 1580.472422] kernel_clone+0xea/0x7f0 [ 1580.472461] ? __pfx_kernel_clone+0x10/0x10 [ 1580.472515] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1580.472543] ? ksys_write+0x121/0x240 [ 1580.472571] ? lock_is_held_type+0x9e/0x120 [ 1580.472608] __do_sys_clone3+0x1f5/0x280 [ 1580.472638] ? __pfx___do_sys_clone3+0x10/0x10 [ 1580.472663] ? perf_trace_lock+0x337/0x5d0 [ 1580.472751] ? __pfx_perf_trace_lock+0x10/0x10 [ 1580.472784] ? __might_fault+0x138/0x190 [ 1580.472818] ? __might_fault+0xe0/0x190 [ 1580.472846] ? find_held_lock+0x2b/0x80 [ 1580.472870] ? syscall_trace_enter+0x1cf/0x240 [ 1580.472901] ? lock_release+0xc8/0x290 [ 1580.472959] do_syscall_64+0xbf/0x390 [ 1580.472992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.473015] RIP: 0033:0x7f2be6d39b19 [ 1580.473032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.473053] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1580.473073] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1580.473088] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1580.473101] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1580.473113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1580.473126] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1580.473191] 01:05:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x10, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x500}, 0x58) 01:05:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x500, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 22) 01:05:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 21) 01:05:17 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:05:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 24) 01:05:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2b, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x600}, 0x58) 01:05:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x50f, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x100000800}, 0x58) [ 1593.662402] FAULT_INJECTION: forcing a failure. [ 1593.662402] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.664474] CPU: 0 UID: 0 PID: 35094 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1593.664504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.664518] Call Trace: [ 1593.664526] [ 1593.664536] dump_stack_lvl+0xfa/0x120 [ 1593.664571] should_fail_ex+0x4d7/0x5e0 [ 1593.664612] should_failslab+0xc2/0x120 [ 1593.664644] __kmalloc_cache_noprof+0x81/0x6b0 [ 1593.664688] ? alloc_fdtable+0x9e/0x2d0 [ 1593.664730] ? alloc_fdtable+0x9e/0x2d0 [ 1593.664754] alloc_fdtable+0x9e/0x2d0 [ 1593.664786] dup_fd+0x6ef/0xa80 [ 1593.664835] copy_process+0x21b4/0x7410 [ 1593.664866] ? __pfx_perf_trace_lock+0x10/0x10 [ 1593.664897] ? perf_tp_event+0x807/0xe70 [ 1593.664960] ? __pfx_copy_process+0x10/0x10 [ 1593.664992] ? __might_fault+0xe0/0x190 [ 1593.665034] ? _copy_from_user+0x5b/0xd0 [ 1593.665082] kernel_clone+0xea/0x7f0 [ 1593.665128] ? __pfx_kernel_clone+0x10/0x10 [ 1593.665182] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1593.665210] ? ksys_write+0x121/0x240 [ 1593.665239] ? lock_is_held_type+0x9e/0x120 [ 1593.665278] __do_sys_clone3+0x1f5/0x280 [ 1593.665308] ? __pfx___do_sys_clone3+0x10/0x10 [ 1593.665333] ? perf_trace_lock+0x337/0x5d0 [ 1593.665419] ? __pfx_perf_trace_lock+0x10/0x10 [ 1593.665453] ? __might_fault+0x138/0x190 [ 1593.665488] ? __might_fault+0xe0/0x190 [ 1593.665515] ? find_held_lock+0x2b/0x80 [ 1593.665541] ? syscall_trace_enter+0x1cf/0x240 [ 1593.665573] ? lock_release+0xc8/0x290 [ 1593.665632] do_syscall_64+0xbf/0x390 [ 1593.665666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.665690] RIP: 0033:0x7ff6d12e7b19 [ 1593.665709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.665731] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1593.665752] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1593.665767] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1593.665781] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.665794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.665808] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1593.665877] 01:05:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x62, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x10000000000}, 0x58) 01:05:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x603}, 0x58) 01:05:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x600, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 25) 01:05:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 23) 01:05:31 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:05:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 22) 01:05:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x40000000000}, 0x58) 01:05:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2ac, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2020000000000}, 0x58) [ 1607.753668] FAULT_INJECTION: forcing a failure. [ 1607.753668] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.754896] CPU: 1 UID: 0 PID: 35227 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1607.754919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.754929] Call Trace: [ 1607.754935] [ 1607.754941] dump_stack_lvl+0xfa/0x120 [ 1607.754970] should_fail_ex+0x4d7/0x5e0 [ 1607.754996] should_failslab+0xc2/0x120 [ 1607.755022] __kvmalloc_node_noprof+0x11f/0x770 [ 1607.755045] ? alloc_fdtable+0x163/0x2d0 [ 1607.755070] ? alloc_fdtable+0x163/0x2d0 [ 1607.755086] alloc_fdtable+0x163/0x2d0 [ 1607.755105] dup_fd+0x6ef/0xa80 [ 1607.755135] copy_process+0x21b4/0x7410 [ 1607.755158] ? __pfx_perf_trace_lock+0x10/0x10 [ 1607.755197] ? __pfx_copy_process+0x10/0x10 [ 1607.755218] ? __might_fault+0xe0/0x190 [ 1607.755243] ? _copy_from_user+0x5b/0xd0 [ 1607.755270] kernel_clone+0xea/0x7f0 [ 1607.755289] ? get_pid_task+0xfd/0x250 [ 1607.755313] ? __pfx_kernel_clone+0x10/0x10 [ 1607.755334] ? perf_trace_lock+0xb5/0x5d0 [ 1607.755364] ? find_held_lock+0x2b/0x80 [ 1607.755381] ? ksys_write+0x121/0x240 [ 1607.755403] ? lock_is_held_type+0x9e/0x120 [ 1607.755428] __do_sys_clone3+0x1f5/0x280 [ 1607.755450] ? __pfx___do_sys_clone3+0x10/0x10 [ 1607.755470] ? perf_trace_lock+0xb5/0x5d0 [ 1607.755506] ? lock_acquire+0x15e/0x2f0 [ 1607.755532] ? __pfx_perf_trace_lock+0x10/0x10 [ 1607.755560] ? __might_fault+0x138/0x190 [ 1607.755578] ? lock_release+0xc8/0x290 [ 1607.755602] ? __might_fault+0xe0/0x190 [ 1607.755621] ? find_held_lock+0x2b/0x80 [ 1607.755639] ? syscall_trace_enter+0x1cf/0x240 [ 1607.755664] ? lock_release+0xc8/0x290 [ 1607.755694] do_syscall_64+0xbf/0x390 [ 1607.755717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.755736] RIP: 0033:0x7fc56dfaeb19 [ 1607.755749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.755767] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1607.755784] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1607.755797] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1607.755808] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1607.755819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1607.755831] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1607.755859] [ 1607.762838] FAULT_INJECTION: forcing a failure. [ 1607.762838] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.783565] CPU: 0 UID: 0 PID: 35230 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1607.783593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1607.783605] Call Trace: [ 1607.783615] [ 1607.783625] dump_stack_lvl+0xfa/0x120 [ 1607.783661] should_fail_ex+0x4d7/0x5e0 [ 1607.783701] should_failslab+0xc2/0x120 [ 1607.783731] __kvmalloc_node_noprof+0x11f/0x770 [ 1607.783767] ? alloc_fdtable+0xf2/0x2d0 [ 1607.783810] ? alloc_fdtable+0xf2/0x2d0 [ 1607.783826] alloc_fdtable+0xf2/0x2d0 [ 1607.783856] dup_fd+0x6ef/0xa80 [ 1607.783903] copy_process+0x21b4/0x7410 [ 1607.783933] ? __pfx_perf_trace_lock+0x10/0x10 [ 1607.783963] ? perf_tp_event+0x807/0xe70 [ 1607.784023] ? __pfx_copy_process+0x10/0x10 [ 1607.784051] ? __might_fault+0xe0/0x190 [ 1607.784090] ? _copy_from_user+0x5b/0xd0 [ 1607.784140] kernel_clone+0xea/0x7f0 [ 1607.784176] ? __pfx_kernel_clone+0x10/0x10 [ 1607.784225] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1607.784250] ? ksys_write+0x121/0x240 [ 1607.784277] ? lock_is_held_type+0x9e/0x120 [ 1607.784312] __do_sys_clone3+0x1f5/0x280 [ 1607.784339] ? __pfx___do_sys_clone3+0x10/0x10 [ 1607.784361] ? perf_trace_lock+0x337/0x5d0 [ 1607.784452] ? __pfx_perf_trace_lock+0x10/0x10 [ 1607.784482] ? __might_fault+0x138/0x190 [ 1607.784517] ? __might_fault+0xe0/0x190 [ 1607.784539] ? find_held_lock+0x2b/0x80 [ 1607.784563] ? syscall_trace_enter+0x1cf/0x240 [ 1607.784593] ? lock_release+0xc8/0x290 [ 1607.784649] do_syscall_64+0xbf/0x390 [ 1607.784681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.784702] RIP: 0033:0x7f2be6d39b19 [ 1607.784718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1607.784737] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1607.784755] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1607.784768] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1607.784779] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1607.784791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1607.784803] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1607.784864] 01:05:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x700}, 0x58) 01:05:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x700, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 26) 01:05:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 24) 01:05:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x300, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4000000000000}, 0x58) 01:05:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xe00}, 0x58) 01:05:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xf00, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:31 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:05:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8000000000000}, 0x58) 01:05:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3ec, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x1078}, 0x58) 01:05:45 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(0x0, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:05:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 27) 01:05:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xf05, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8000001000000}, 0x58) 01:05:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 23) 01:05:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 25) [ 1622.035806] FAULT_INJECTION: forcing a failure. [ 1622.035806] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.036855] CPU: 1 UID: 0 PID: 35469 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1622.036872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1622.036879] Call Trace: [ 1622.036883] [ 1622.036888] dump_stack_lvl+0xfa/0x120 [ 1622.036907] should_fail_ex+0x4d7/0x5e0 [ 1622.036924] ? copy_fs_struct+0x49/0x350 [ 1622.036941] should_failslab+0xc2/0x120 [ 1622.036958] kmem_cache_alloc_noprof+0x80/0x690 [ 1622.036977] ? do_raw_spin_unlock+0x53/0x220 [ 1622.036996] ? __asan_memset+0x24/0x50 [ 1622.037012] ? copy_fs_struct+0x49/0x350 [ 1622.037026] copy_fs_struct+0x49/0x350 [ 1622.037044] copy_process+0x302c/0x7410 [ 1622.037060] ? __pfx_perf_trace_lock+0x10/0x10 [ 1622.037085] ? __pfx_copy_process+0x10/0x10 [ 1622.037099] ? __might_fault+0xe0/0x190 [ 1622.037119] ? _copy_from_user+0x5b/0xd0 [ 1622.037137] kernel_clone+0xea/0x7f0 [ 1622.037150] ? get_pid_task+0xfd/0x250 [ 1622.037166] ? __pfx_kernel_clone+0x10/0x10 [ 1622.037179] ? perf_trace_lock+0xb5/0x5d0 [ 1622.037200] ? find_held_lock+0x2b/0x80 [ 1622.037212] ? ksys_write+0x121/0x240 [ 1622.037226] ? lock_is_held_type+0x9e/0x120 [ 1622.037242] __do_sys_clone3+0x1f5/0x280 [ 1622.037256] ? __pfx___do_sys_clone3+0x10/0x10 [ 1622.037271] ? perf_trace_lock+0xb5/0x5d0 [ 1622.037294] ? lock_acquire+0x15e/0x2f0 [ 1622.037310] ? __pfx_perf_trace_lock+0x10/0x10 [ 1622.037327] ? __might_fault+0x138/0x190 [ 1622.037339] ? lock_release+0xc8/0x290 [ 1622.037355] ? __might_fault+0xe0/0x190 [ 1622.037367] ? find_held_lock+0x2b/0x80 [ 1622.037379] ? syscall_trace_enter+0x1cf/0x240 [ 1622.037396] ? lock_release+0xc8/0x290 [ 1622.037417] do_syscall_64+0xbf/0x390 [ 1622.037432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.037445] RIP: 0033:0x7fc56dfaeb19 [ 1622.037455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.037467] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1622.037479] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1622.037488] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1622.037495] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.037503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.037510] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1622.037528] [ 1622.065531] FAULT_INJECTION: forcing a failure. [ 1622.065531] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.066478] CPU: 1 UID: 0 PID: 35473 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1622.066495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1622.066502] Call Trace: [ 1622.066506] [ 1622.066512] dump_stack_lvl+0xfa/0x120 [ 1622.066528] should_fail_ex+0x4d7/0x5e0 [ 1622.066549] should_failslab+0xc2/0x120 [ 1622.066567] __kvmalloc_node_noprof+0x11f/0x770 [ 1622.066587] ? alloc_fdtable+0x163/0x2d0 [ 1622.066611] ? alloc_fdtable+0x163/0x2d0 [ 1622.066622] alloc_fdtable+0x163/0x2d0 [ 1622.066639] dup_fd+0x6ef/0xa80 [ 1622.066666] copy_process+0x21b4/0x7410 [ 1622.066682] ? __pfx_perf_trace_lock+0x10/0x10 [ 1622.066698] ? perf_tp_event+0x807/0xe70 [ 1622.066732] ? __pfx_copy_process+0x10/0x10 [ 1622.066750] ? __might_fault+0xe0/0x190 [ 1622.066772] ? _copy_from_user+0x5b/0xd0 [ 1622.066796] kernel_clone+0xea/0x7f0 [ 1622.066817] ? __pfx_kernel_clone+0x10/0x10 [ 1622.066845] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1622.066861] ? ksys_write+0x121/0x240 [ 1622.066876] ? lock_is_held_type+0x9e/0x120 [ 1622.066895] __do_sys_clone3+0x1f5/0x280 [ 1622.066911] ? __pfx___do_sys_clone3+0x10/0x10 [ 1622.066925] ? perf_trace_lock+0x337/0x5d0 [ 1622.066969] ? __pfx_perf_trace_lock+0x10/0x10 [ 1622.066988] ? __might_fault+0x138/0x190 [ 1622.067006] ? __might_fault+0xe0/0x190 [ 1622.067021] ? find_held_lock+0x2b/0x80 [ 1622.067035] ? syscall_trace_enter+0x1cf/0x240 [ 1622.067051] ? lock_release+0xc8/0x290 [ 1622.067082] do_syscall_64+0xbf/0x390 [ 1622.067101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.067117] RIP: 0033:0x7f2be6d39b19 [ 1622.067127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.067139] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1622.067150] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1622.067158] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1622.067166] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.067173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.067180] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1622.067214] [ 1622.089971] FAULT_INJECTION: forcing a failure. [ 1622.089971] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.091215] CPU: 1 UID: 0 PID: 35478 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1622.091232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1622.091239] Call Trace: [ 1622.091244] [ 1622.091250] dump_stack_lvl+0xfa/0x120 [ 1622.091266] should_fail_ex+0x4d7/0x5e0 [ 1622.091287] should_failslab+0xc2/0x120 [ 1622.091304] __kvmalloc_node_noprof+0x11f/0x770 [ 1622.091324] ? alloc_fdtable+0xf2/0x2d0 [ 1622.091348] ? alloc_fdtable+0xf2/0x2d0 [ 1622.091359] alloc_fdtable+0xf2/0x2d0 [ 1622.091376] dup_fd+0x6ef/0xa80 [ 1622.091405] copy_process+0x21b4/0x7410 [ 1622.091424] ? __pfx_perf_trace_lock+0x10/0x10 [ 1622.091440] ? perf_tp_event+0x807/0xe70 [ 1622.091474] ? __pfx_copy_process+0x10/0x10 [ 1622.091491] ? __might_fault+0xe0/0x190 [ 1622.091513] ? _copy_from_user+0x5b/0xd0 [ 1622.091538] kernel_clone+0xea/0x7f0 [ 1622.091559] ? __pfx_kernel_clone+0x10/0x10 [ 1622.091587] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1622.091603] ? ksys_write+0x121/0x240 [ 1622.091619] ? lock_is_held_type+0x9e/0x120 [ 1622.091638] __do_sys_clone3+0x1f5/0x280 [ 1622.091655] ? __pfx___do_sys_clone3+0x10/0x10 [ 1622.091669] ? perf_trace_lock+0x337/0x5d0 [ 1622.091714] ? __pfx_perf_trace_lock+0x10/0x10 [ 1622.091733] ? __might_fault+0x138/0x190 [ 1622.091751] ? __might_fault+0xe0/0x190 [ 1622.091766] ? find_held_lock+0x2b/0x80 [ 1622.091780] ? syscall_trace_enter+0x1cf/0x240 [ 1622.091797] ? lock_release+0xc8/0x290 [ 1622.091828] do_syscall_64+0xbf/0x390 [ 1622.091846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.091859] RIP: 0033:0x7ff6d12e7b19 [ 1622.091869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.091880] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1622.091891] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1622.091900] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1622.091907] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1622.091915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.091922] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1622.091956] 01:05:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 28) 01:05:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 24) 01:05:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x10100000000000}, 0x58) 01:05:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2000}, 0x58) 01:05:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xf89, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x480, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 26) 01:05:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3f00}, 0x58) 01:05:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4000}, 0x58) 01:05:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x10400000000000}, 0x58) 01:05:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 27) 01:05:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 25) 01:05:58 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(0x0, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:05:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x500, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xfba, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 29) 01:05:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6200}, 0x58) [ 1634.998343] FAULT_INJECTION: forcing a failure. [ 1634.998343] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.999371] CPU: 1 UID: 0 PID: 35617 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1634.999388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1634.999396] Call Trace: [ 1634.999401] [ 1634.999407] dump_stack_lvl+0xfa/0x120 [ 1634.999429] should_fail_ex+0x4d7/0x5e0 [ 1634.999452] ? copy_fs_struct+0x49/0x350 [ 1634.999468] should_failslab+0xc2/0x120 [ 1634.999487] kmem_cache_alloc_noprof+0x80/0x690 [ 1634.999507] ? do_raw_spin_unlock+0x53/0x220 [ 1634.999530] ? __asan_memset+0x24/0x50 [ 1634.999552] ? copy_fs_struct+0x49/0x350 [ 1634.999567] copy_fs_struct+0x49/0x350 [ 1634.999589] copy_process+0x302c/0x7410 [ 1634.999607] ? __pfx_perf_trace_lock+0x10/0x10 [ 1634.999624] ? perf_tp_event+0x807/0xe70 [ 1634.999658] ? __pfx_copy_process+0x10/0x10 [ 1634.999675] ? __might_fault+0xe0/0x190 [ 1634.999698] ? _copy_from_user+0x5b/0xd0 [ 1634.999725] kernel_clone+0xea/0x7f0 [ 1634.999749] ? __pfx_kernel_clone+0x10/0x10 [ 1634.999778] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1634.999793] ? ksys_write+0x121/0x240 [ 1634.999809] ? lock_is_held_type+0x9e/0x120 [ 1634.999831] __do_sys_clone3+0x1f5/0x280 [ 1634.999848] ? __pfx___do_sys_clone3+0x10/0x10 [ 1634.999863] ? perf_trace_lock+0x337/0x5d0 [ 1634.999908] ? __pfx_perf_trace_lock+0x10/0x10 [ 1634.999926] ? __might_fault+0x138/0x190 [ 1634.999944] ? __might_fault+0xe0/0x190 [ 1634.999959] ? find_held_lock+0x2b/0x80 [ 1634.999973] ? syscall_trace_enter+0x1cf/0x240 [ 1634.999991] ? lock_release+0xc8/0x290 [ 1635.000022] do_syscall_64+0xbf/0x390 [ 1635.000041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.000056] RIP: 0033:0x7f2be6d39b19 [ 1635.000066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.000078] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1635.000091] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1635.000099] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1635.000106] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.000119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1635.000126] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1635.000159] [ 1635.019963] FAULT_INJECTION: forcing a failure. [ 1635.019963] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.021073] CPU: 1 UID: 0 PID: 35618 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1635.021089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1635.021096] Call Trace: [ 1635.021100] [ 1635.021104] dump_stack_lvl+0xfa/0x120 [ 1635.021123] should_fail_ex+0x4d7/0x5e0 [ 1635.021137] ? copy_process+0x2315/0x7410 [ 1635.021151] should_failslab+0xc2/0x120 [ 1635.021166] kmem_cache_alloc_noprof+0x80/0x690 [ 1635.021184] ? do_raw_spin_unlock+0x53/0x220 [ 1635.021207] ? copy_process+0x2315/0x7410 [ 1635.021222] copy_process+0x2315/0x7410 [ 1635.021236] ? __pfx_perf_trace_lock+0x10/0x10 [ 1635.021261] ? __pfx_copy_process+0x10/0x10 [ 1635.021275] ? __might_fault+0xe0/0x190 [ 1635.021291] ? _copy_from_user+0x5b/0xd0 [ 1635.021307] kernel_clone+0xea/0x7f0 [ 1635.021321] ? get_pid_task+0xfd/0x250 [ 1635.021337] ? __pfx_kernel_clone+0x10/0x10 [ 1635.021350] ? perf_trace_lock+0xb5/0x5d0 [ 1635.021371] ? find_held_lock+0x2b/0x80 [ 1635.021384] ? ksys_write+0x121/0x240 [ 1635.021397] ? lock_is_held_type+0x9e/0x120 [ 1635.021411] __do_sys_clone3+0x1f5/0x280 [ 1635.021426] ? __pfx___do_sys_clone3+0x10/0x10 [ 1635.021441] ? perf_trace_lock+0xb5/0x5d0 [ 1635.021464] ? lock_acquire+0x15e/0x2f0 [ 1635.021481] ? __pfx_perf_trace_lock+0x10/0x10 [ 1635.021498] ? __might_fault+0x138/0x190 [ 1635.021510] ? lock_release+0xc8/0x290 [ 1635.021527] ? __might_fault+0xe0/0x190 [ 1635.021539] ? find_held_lock+0x2b/0x80 [ 1635.021553] ? syscall_trace_enter+0x1cf/0x240 [ 1635.021568] ? lock_release+0xc8/0x290 [ 1635.021589] do_syscall_64+0xbf/0x390 [ 1635.021604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.021616] RIP: 0033:0x7fc56dfaeb19 [ 1635.021625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.021637] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1635.021648] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1635.021656] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1635.021664] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.021671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1635.021678] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1635.021696] [ 1635.042435] FAULT_INJECTION: forcing a failure. [ 1635.042435] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.044936] CPU: 1 UID: 0 PID: 35619 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1635.044954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1635.044961] Call Trace: [ 1635.044965] [ 1635.044971] dump_stack_lvl+0xfa/0x120 [ 1635.044987] should_fail_ex+0x4d7/0x5e0 [ 1635.045008] should_failslab+0xc2/0x120 [ 1635.045024] __kvmalloc_node_noprof+0x11f/0x770 [ 1635.045044] ? alloc_fdtable+0x163/0x2d0 [ 1635.045069] ? alloc_fdtable+0x163/0x2d0 [ 1635.045079] alloc_fdtable+0x163/0x2d0 [ 1635.045097] dup_fd+0x6ef/0xa80 [ 1635.045127] copy_process+0x21b4/0x7410 [ 1635.045144] ? __pfx_perf_trace_lock+0x10/0x10 [ 1635.045160] ? perf_tp_event+0x807/0xe70 [ 1635.045193] ? __pfx_copy_process+0x10/0x10 [ 1635.045211] ? __might_fault+0xe0/0x190 [ 1635.045234] ? _copy_from_user+0x5b/0xd0 [ 1635.045258] kernel_clone+0xea/0x7f0 [ 1635.045280] ? __pfx_kernel_clone+0x10/0x10 [ 1635.045308] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1635.045324] ? ksys_write+0x121/0x240 [ 1635.045339] ? lock_is_held_type+0x9e/0x120 [ 1635.045359] __do_sys_clone3+0x1f5/0x280 [ 1635.045376] ? __pfx___do_sys_clone3+0x10/0x10 [ 1635.045390] ? perf_trace_lock+0x337/0x5d0 [ 1635.045435] ? __pfx_perf_trace_lock+0x10/0x10 [ 1635.045454] ? __might_fault+0x138/0x190 [ 1635.045473] ? __might_fault+0xe0/0x190 [ 1635.045488] ? find_held_lock+0x2b/0x80 [ 1635.045502] ? syscall_trace_enter+0x1cf/0x240 [ 1635.045518] ? lock_release+0xc8/0x290 [ 1635.045550] do_syscall_64+0xbf/0x390 [ 1635.045568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.045580] RIP: 0033:0x7ff6d12e7b19 [ 1635.045590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.045602] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1635.045613] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1635.045622] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1635.045629] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.045636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1635.045643] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1635.045678] 01:05:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 30) 01:05:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 26) 01:05:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7810}, 0x58) 01:05:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x600, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x1058, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x100000000000000}, 0x58) 01:05:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 28) 01:05:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7c01}, 0x58) 01:05:59 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(0x0, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:05:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 31) 01:05:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8004}, 0x58) 01:05:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x700, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:05:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x200000000000000}, 0x58) 01:05:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff03}, 0x58) 01:06:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 27) 01:06:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff0f}, 0x58) 01:06:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 29) 01:06:09 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:06:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2b00, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x300000000000000}, 0x58) 01:06:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 32) [ 1646.047643] FAULT_INJECTION: forcing a failure. [ 1646.047643] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.049525] CPU: 0 UID: 0 PID: 35885 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1646.049557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.049570] Call Trace: [ 1646.049580] [ 1646.049591] dump_stack_lvl+0xfa/0x120 [ 1646.049627] should_fail_ex+0x4d7/0x5e0 [ 1646.049667] ? copy_fs_struct+0x49/0x350 [ 1646.049696] should_failslab+0xc2/0x120 [ 1646.049730] kmem_cache_alloc_noprof+0x80/0x690 [ 1646.049768] ? do_raw_spin_unlock+0x53/0x220 [ 1646.049805] ? __asan_memset+0x24/0x50 [ 1646.049847] ? copy_fs_struct+0x49/0x350 [ 1646.049874] copy_fs_struct+0x49/0x350 [ 1646.049916] copy_process+0x302c/0x7410 [ 1646.049948] ? __pfx_perf_trace_lock+0x10/0x10 [ 1646.049979] ? perf_tp_event+0x807/0xe70 [ 1646.050040] ? __pfx_copy_process+0x10/0x10 [ 1646.050072] ? __might_fault+0xe0/0x190 [ 1646.050122] ? _copy_from_user+0x5b/0xd0 [ 1646.050171] kernel_clone+0xea/0x7f0 [ 1646.050210] ? __pfx_kernel_clone+0x10/0x10 [ 1646.050262] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1646.050291] ? ksys_write+0x121/0x240 [ 1646.050321] ? lock_is_held_type+0x9e/0x120 [ 1646.050359] __do_sys_clone3+0x1f5/0x280 [ 1646.050390] ? __pfx___do_sys_clone3+0x10/0x10 [ 1646.050416] ? perf_trace_lock+0x337/0x5d0 [ 1646.050510] ? __pfx_perf_trace_lock+0x10/0x10 [ 1646.050564] ? __might_fault+0x138/0x190 [ 1646.050618] ? __might_fault+0xe0/0x190 [ 1646.050648] ? find_held_lock+0x2b/0x80 [ 1646.050674] ? syscall_trace_enter+0x1cf/0x240 [ 1646.050706] ? lock_release+0xc8/0x290 [ 1646.050763] do_syscall_64+0xbf/0x390 [ 1646.050798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.050822] RIP: 0033:0x7ff6d12e7b19 [ 1646.050841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.050863] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1646.050884] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1646.050900] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1646.050913] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.050927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1646.050940] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1646.051002] [ 1646.104762] FAULT_INJECTION: forcing a failure. [ 1646.104762] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.106698] CPU: 0 UID: 0 PID: 35887 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1646.106741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.106757] Call Trace: [ 1646.106769] [ 1646.106782] dump_stack_lvl+0xfa/0x120 [ 1646.106828] should_fail_ex+0x4d7/0x5e0 [ 1646.106881] ? copy_process+0x5a54/0x7410 [ 1646.106921] should_failslab+0xc2/0x120 [ 1646.106969] kmem_cache_alloc_noprof+0x80/0x690 [ 1646.107020] ? copy_process+0x2446/0x7410 [ 1646.107097] ? copy_process+0x5a54/0x7410 [ 1646.107151] copy_process+0x5a54/0x7410 [ 1646.107199] ? __pfx_perf_trace_lock+0x10/0x10 [ 1646.107244] ? perf_tp_event+0x807/0xe70 [ 1646.107339] ? __pfx_copy_process+0x10/0x10 [ 1646.107389] ? __might_fault+0xe0/0x190 [ 1646.107454] ? _copy_from_user+0x5b/0xd0 [ 1646.107527] kernel_clone+0xea/0x7f0 [ 1646.107588] ? __pfx_kernel_clone+0x10/0x10 [ 1646.107671] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1646.107713] ? ksys_write+0x121/0x240 [ 1646.107754] ? lock_is_held_type+0x9e/0x120 [ 1646.107810] __do_sys_clone3+0x1f5/0x280 [ 1646.107856] ? __pfx___do_sys_clone3+0x10/0x10 [ 1646.107893] ? perf_trace_lock+0x337/0x5d0 [ 1646.108021] ? __pfx_perf_trace_lock+0x10/0x10 [ 1646.108074] ? __might_fault+0x138/0x190 [ 1646.108128] ? __might_fault+0xe0/0x190 [ 1646.108170] ? find_held_lock+0x2b/0x80 [ 1646.108210] ? syscall_trace_enter+0x1cf/0x240 [ 1646.108258] ? lock_release+0xc8/0x290 [ 1646.108349] do_syscall_64+0xbf/0x390 [ 1646.108403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.108439] RIP: 0033:0x7fc56dfaeb19 [ 1646.108466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.108500] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1646.108532] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1646.108554] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1646.108575] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.108597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1646.108618] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1646.108733] [ 1646.145640] FAULT_INJECTION: forcing a failure. [ 1646.145640] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.147369] CPU: 0 UID: 0 PID: 35897 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1646.147412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.147432] Call Trace: [ 1646.147445] [ 1646.147461] dump_stack_lvl+0xfa/0x120 [ 1646.147499] should_fail_ex+0x4d7/0x5e0 [ 1646.147536] ? copy_process+0x2315/0x7410 [ 1646.147561] should_failslab+0xc2/0x120 [ 1646.147592] kmem_cache_alloc_noprof+0x80/0x690 [ 1646.147630] ? do_raw_spin_unlock+0x53/0x220 [ 1646.147685] ? copy_process+0x2315/0x7410 [ 1646.147712] copy_process+0x2315/0x7410 [ 1646.147742] ? __pfx_perf_trace_lock+0x10/0x10 [ 1646.147771] ? perf_tp_event+0x807/0xe70 [ 1646.147832] ? __pfx_copy_process+0x10/0x10 [ 1646.147863] ? __might_fault+0xe0/0x190 [ 1646.147923] ? _copy_from_user+0x5b/0xd0 [ 1646.147995] kernel_clone+0xea/0x7f0 [ 1646.148044] ? __pfx_kernel_clone+0x10/0x10 [ 1646.148097] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1646.148135] ? ksys_write+0x121/0x240 [ 1646.148164] ? lock_is_held_type+0x9e/0x120 [ 1646.148201] __do_sys_clone3+0x1f5/0x280 [ 1646.148232] ? __pfx___do_sys_clone3+0x10/0x10 [ 1646.148257] ? perf_trace_lock+0x337/0x5d0 [ 1646.148341] ? __pfx_perf_trace_lock+0x10/0x10 [ 1646.148376] ? __might_fault+0x138/0x190 [ 1646.148410] ? __might_fault+0xe0/0x190 [ 1646.148438] ? find_held_lock+0x2b/0x80 [ 1646.148464] ? syscall_trace_enter+0x1cf/0x240 [ 1646.148495] ? lock_release+0xc8/0x290 [ 1646.148553] do_syscall_64+0xbf/0x390 [ 1646.148587] entry_SYSCALL_64_after_hwframe+0x77/0x7f 01:06:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x400000000000000}, 0x58) 01:06:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3f00, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x500000000000000}, 0x58) [ 1646.148610] RIP: 0033:0x7f2be6d39b19 [ 1646.148628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1646.148651] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1646.148672] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1646.148687] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1646.148701] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.148733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1646.148746] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1646.148809] 01:06:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x20200}, 0x58) 01:06:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2b00, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:10 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:06:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 30) 01:06:20 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:06:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3f00, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 33) 01:06:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 28) 01:06:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x600000000000000}, 0x58) 01:06:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x5810, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3ffff}, 0x58) [ 1657.131351] FAULT_INJECTION: forcing a failure. [ 1657.131351] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.133400] CPU: 1 UID: 0 PID: 36124 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1657.133449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.133470] Call Trace: [ 1657.133481] [ 1657.133496] dump_stack_lvl+0xfa/0x120 [ 1657.133539] should_fail_ex+0x4d7/0x5e0 [ 1657.133579] ? create_new_namespaces+0x30/0xab0 [ 1657.133609] should_failslab+0xc2/0x120 [ 1657.133655] kmem_cache_alloc_noprof+0x80/0x690 [ 1657.133728] ? create_new_namespaces+0x30/0xab0 [ 1657.133763] create_new_namespaces+0x30/0xab0 [ 1657.133797] ? security_capable+0x2f/0x90 [ 1657.133844] copy_namespaces+0x45c/0x580 [ 1657.133885] copy_process+0x26d4/0x7410 [ 1657.133929] ? __pfx_perf_trace_lock+0x10/0x10 [ 1657.134008] ? __pfx_copy_process+0x10/0x10 [ 1657.134052] ? __might_fault+0xe0/0x190 [ 1657.134098] ? _copy_from_user+0x5b/0xd0 [ 1657.134155] kernel_clone+0xea/0x7f0 [ 1657.134196] ? get_pid_task+0xfd/0x250 [ 1657.134242] ? __pfx_kernel_clone+0x10/0x10 [ 1657.134282] ? perf_trace_lock+0xb5/0x5d0 [ 1657.134345] ? find_held_lock+0x2b/0x80 [ 1657.134381] ? ksys_write+0x121/0x240 [ 1657.134424] ? lock_is_held_type+0x9e/0x120 [ 1657.134471] __do_sys_clone3+0x1f5/0x280 [ 1657.134517] ? __pfx___do_sys_clone3+0x10/0x10 [ 1657.134560] ? perf_trace_lock+0xb5/0x5d0 [ 1657.134631] ? lock_acquire+0x15e/0x2f0 [ 1657.134684] ? __pfx_perf_trace_lock+0x10/0x10 [ 1657.134734] ? __might_fault+0x138/0x190 [ 1657.134770] ? lock_release+0xc8/0x290 [ 1657.134817] ? __might_fault+0xe0/0x190 [ 1657.134855] ? find_held_lock+0x2b/0x80 [ 1657.134891] ? syscall_trace_enter+0x1cf/0x240 [ 1657.134936] ? lock_release+0xc8/0x290 [ 1657.134989] do_syscall_64+0xbf/0x390 [ 1657.135027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.135061] RIP: 0033:0x7fc56dfaeb19 [ 1657.135087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.135119] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1657.135149] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1657.135174] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1657.135194] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.135214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.135232] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1657.135281] 01:06:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x6200, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x40000}, 0x58) 01:06:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x700000000000000}, 0x58) 01:06:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x6200, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 34) 01:06:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 29) 01:06:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 31) 01:06:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8004, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8004, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xc00000000000000}, 0x58) 01:06:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x80000}, 0x58) 01:06:33 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) [ 1670.130839] FAULT_INJECTION: forcing a failure. [ 1670.130839] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.131814] CPU: 1 UID: 0 PID: 36262 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1670.131831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1670.131839] Call Trace: [ 1670.131844] [ 1670.131850] dump_stack_lvl+0xfa/0x120 [ 1670.131872] should_fail_ex+0x4d7/0x5e0 [ 1670.131894] ? copy_process+0x5a54/0x7410 [ 1670.131909] should_failslab+0xc2/0x120 [ 1670.131928] kmem_cache_alloc_noprof+0x80/0x690 [ 1670.131948] ? copy_process+0x2446/0x7410 [ 1670.131978] ? copy_process+0x5a54/0x7410 [ 1670.131992] copy_process+0x5a54/0x7410 [ 1670.132009] ? __pfx_perf_trace_lock+0x10/0x10 [ 1670.132029] ? perf_tp_event+0x807/0xe70 [ 1670.132067] ? __pfx_copy_process+0x10/0x10 [ 1670.132085] ? __might_fault+0xe0/0x190 [ 1670.132115] ? _copy_from_user+0x5b/0xd0 [ 1670.132142] kernel_clone+0xea/0x7f0 [ 1670.132165] ? __pfx_kernel_clone+0x10/0x10 [ 1670.132196] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1670.132212] ? ksys_write+0x121/0x240 [ 1670.132230] ? lock_is_held_type+0x9e/0x120 [ 1670.132252] __do_sys_clone3+0x1f5/0x280 [ 1670.132269] ? __pfx___do_sys_clone3+0x10/0x10 [ 1670.132283] ? perf_trace_lock+0x337/0x5d0 [ 1670.132328] ? __pfx_perf_trace_lock+0x10/0x10 [ 1670.132347] ? __might_fault+0x138/0x190 [ 1670.132365] ? __might_fault+0xe0/0x190 [ 1670.132380] ? find_held_lock+0x2b/0x80 [ 1670.132395] ? syscall_trace_enter+0x1cf/0x240 [ 1670.132413] ? lock_release+0xc8/0x290 [ 1670.132445] do_syscall_64+0xbf/0x390 [ 1670.132464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.132477] RIP: 0033:0x7f2be6d39b19 [ 1670.132488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.132500] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1670.132512] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1670.132521] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1670.132528] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.132535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1670.132542] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1670.132576] [ 1670.135904] FAULT_INJECTION: forcing a failure. [ 1670.135904] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.173767] CPU: 0 UID: 0 PID: 36261 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1670.173802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1670.173817] Call Trace: [ 1670.173827] [ 1670.173839] dump_stack_lvl+0xfa/0x120 [ 1670.173877] should_fail_ex+0x4d7/0x5e0 [ 1670.173919] ? copy_process+0x2315/0x7410 [ 1670.173948] should_failslab+0xc2/0x120 [ 1670.173982] kmem_cache_alloc_noprof+0x80/0x690 [ 1670.174024] ? do_raw_spin_unlock+0x53/0x220 [ 1670.174086] ? copy_process+0x2315/0x7410 [ 1670.174122] copy_process+0x2315/0x7410 [ 1670.174155] ? __pfx_perf_trace_lock+0x10/0x10 [ 1670.174187] ? perf_tp_event+0x807/0xe70 [ 1670.174256] ? __pfx_copy_process+0x10/0x10 [ 1670.174291] ? __might_fault+0xe0/0x190 [ 1670.174337] ? _copy_from_user+0x5b/0xd0 [ 1670.174388] kernel_clone+0xea/0x7f0 [ 1670.174431] ? __pfx_kernel_clone+0x10/0x10 [ 1670.174490] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1670.174521] ? ksys_write+0x121/0x240 [ 1670.174553] ? lock_is_held_type+0x9e/0x120 [ 1670.174593] __do_sys_clone3+0x1f5/0x280 [ 1670.174627] ? __pfx___do_sys_clone3+0x10/0x10 [ 1670.174655] ? perf_trace_lock+0x337/0x5d0 [ 1670.174744] ? __pfx_perf_trace_lock+0x10/0x10 [ 1670.174781] ? __might_fault+0x138/0x190 [ 1670.174818] ? __might_fault+0xe0/0x190 [ 1670.174848] ? find_held_lock+0x2b/0x80 [ 1670.174876] ? syscall_trace_enter+0x1cf/0x240 [ 1670.174910] ? lock_release+0xc8/0x290 [ 1670.174972] do_syscall_64+0xbf/0x390 [ 1670.175009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.175034] RIP: 0033:0x7ff6d12e7b19 [ 1670.175055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.175078] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1670.175101] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1670.175118] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1670.175133] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.175148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1670.175162] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1670.175229] [ 1670.216876] cgroup: fork rejected by pids controller in /syz2 01:06:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xd00000000000000}, 0x58) 01:06:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 30) 01:06:43 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:06:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xac02, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x101000}, 0x58) 01:06:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 32) 01:06:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x890f, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 35) [ 1679.929693] FAULT_INJECTION: forcing a failure. [ 1679.929693] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.930735] CPU: 1 UID: 0 PID: 36383 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1679.930752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1679.930760] Call Trace: [ 1679.930764] [ 1679.930769] dump_stack_lvl+0xfa/0x120 [ 1679.930789] should_fail_ex+0x4d7/0x5e0 [ 1679.930808] should_failslab+0xc2/0x120 [ 1679.930825] __kmalloc_cache_noprof+0x81/0x6b0 [ 1679.930844] ? __pfx_inc_ucount+0x10/0x10 [ 1679.930859] ? __create_object+0x59/0x80 [ 1679.930878] ? copy_ipcs+0x1a0/0x570 [ 1679.930896] ? copy_mnt_ns+0xac/0xab0 [ 1679.930913] ? copy_ipcs+0x1a0/0x570 [ 1679.930929] copy_ipcs+0x1a0/0x570 [ 1679.930948] create_new_namespaces+0x210/0xab0 [ 1679.930961] ? security_capable+0x2f/0x90 [ 1679.930977] copy_namespaces+0x45c/0x580 [ 1679.930991] copy_process+0x26d4/0x7410 [ 1679.931007] ? __pfx_perf_trace_lock+0x10/0x10 [ 1679.931034] ? __pfx_copy_process+0x10/0x10 [ 1679.931048] ? __might_fault+0xe0/0x190 [ 1679.931064] ? _copy_from_user+0x5b/0xd0 [ 1679.931082] kernel_clone+0xea/0x7f0 [ 1679.931096] ? get_pid_task+0xfd/0x250 [ 1679.931116] ? __pfx_kernel_clone+0x10/0x10 [ 1679.931129] ? perf_trace_lock+0xb5/0x5d0 [ 1679.931150] ? find_held_lock+0x2b/0x80 [ 1679.931163] ? ksys_write+0x121/0x240 [ 1679.931177] ? lock_is_held_type+0x9e/0x120 [ 1679.931193] __do_sys_clone3+0x1f5/0x280 [ 1679.931207] ? __pfx___do_sys_clone3+0x10/0x10 [ 1679.931222] ? perf_trace_lock+0xb5/0x5d0 [ 1679.931245] ? lock_acquire+0x15e/0x2f0 [ 1679.931263] ? __pfx_perf_trace_lock+0x10/0x10 [ 1679.931280] ? __might_fault+0x138/0x190 [ 1679.931292] ? lock_release+0xc8/0x290 [ 1679.931308] ? __might_fault+0xe0/0x190 [ 1679.931320] ? find_held_lock+0x2b/0x80 [ 1679.931332] ? syscall_trace_enter+0x1cf/0x240 [ 1679.931349] ? lock_release+0xc8/0x290 [ 1679.931369] do_syscall_64+0xbf/0x390 [ 1679.931385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.931397] RIP: 0033:0x7fc56dfaeb19 [ 1679.931408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1679.931420] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1679.931432] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1679.931440] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1679.931448] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1679.931455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1679.931462] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1679.931479] 01:06:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xec03, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xba0f, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 36) 01:06:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2000000000000000}, 0x58) 01:06:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x104000}, 0x58) 01:06:43 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:06:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff03, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3f00000000000000}, 0x58) 01:06:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xbe03, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 31) 01:06:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 33) 01:06:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x401000}, 0x58) [ 1680.301432] FAULT_INJECTION: forcing a failure. [ 1680.301432] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.302403] CPU: 1 UID: 0 PID: 36535 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1680.302420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1680.302428] Call Trace: [ 1680.302433] [ 1680.302438] dump_stack_lvl+0xfa/0x120 [ 1680.302460] should_fail_ex+0x4d7/0x5e0 [ 1680.302483] should_failslab+0xc2/0x120 [ 1680.302501] __kvmalloc_node_noprof+0x11f/0x770 [ 1680.302522] ? alloc_fdtable+0x163/0x2d0 [ 1680.302546] ? alloc_fdtable+0x163/0x2d0 [ 1680.302557] alloc_fdtable+0x163/0x2d0 [ 1680.302575] dup_fd+0x6ef/0xa80 [ 1680.302601] copy_process+0x21b4/0x7410 [ 1680.302619] ? __pfx_perf_trace_lock+0x10/0x10 [ 1680.302637] ? perf_tp_event+0x807/0xe70 [ 1680.302671] ? __pfx_copy_process+0x10/0x10 [ 1680.302689] ? __might_fault+0xe0/0x190 [ 1680.302714] ? _copy_from_user+0x5b/0xd0 [ 1680.302742] kernel_clone+0xea/0x7f0 [ 1680.302765] ? __pfx_kernel_clone+0x10/0x10 [ 1680.302796] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1680.302812] ? ksys_write+0x121/0x240 [ 1680.302828] ? lock_is_held_type+0x9e/0x120 [ 1680.302851] __do_sys_clone3+0x1f5/0x280 [ 1680.302868] ? __pfx___do_sys_clone3+0x10/0x10 [ 1680.302882] ? perf_trace_lock+0x337/0x5d0 [ 1680.302932] ? __pfx_perf_trace_lock+0x10/0x10 [ 1680.302951] ? __might_fault+0x138/0x190 [ 1680.302971] ? __might_fault+0xe0/0x190 [ 1680.302985] ? find_held_lock+0x2b/0x80 [ 1680.303000] ? syscall_trace_enter+0x1cf/0x240 [ 1680.303018] ? lock_release+0xc8/0x290 [ 1680.303053] do_syscall_64+0xbf/0x390 [ 1680.303073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.303087] RIP: 0033:0x7ff6d12e7b19 [ 1680.303097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1680.303114] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1680.303126] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1680.303134] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1680.303142] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1680.303149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1680.303156] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1680.303193] 01:06:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4000000000000000}, 0x58) 01:06:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x5801000000000000}, 0x58) 01:06:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff03, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff0f, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:06:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 34) 01:06:57 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x0, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:06:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x5e00000000000000}, 0x58) 01:06:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 32) 01:06:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x1000000}, 0x58) 01:06:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 37) 01:06:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff0f, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1693.931352] FAULT_INJECTION: forcing a failure. [ 1693.931352] name failslab, interval 1, probability 0, space 0, times 0 [ 1693.933408] CPU: 1 UID: 0 PID: 36650 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1693.933445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1693.933460] Call Trace: [ 1693.933470] [ 1693.933480] dump_stack_lvl+0xfa/0x120 [ 1693.933516] should_fail_ex+0x4d7/0x5e0 [ 1693.933551] should_failslab+0xc2/0x120 [ 1693.933586] __kmalloc_cache_noprof+0x81/0x6b0 [ 1693.933626] ? __pfx_ida_alloc_range+0x10/0x10 [ 1693.933654] ? alloc_fs_context+0x58/0x9e0 [ 1693.933690] ? alloc_fs_context+0x58/0x9e0 [ 1693.933717] alloc_fs_context+0x58/0x9e0 [ 1693.933744] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 1693.933789] mq_init_ns+0x172/0x630 [ 1693.933830] copy_ipcs+0x2dd/0x570 [ 1693.933871] create_new_namespaces+0x210/0xab0 [ 1693.933899] ? security_capable+0x2f/0x90 [ 1693.933931] copy_namespaces+0x45c/0x580 [ 1693.933960] copy_process+0x26d4/0x7410 [ 1693.933992] ? __pfx_perf_trace_lock+0x10/0x10 [ 1693.934046] ? __pfx_copy_process+0x10/0x10 [ 1693.934078] ? __might_fault+0xe0/0x190 [ 1693.934120] ? _copy_from_user+0x5b/0xd0 [ 1693.934157] kernel_clone+0xea/0x7f0 [ 1693.934187] ? get_pid_task+0xfd/0x250 [ 1693.934220] ? __pfx_kernel_clone+0x10/0x10 [ 1693.934249] ? perf_trace_lock+0xb5/0x5d0 [ 1693.934295] ? find_held_lock+0x2b/0x80 [ 1693.934321] ? ksys_write+0x121/0x240 [ 1693.934352] ? lock_is_held_type+0x9e/0x120 [ 1693.934385] __do_sys_clone3+0x1f5/0x280 [ 1693.934417] ? __pfx___do_sys_clone3+0x10/0x10 [ 1693.934450] ? perf_trace_lock+0xb5/0x5d0 [ 1693.934500] ? lock_acquire+0x15e/0x2f0 [ 1693.934537] ? __pfx_perf_trace_lock+0x10/0x10 [ 1693.934574] ? __might_fault+0x138/0x190 [ 1693.934600] ? lock_release+0xc8/0x290 [ 1693.934635] ? __might_fault+0xe0/0x190 [ 1693.934662] ? find_held_lock+0x2b/0x80 [ 1693.934689] ? syscall_trace_enter+0x1cf/0x240 [ 1693.934722] ? lock_release+0xc8/0x290 [ 1693.934767] do_syscall_64+0xbf/0x390 [ 1693.934800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.934826] RIP: 0033:0x7fc56dfaeb19 [ 1693.934847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1693.934873] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1693.934898] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1693.934916] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1693.934932] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1693.934948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1693.934964] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1693.935002] 01:07:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 35) 01:07:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 33) 01:07:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x20200, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x20200, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2000000}, 0x58) 01:07:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6200000000000000}, 0x58) 01:07:09 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x0, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:07:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 38) [ 1705.174395] FAULT_INJECTION: forcing a failure. [ 1705.174395] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.175385] CPU: 1 UID: 0 PID: 36765 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1705.175402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.175410] Call Trace: [ 1705.175416] [ 1705.175422] dump_stack_lvl+0xfa/0x120 [ 1705.175444] should_fail_ex+0x4d7/0x5e0 [ 1705.175467] ? create_new_namespaces+0x30/0xab0 [ 1705.175480] should_failslab+0xc2/0x120 [ 1705.175499] kmem_cache_alloc_noprof+0x80/0x690 [ 1705.175536] ? create_new_namespaces+0x30/0xab0 [ 1705.175548] create_new_namespaces+0x30/0xab0 [ 1705.175564] ? security_capable+0x2f/0x90 [ 1705.175590] copy_namespaces+0x45c/0x580 [ 1705.175610] copy_process+0x26d4/0x7410 [ 1705.175630] ? __pfx_perf_trace_lock+0x10/0x10 [ 1705.175647] ? perf_tp_event+0x807/0xe70 [ 1705.175686] ? __pfx_copy_process+0x10/0x10 [ 1705.175704] ? __might_fault+0xe0/0x190 [ 1705.175730] ? _copy_from_user+0x5b/0xd0 [ 1705.175758] kernel_clone+0xea/0x7f0 [ 1705.175781] ? __pfx_kernel_clone+0x10/0x10 [ 1705.175813] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1705.175828] ? ksys_write+0x121/0x240 [ 1705.175846] ? lock_is_held_type+0x9e/0x120 [ 1705.175870] __do_sys_clone3+0x1f5/0x280 [ 1705.175887] ? __pfx___do_sys_clone3+0x10/0x10 [ 1705.175901] ? perf_trace_lock+0x337/0x5d0 [ 1705.175948] ? __pfx_perf_trace_lock+0x10/0x10 [ 1705.175966] ? __might_fault+0x138/0x190 [ 1705.175985] ? __might_fault+0xe0/0x190 [ 1705.176000] ? find_held_lock+0x2b/0x80 [ 1705.176015] ? syscall_trace_enter+0x1cf/0x240 [ 1705.176034] ? lock_release+0xc8/0x290 [ 1705.176070] do_syscall_64+0xbf/0x390 [ 1705.176090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.176104] RIP: 0033:0x7ff6d12e7b19 [ 1705.176118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.176131] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1705.176143] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1705.176152] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1705.176159] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.176167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.176174] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1705.176212] [ 1705.197469] FAULT_INJECTION: forcing a failure. [ 1705.197469] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.198405] CPU: 1 UID: 0 PID: 36768 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1705.198422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.198430] Call Trace: [ 1705.198435] [ 1705.198442] dump_stack_lvl+0xfa/0x120 [ 1705.198460] should_fail_ex+0x4d7/0x5e0 [ 1705.198484] should_failslab+0xc2/0x120 [ 1705.198503] __kmalloc_cache_noprof+0x81/0x6b0 [ 1705.198524] ? __pfx_inc_ucount+0x10/0x10 [ 1705.198540] ? __create_object+0x59/0x80 [ 1705.198561] ? copy_ipcs+0x1a0/0x570 [ 1705.198583] ? copy_mnt_ns+0xac/0xab0 [ 1705.198608] ? copy_ipcs+0x1a0/0x570 [ 1705.198626] copy_ipcs+0x1a0/0x570 [ 1705.198654] create_new_namespaces+0x210/0xab0 [ 1705.198670] ? security_capable+0x2f/0x90 [ 1705.198694] copy_namespaces+0x45c/0x580 [ 1705.198716] copy_process+0x26d4/0x7410 [ 1705.198735] ? __pfx_perf_trace_lock+0x10/0x10 [ 1705.198752] ? perf_tp_event+0x807/0xe70 [ 1705.198790] ? __pfx_copy_process+0x10/0x10 [ 1705.198808] ? __might_fault+0xe0/0x190 [ 1705.198832] ? _copy_from_user+0x5b/0xd0 [ 1705.198860] kernel_clone+0xea/0x7f0 [ 1705.198883] ? __pfx_kernel_clone+0x10/0x10 [ 1705.198915] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1705.198932] ? ksys_write+0x121/0x240 [ 1705.198949] ? lock_is_held_type+0x9e/0x120 [ 1705.198972] __do_sys_clone3+0x1f5/0x280 [ 1705.198992] ? __pfx___do_sys_clone3+0x10/0x10 [ 1705.199007] ? perf_trace_lock+0x337/0x5d0 [ 1705.199061] ? __pfx_perf_trace_lock+0x10/0x10 [ 1705.199080] ? __might_fault+0x138/0x190 [ 1705.199100] ? __might_fault+0xe0/0x190 [ 1705.199122] ? find_held_lock+0x2b/0x80 [ 1705.199136] ? syscall_trace_enter+0x1cf/0x240 [ 1705.199153] ? lock_release+0xc8/0x290 [ 1705.199189] do_syscall_64+0xbf/0x390 [ 1705.199208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.199221] RIP: 0033:0x7f2be6d39b19 [ 1705.199232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.199244] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1705.199256] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1705.199265] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1705.199272] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.199281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.199288] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1705.199328] 01:07:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 34) 01:07:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3ffff, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 36) 01:07:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3ffff, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6401000000000000}, 0x58) 01:07:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3000000}, 0x58) 01:07:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 39) 01:07:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6701000000000000}, 0x58) 01:07:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x40000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4000000}, 0x58) [ 1705.557487] FAULT_INJECTION: forcing a failure. [ 1705.557487] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.559498] CPU: 0 UID: 0 PID: 36894 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1705.559529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.559543] Call Trace: [ 1705.559552] [ 1705.559563] dump_stack_lvl+0xfa/0x120 [ 1705.559598] should_fail_ex+0x4d7/0x5e0 [ 1705.559639] should_failslab+0xc2/0x120 [ 1705.559672] __kmalloc_cache_noprof+0x81/0x6b0 [ 1705.559705] ? __create_object+0x59/0x80 [ 1705.559746] ? mqueue_init_fs_context+0x4b/0x480 [ 1705.559775] ? trace_kmalloc+0x1f/0xb0 [ 1705.559818] ? mqueue_init_fs_context+0x4b/0x480 [ 1705.559845] ? lockdep_init_map_type+0x4b/0x240 [ 1705.559878] mqueue_init_fs_context+0x4b/0x480 [ 1705.559907] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 1705.559946] alloc_fs_context+0x570/0x9e0 [ 1705.559995] mq_init_ns+0x172/0x630 [ 1705.560040] copy_ipcs+0x2dd/0x570 [ 1705.560085] create_new_namespaces+0x210/0xab0 [ 1705.560121] ? security_capable+0x2f/0x90 [ 1705.560162] copy_namespaces+0x45c/0x580 [ 1705.560196] copy_process+0x26d4/0x7410 [ 1705.560227] ? __pfx_perf_trace_lock+0x10/0x10 [ 1705.560258] ? perf_tp_event+0x807/0xe70 [ 1705.560320] ? __pfx_copy_process+0x10/0x10 [ 1705.560352] ? __might_fault+0xe0/0x190 [ 1705.560394] ? _copy_from_user+0x5b/0xd0 [ 1705.560440] kernel_clone+0xea/0x7f0 [ 1705.560478] ? __pfx_kernel_clone+0x10/0x10 [ 1705.560530] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1705.560558] ? ksys_write+0x121/0x240 [ 1705.560586] ? lock_is_held_type+0x9e/0x120 [ 1705.560625] __do_sys_clone3+0x1f5/0x280 [ 1705.560655] ? __pfx___do_sys_clone3+0x10/0x10 [ 1705.560681] ? perf_trace_lock+0x337/0x5d0 [ 1705.560767] ? __pfx_perf_trace_lock+0x10/0x10 [ 1705.560802] ? __might_fault+0x138/0x190 [ 1705.560837] ? __might_fault+0xe0/0x190 [ 1705.560864] ? find_held_lock+0x2b/0x80 [ 1705.560890] ? syscall_trace_enter+0x1cf/0x240 [ 1705.560922] ? lock_release+0xc8/0x290 [ 1705.560980] do_syscall_64+0xbf/0x390 [ 1705.561013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.561037] RIP: 0033:0x7fc56dfaeb19 [ 1705.561056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.561077] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1705.561099] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1705.561115] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1705.561128] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.561142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.561156] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1705.561218] 01:07:09 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x0, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:07:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x5000000}, 0x58) 01:07:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8004000000000000}, 0x58) 01:07:19 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x0, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:07:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 35) 01:07:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x80000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 40) 01:07:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 37) 01:07:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x40000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1715.909946] FAULT_INJECTION: forcing a failure. [ 1715.909946] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.911492] CPU: 1 UID: 0 PID: 37018 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1715.911517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.911529] Call Trace: [ 1715.911536] [ 1715.911544] dump_stack_lvl+0xfa/0x120 [ 1715.911574] should_fail_ex+0x4d7/0x5e0 [ 1715.911609] should_failslab+0xc2/0x120 [ 1715.911637] __kmalloc_cache_noprof+0x81/0x6b0 [ 1715.911666] ? __pfx_inc_ucount+0x10/0x10 [ 1715.911687] ? __create_object+0x59/0x80 [ 1715.911717] ? copy_ipcs+0x1a0/0x570 [ 1715.911746] ? copy_mnt_ns+0xac/0xab0 [ 1715.911780] ? copy_ipcs+0x1a0/0x570 [ 1715.911806] copy_ipcs+0x1a0/0x570 [ 1715.911843] create_new_namespaces+0x210/0xab0 [ 1715.911866] ? security_capable+0x2f/0x90 [ 1715.911902] copy_namespaces+0x45c/0x580 [ 1715.911931] copy_process+0x26d4/0x7410 [ 1715.911957] ? __pfx_perf_trace_lock+0x10/0x10 [ 1715.911982] ? perf_tp_event+0x807/0xe70 [ 1715.912036] ? __pfx_copy_process+0x10/0x10 [ 1715.912063] ? __might_fault+0xe0/0x190 [ 1715.912099] ? _copy_from_user+0x5b/0xd0 [ 1715.912144] kernel_clone+0xea/0x7f0 [ 1715.912177] ? __pfx_kernel_clone+0x10/0x10 [ 1715.912222] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1715.912245] ? ksys_write+0x121/0x240 [ 1715.912269] ? lock_is_held_type+0x9e/0x120 [ 1715.912302] __do_sys_clone3+0x1f5/0x280 [ 1715.912327] ? __pfx___do_sys_clone3+0x10/0x10 [ 1715.912349] ? perf_trace_lock+0x337/0x5d0 [ 1715.912421] ? __pfx_perf_trace_lock+0x10/0x10 [ 1715.912448] ? __might_fault+0x138/0x190 [ 1715.912478] ? __might_fault+0xe0/0x190 [ 1715.912500] ? find_held_lock+0x2b/0x80 [ 1715.912521] ? syscall_trace_enter+0x1cf/0x240 [ 1715.912548] ? lock_release+0xc8/0x290 [ 1715.912598] do_syscall_64+0xbf/0x390 [ 1715.912626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.912646] RIP: 0033:0x7ff6d12e7b19 [ 1715.912661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.912678] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1715.912696] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1715.912708] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1715.912720] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1715.912731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1715.912742] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1715.912797] [ 1715.946929] FAULT_INJECTION: forcing a failure. [ 1715.946929] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.949102] CPU: 0 UID: 0 PID: 37023 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1715.949141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.949155] Call Trace: [ 1715.949165] [ 1715.949176] dump_stack_lvl+0xfa/0x120 [ 1715.949214] should_fail_ex+0x4d7/0x5e0 [ 1715.949257] should_failslab+0xc2/0x120 [ 1715.949292] __kmalloc_cache_noprof+0x81/0x6b0 [ 1715.949335] ? __pfx_ida_alloc_range+0x10/0x10 [ 1715.949372] ? alloc_fs_context+0x58/0x9e0 [ 1715.949418] ? alloc_fs_context+0x58/0x9e0 [ 1715.949444] alloc_fs_context+0x58/0x9e0 [ 1715.949470] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 1715.949524] mq_init_ns+0x172/0x630 [ 1715.949571] copy_ipcs+0x2dd/0x570 [ 1715.949618] create_new_namespaces+0x210/0xab0 [ 1715.949648] ? security_capable+0x2f/0x90 [ 1715.949690] copy_namespaces+0x45c/0x580 [ 1715.949726] copy_process+0x26d4/0x7410 [ 1715.949759] ? __pfx_perf_trace_lock+0x10/0x10 [ 1715.949792] ? perf_tp_event+0x807/0xe70 [ 1715.949856] ? __pfx_copy_process+0x10/0x10 [ 1715.949889] ? __might_fault+0xe0/0x190 [ 1715.949932] ? _copy_from_user+0x5b/0xd0 [ 1715.949980] kernel_clone+0xea/0x7f0 [ 1715.950021] ? __pfx_kernel_clone+0x10/0x10 [ 1715.950075] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1715.950105] ? ksys_write+0x121/0x240 [ 1715.950135] ? lock_is_held_type+0x9e/0x120 [ 1715.950175] __do_sys_clone3+0x1f5/0x280 [ 1715.950207] ? __pfx___do_sys_clone3+0x10/0x10 [ 1715.950234] ? perf_trace_lock+0x337/0x5d0 [ 1715.950321] ? __pfx_perf_trace_lock+0x10/0x10 [ 1715.950356] ? __might_fault+0x138/0x190 [ 1715.950392] ? __might_fault+0xe0/0x190 [ 1715.950420] ? find_held_lock+0x2b/0x80 [ 1715.950448] ? syscall_trace_enter+0x1cf/0x240 [ 1715.950481] ? lock_release+0xc8/0x290 [ 1715.950542] do_syscall_64+0xbf/0x390 [ 1715.950578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.950602] RIP: 0033:0x7f2be6d39b19 [ 1715.950623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.950646] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1715.950669] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1715.950685] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1715.950699] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1715.950713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1715.950727] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1715.950791] 01:07:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x101000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xc800000000000000}, 0x58) 01:07:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6000000}, 0x58) 01:07:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 41) 01:07:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 36) 01:07:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x80000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6030000}, 0x58) [ 1716.212086] FAULT_INJECTION: forcing a failure. [ 1716.212086] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.213671] CPU: 1 UID: 0 PID: 37036 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1716.213697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.213708] Call Trace: [ 1716.213715] [ 1716.213723] dump_stack_lvl+0xfa/0x120 [ 1716.213749] should_fail_ex+0x4d7/0x5e0 [ 1716.213774] should_failslab+0xc2/0x120 [ 1716.213798] __kmalloc_cache_noprof+0x81/0x6b0 [ 1716.213825] ? __pfx_perf_trace_lock+0x10/0x10 [ 1716.213853] ? alloc_super+0x53/0xb20 [ 1716.213878] ? alloc_super+0x53/0xb20 [ 1716.213896] alloc_super+0x53/0xb20 [ 1716.213914] ? lock_release+0xc8/0x290 [ 1716.213944] sget_fc+0xfe/0xb80 [ 1716.213964] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1716.213983] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1716.214006] get_tree_nodev+0x28/0x190 [ 1716.214028] mqueue_get_tree+0xf6/0x140 [ 1716.214050] vfs_get_tree+0x93/0x340 [ 1716.214079] fc_mount_longterm+0x1a/0x280 [ 1716.214115] mq_init_ns+0x42e/0x630 [ 1716.214144] copy_ipcs+0x2dd/0x570 [ 1716.214172] create_new_namespaces+0x210/0xab0 [ 1716.214192] ? security_capable+0x2f/0x90 [ 1716.214215] copy_namespaces+0x45c/0x580 [ 1716.214236] copy_process+0x26d4/0x7410 [ 1716.214259] ? __pfx_perf_trace_lock+0x10/0x10 [ 1716.214296] ? __pfx_copy_process+0x10/0x10 [ 1716.214319] ? __might_fault+0xe0/0x190 [ 1716.214342] ? _copy_from_user+0x5b/0xd0 [ 1716.214369] kernel_clone+0xea/0x7f0 [ 1716.214393] ? __pfx_kernel_clone+0x10/0x10 [ 1716.214414] ? perf_trace_lock+0xb5/0x5d0 [ 1716.214445] ? find_held_lock+0x2b/0x80 [ 1716.214464] ? ksys_write+0x121/0x240 [ 1716.214485] ? lock_is_held_type+0x9e/0x120 [ 1716.214508] __do_sys_clone3+0x1f5/0x280 [ 1716.214531] ? __pfx___do_sys_clone3+0x10/0x10 [ 1716.214554] ? perf_trace_lock+0xb5/0x5d0 [ 1716.214589] ? lock_acquire+0x15e/0x2f0 [ 1716.214614] ? __pfx_perf_trace_lock+0x10/0x10 [ 1716.214640] ? __might_fault+0x138/0x190 [ 1716.214658] ? lock_release+0xc8/0x290 [ 1716.214682] ? __might_fault+0xe0/0x190 [ 1716.214701] ? find_held_lock+0x2b/0x80 [ 1716.214720] ? syscall_trace_enter+0x1cf/0x240 [ 1716.214744] ? lock_release+0xc8/0x290 [ 1716.214776] do_syscall_64+0xbf/0x390 [ 1716.214799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.214818] RIP: 0033:0x7fc56dfaeb19 [ 1716.214833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.214851] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1716.214868] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1716.214881] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1716.214892] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.214903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1716.214914] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1716.214940] 01:07:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x104000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 38) 01:07:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7000000}, 0x58) 01:07:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xda01000000000000}, 0x58) 01:07:20 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x0, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:07:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 42) 01:07:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x101000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xe000000}, 0x58) 01:07:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x401000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x10000000}, 0x58) 01:07:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 37) 01:07:31 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x0, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:07:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 43) 01:07:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x20000000}, 0x58) 01:07:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xef01000000000000}, 0x58) 01:07:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x104000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x1000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 39) [ 1727.716874] FAULT_INJECTION: forcing a failure. [ 1727.716874] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.718816] CPU: 1 UID: 0 PID: 37176 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1727.718849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.718863] Call Trace: [ 1727.718872] [ 1727.718884] dump_stack_lvl+0xfa/0x120 [ 1727.718920] should_fail_ex+0x4d7/0x5e0 [ 1727.718965] should_failslab+0xc2/0x120 [ 1727.719001] __kmalloc_cache_noprof+0x81/0x6b0 [ 1727.719046] ? __pfx_ida_alloc_range+0x10/0x10 [ 1727.719072] ? alloc_fs_context+0x58/0x9e0 [ 1727.719128] ? alloc_fs_context+0x58/0x9e0 [ 1727.719155] alloc_fs_context+0x58/0x9e0 [ 1727.719183] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 1727.719239] mq_init_ns+0x172/0x630 [ 1727.719290] copy_ipcs+0x2dd/0x570 [ 1727.719339] create_new_namespaces+0x210/0xab0 [ 1727.719369] ? security_capable+0x2f/0x90 [ 1727.719414] copy_namespaces+0x45c/0x580 [ 1727.719451] copy_process+0x26d4/0x7410 [ 1727.719485] ? __pfx_perf_trace_lock+0x10/0x10 [ 1727.719520] ? perf_tp_event+0x807/0xe70 [ 1727.719587] ? __pfx_copy_process+0x10/0x10 [ 1727.719621] ? __might_fault+0xe0/0x190 [ 1727.719666] ? _copy_from_user+0x5b/0xd0 [ 1727.719715] kernel_clone+0xea/0x7f0 [ 1727.719757] ? __pfx_kernel_clone+0x10/0x10 [ 1727.719814] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1727.719845] ? ksys_write+0x121/0x240 [ 1727.719877] ? lock_is_held_type+0x9e/0x120 [ 1727.719918] __do_sys_clone3+0x1f5/0x280 [ 1727.719951] ? __pfx___do_sys_clone3+0x10/0x10 [ 1727.719979] ? perf_trace_lock+0x337/0x5d0 [ 1727.720071] ? __pfx_perf_trace_lock+0x10/0x10 [ 1727.720108] ? __might_fault+0x138/0x190 [ 1727.720146] ? __might_fault+0xe0/0x190 [ 1727.720175] ? find_held_lock+0x2b/0x80 [ 1727.720204] ? syscall_trace_enter+0x1cf/0x240 [ 1727.720239] ? lock_release+0xc8/0x290 [ 1727.720302] do_syscall_64+0xbf/0x390 [ 1727.720339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.720365] RIP: 0033:0x7ff6d12e7b19 [ 1727.720385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.720409] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1727.720432] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1727.720449] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1727.720464] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.720478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.720492] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1727.720559] [ 1727.822362] FAULT_INJECTION: forcing a failure. [ 1727.822362] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.824313] CPU: 0 UID: 0 PID: 37185 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1727.824346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.824361] Call Trace: [ 1727.824371] [ 1727.824382] dump_stack_lvl+0xfa/0x120 [ 1727.824420] should_fail_ex+0x4d7/0x5e0 [ 1727.824465] should_failslab+0xc2/0x120 [ 1727.824501] __kmalloc_cache_noprof+0x81/0x6b0 [ 1727.824536] ? __create_object+0x59/0x80 [ 1727.824580] ? mqueue_init_fs_context+0x4b/0x480 [ 1727.824611] ? trace_kmalloc+0x1f/0xb0 [ 1727.824657] ? mqueue_init_fs_context+0x4b/0x480 [ 1727.824686] ? lockdep_init_map_type+0x4b/0x240 [ 1727.824723] mqueue_init_fs_context+0x4b/0x480 [ 1727.824756] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 1727.824798] alloc_fs_context+0x570/0x9e0 [ 1727.824852] mq_init_ns+0x172/0x630 [ 1727.824900] copy_ipcs+0x2dd/0x570 [ 1727.824949] create_new_namespaces+0x210/0xab0 [ 1727.824978] ? security_capable+0x2f/0x90 [ 1727.825023] copy_namespaces+0x45c/0x580 [ 1727.825059] copy_process+0x26d4/0x7410 [ 1727.825094] ? __pfx_perf_trace_lock+0x10/0x10 [ 1727.825135] ? perf_tp_event+0x807/0xe70 [ 1727.825201] ? __pfx_copy_process+0x10/0x10 [ 1727.825261] ? copy_clone_args_from_user+0x309/0x7a0 [ 1727.825308] kernel_clone+0xea/0x7f0 [ 1727.825350] ? __pfx_kernel_clone+0x10/0x10 [ 1727.825406] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1727.825437] ? ksys_write+0x121/0x240 [ 1727.825482] ? lock_is_held_type+0x9e/0x120 [ 1727.825523] __do_sys_clone3+0x1f5/0x280 [ 1727.825556] ? __pfx___do_sys_clone3+0x10/0x10 [ 1727.825584] ? perf_trace_lock+0x337/0x5d0 [ 1727.825672] ? __pfx_perf_trace_lock+0x10/0x10 [ 1727.825709] ? __might_fault+0x138/0x190 [ 1727.825747] ? __might_fault+0xe0/0x190 [ 1727.825776] ? find_held_lock+0x2b/0x80 [ 1727.825804] ? syscall_trace_enter+0x1cf/0x240 [ 1727.825839] ? lock_release+0xc8/0x290 [ 1727.825900] do_syscall_64+0xbf/0x390 [ 1727.825936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.825962] RIP: 0033:0x7f2be6d39b19 [ 1727.825983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.826006] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1727.826030] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1727.826046] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1727.826061] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 01:07:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xfeffffff00000000}, 0x58) [ 1727.826076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.826090] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1727.826156] [ 1727.828431] FAULT_INJECTION: forcing a failure. [ 1727.828431] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.869575] CPU: 1 UID: 0 PID: 37187 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1727.869619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.869635] Call Trace: [ 1727.869647] [ 1727.869658] dump_stack_lvl+0xfa/0x120 [ 1727.869693] should_fail_ex+0x4d7/0x5e0 [ 1727.869728] should_failslab+0xc2/0x120 [ 1727.869761] __kmalloc_noprof+0xcd/0x680 [ 1727.869799] ? down_write_nested+0x11d/0x1f0 [ 1727.869839] ? security_sb_alloc+0xe3/0x140 [ 1727.869864] ? lockdep_init_map_type+0x4b/0x240 [ 1727.869907] security_sb_alloc+0xe3/0x140 [ 1727.869934] alloc_super+0x1e9/0xb20 [ 1727.869962] ? lock_release+0xc8/0x290 [ 1727.870004] sget_fc+0xfe/0xb80 [ 1727.870031] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1727.870060] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1727.870091] get_tree_nodev+0x28/0x190 [ 1727.870130] mqueue_get_tree+0xf6/0x140 [ 1727.870162] vfs_get_tree+0x93/0x340 [ 1727.870202] fc_mount_longterm+0x1a/0x280 [ 1727.870243] mq_init_ns+0x42e/0x630 [ 1727.870283] copy_ipcs+0x2dd/0x570 [ 1727.870322] create_new_namespaces+0x210/0xab0 [ 1727.870350] ? security_capable+0x2f/0x90 [ 1727.870380] copy_namespaces+0x45c/0x580 [ 1727.870410] copy_process+0x26d4/0x7410 [ 1727.870442] ? __pfx_perf_trace_lock+0x10/0x10 [ 1727.870475] ? perf_tp_event+0x807/0xe70 [ 1727.870516] ? __pfx_copy_process+0x10/0x10 [ 1727.870547] ? __might_fault+0xe0/0x190 [ 1727.870580] ? _copy_from_user+0x5b/0xd0 [ 1727.870617] kernel_clone+0xea/0x7f0 [ 1727.870651] ? __pfx_kernel_clone+0x10/0x10 [ 1727.870691] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1727.870719] ? ksys_write+0x121/0x240 [ 1727.870747] ? lock_is_held_type+0x9e/0x120 [ 1727.870779] __do_sys_clone3+0x1f5/0x280 [ 1727.870810] ? __pfx___do_sys_clone3+0x10/0x10 [ 1727.870839] ? perf_trace_lock+0x337/0x5d0 [ 1727.870895] ? __pfx_perf_trace_lock+0x10/0x10 [ 1727.870930] ? __might_fault+0x138/0x190 [ 1727.870959] ? __might_fault+0xe0/0x190 [ 1727.870985] ? find_held_lock+0x2b/0x80 [ 1727.871011] ? syscall_trace_enter+0x1cf/0x240 [ 1727.871044] ? lock_release+0xc8/0x290 [ 1727.871088] do_syscall_64+0xbf/0x390 [ 1727.871121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.871147] RIP: 0033:0x7fc56dfaeb19 [ 1727.871170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.871194] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1727.871219] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1727.871237] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1727.871252] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.871268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.871283] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1727.871321] 01:07:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 40) 01:07:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 38) 01:07:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x401000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1728.121751] FAULT_INJECTION: forcing a failure. [ 1728.121751] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.123862] CPU: 0 UID: 0 PID: 37332 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1728.123896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1728.123910] Call Trace: [ 1728.123919] [ 1728.123930] dump_stack_lvl+0xfa/0x120 [ 1728.123968] should_fail_ex+0x4d7/0x5e0 [ 1728.124012] should_failslab+0xc2/0x120 [ 1728.124047] __kmalloc_cache_noprof+0x81/0x6b0 [ 1728.124092] ? __pfx_ida_alloc_range+0x10/0x10 [ 1728.124124] ? alloc_fs_context+0x58/0x9e0 [ 1728.124172] ? alloc_fs_context+0x58/0x9e0 [ 1728.124199] alloc_fs_context+0x58/0x9e0 [ 1728.124226] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 1728.124282] mq_init_ns+0x172/0x630 [ 1728.124331] copy_ipcs+0x2dd/0x570 [ 1728.124379] create_new_namespaces+0x210/0xab0 [ 1728.124409] ? security_capable+0x2f/0x90 [ 1728.124453] copy_namespaces+0x45c/0x580 [ 1728.124490] copy_process+0x26d4/0x7410 [ 1728.124524] ? __pfx_perf_trace_lock+0x10/0x10 [ 1728.124557] ? perf_tp_event+0x807/0xe70 [ 1728.124623] ? __pfx_copy_process+0x10/0x10 [ 1728.124658] ? __might_fault+0xe0/0x190 [ 1728.124703] ? _copy_from_user+0x5b/0xd0 [ 1728.124752] kernel_clone+0xea/0x7f0 [ 1728.124795] ? __pfx_kernel_clone+0x10/0x10 [ 1728.124857] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1728.124888] ? ksys_write+0x121/0x240 [ 1728.124919] ? lock_is_held_type+0x9e/0x120 [ 1728.124960] __do_sys_clone3+0x1f5/0x280 [ 1728.124993] ? __pfx___do_sys_clone3+0x10/0x10 [ 1728.125021] ? perf_trace_lock+0x337/0x5d0 [ 1728.125111] ? __pfx_perf_trace_lock+0x10/0x10 [ 1728.125148] ? __might_fault+0x138/0x190 [ 1728.125185] ? __might_fault+0xe0/0x190 [ 1728.125214] ? find_held_lock+0x2b/0x80 [ 1728.125243] ? syscall_trace_enter+0x1cf/0x240 [ 1728.125279] ? lock_release+0xc8/0x290 [ 1728.125343] do_syscall_64+0xbf/0x390 [ 1728.125379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.125405] RIP: 0033:0x7f2be6d39b19 [ 1728.125426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.125449] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1728.125486] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1728.125503] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1728.125518] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.125533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1728.125547] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1728.125614] 01:07:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3b9ac9ff}, 0x58) 01:07:44 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x0, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:07:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x1000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 44) 01:07:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff03000000000000}, 0x58) 01:07:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 41) 01:07:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 39) 01:07:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3f000000}, 0x58) 01:07:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff0f000000000000}, 0x58) [ 1740.537916] FAULT_INJECTION: forcing a failure. [ 1740.537916] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.539191] CPU: 1 UID: 0 PID: 37421 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1740.539210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.539218] Call Trace: [ 1740.539224] [ 1740.539230] dump_stack_lvl+0xfa/0x120 [ 1740.539254] should_fail_ex+0x4d7/0x5e0 [ 1740.539279] should_failslab+0xc2/0x120 [ 1740.539299] __kmalloc_cache_noprof+0x81/0x6b0 [ 1740.539318] ? __create_object+0x59/0x80 [ 1740.539343] ? mqueue_init_fs_context+0x4b/0x480 [ 1740.539360] ? trace_kmalloc+0x1f/0xb0 [ 1740.539385] ? mqueue_init_fs_context+0x4b/0x480 [ 1740.539400] ? lockdep_init_map_type+0x4b/0x240 [ 1740.539420] mqueue_init_fs_context+0x4b/0x480 [ 1740.539437] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 1740.539459] alloc_fs_context+0x570/0x9e0 [ 1740.539489] mq_init_ns+0x172/0x630 [ 1740.539516] copy_ipcs+0x2dd/0x570 [ 1740.539542] create_new_namespaces+0x210/0xab0 [ 1740.539558] ? security_capable+0x2f/0x90 [ 1740.539582] copy_namespaces+0x45c/0x580 [ 1740.539602] copy_process+0x26d4/0x7410 [ 1740.539621] ? __pfx_perf_trace_lock+0x10/0x10 [ 1740.539639] ? perf_tp_event+0x807/0xe70 [ 1740.539677] ? __pfx_copy_process+0x10/0x10 [ 1740.539696] ? __might_fault+0xe0/0x190 [ 1740.539720] ? _copy_from_user+0x5b/0xd0 [ 1740.539747] kernel_clone+0xea/0x7f0 [ 1740.539769] ? __pfx_kernel_clone+0x10/0x10 [ 1740.539799] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1740.539815] ? ksys_write+0x121/0x240 [ 1740.539832] ? lock_is_held_type+0x9e/0x120 [ 1740.539855] __do_sys_clone3+0x1f5/0x280 [ 1740.539872] ? __pfx___do_sys_clone3+0x10/0x10 [ 1740.539887] ? perf_trace_lock+0x337/0x5d0 [ 1740.539934] ? __pfx_perf_trace_lock+0x10/0x10 [ 1740.539954] ? __might_fault+0x138/0x190 [ 1740.539974] ? __might_fault+0xe0/0x190 [ 1740.539989] ? find_held_lock+0x2b/0x80 [ 1740.540005] ? syscall_trace_enter+0x1cf/0x240 [ 1740.540023] ? lock_release+0xc8/0x290 [ 1740.540057] do_syscall_64+0xbf/0x390 [ 1740.540076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.540090] RIP: 0033:0x7ff6d12e7b19 [ 1740.540101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.540119] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1740.540132] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1740.540141] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1740.540149] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.540157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.540164] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1740.540201] [ 1740.563088] FAULT_INJECTION: forcing a failure. [ 1740.563088] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.565063] CPU: 0 UID: 0 PID: 37425 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1740.565096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.565117] Call Trace: [ 1740.565127] [ 1740.565139] dump_stack_lvl+0xfa/0x120 [ 1740.565178] should_fail_ex+0x4d7/0x5e0 [ 1740.565223] should_failslab+0xc2/0x120 [ 1740.565259] __kmalloc_cache_noprof+0x81/0x6b0 [ 1740.565294] ? __pfx_perf_trace_lock+0x10/0x10 [ 1740.565338] ? alloc_super+0x53/0xb20 [ 1740.565384] ? alloc_super+0x53/0xb20 [ 1740.565412] alloc_super+0x53/0xb20 [ 1740.565438] ? lock_release+0xc8/0x290 [ 1740.565492] sget_fc+0xfe/0xb80 [ 1740.565525] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1740.565558] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1740.565606] get_tree_nodev+0x28/0x190 [ 1740.565643] mqueue_get_tree+0xf6/0x140 [ 1740.565680] vfs_get_tree+0x93/0x340 [ 1740.565725] fc_mount_longterm+0x1a/0x280 [ 1740.565771] mq_init_ns+0x42e/0x630 [ 1740.565820] copy_ipcs+0x2dd/0x570 [ 1740.565868] create_new_namespaces+0x210/0xab0 [ 1740.565898] ? security_capable+0x2f/0x90 [ 1740.565942] copy_namespaces+0x45c/0x580 [ 1740.565978] copy_process+0x26d4/0x7410 [ 1740.566012] ? __pfx_perf_trace_lock+0x10/0x10 [ 1740.566043] ? perf_tp_event+0x807/0xe70 [ 1740.566109] ? __pfx_copy_process+0x10/0x10 [ 1740.566143] ? __might_fault+0xe0/0x190 [ 1740.566187] ? _copy_from_user+0x5b/0xd0 [ 1740.566236] kernel_clone+0xea/0x7f0 [ 1740.566278] ? __pfx_kernel_clone+0x10/0x10 01:07:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x40000000}, 0x58) [ 1740.566334] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1740.566364] ? ksys_write+0x121/0x240 [ 1740.566394] ? lock_is_held_type+0x9e/0x120 [ 1740.566435] __do_sys_clone3+0x1f5/0x280 [ 1740.566467] ? __pfx___do_sys_clone3+0x10/0x10 [ 1740.566495] ? perf_trace_lock+0x337/0x5d0 [ 1740.566584] ? __pfx_perf_trace_lock+0x10/0x10 [ 1740.566620] ? __might_fault+0x138/0x190 [ 1740.566657] ? __might_fault+0xe0/0x190 [ 1740.566686] ? find_held_lock+0x2b/0x80 [ 1740.566713] ? syscall_trace_enter+0x1cf/0x240 [ 1740.566748] ? lock_release+0xc8/0x290 [ 1740.566809] do_syscall_64+0xbf/0x390 [ 1740.566846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.566871] RIP: 0033:0x7f2be6d39b19 [ 1740.566891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.566916] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1740.566940] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1740.566956] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1740.566971] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.566985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.567000] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1740.567067] 01:07:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 45) 01:07:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 46) 01:07:55 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x0, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:07:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 42) 01:07:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 40) 01:07:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x62000000}, 0x58) 01:07:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffc99a3b00000000}, 0x58) 01:07:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffff030000000000}, 0x58) 01:07:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x78100000}, 0x58) 01:07:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 47) 01:07:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffffff7f00000000}, 0x58) 01:07:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7c010000}, 0x58) 01:07:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x5000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:07:55 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x0, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:07:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x80040000}, 0x58) 01:08:06 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:08:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 48) 01:08:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x5000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xfeffffff}, 0x58) 01:08:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 43) 01:08:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffffffff00000000}, 0x58) 01:08:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x6000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 41) [ 1762.417086] FAULT_INJECTION: forcing a failure. [ 1762.417086] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.418251] CPU: 0 UID: 0 PID: 37801 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1762.418268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1762.418276] Call Trace: [ 1762.418282] [ 1762.418287] dump_stack_lvl+0xfa/0x120 [ 1762.418310] should_fail_ex+0x4d7/0x5e0 [ 1762.418333] should_failslab+0xc2/0x120 [ 1762.418352] __kmalloc_cache_noprof+0x81/0x6b0 [ 1762.418370] ? __pfx_perf_trace_lock+0x10/0x10 [ 1762.418393] ? alloc_super+0x53/0xb20 [ 1762.418417] ? alloc_super+0x53/0xb20 [ 1762.418431] alloc_super+0x53/0xb20 [ 1762.418444] ? lock_release+0xc8/0x290 [ 1762.418472] sget_fc+0xfe/0xb80 [ 1762.418489] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1762.418506] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1762.418522] get_tree_nodev+0x28/0x190 [ 1762.418541] mqueue_get_tree+0xf6/0x140 [ 1762.418559] vfs_get_tree+0x93/0x340 [ 1762.418582] fc_mount_longterm+0x1a/0x280 [ 1762.418606] mq_init_ns+0x42e/0x630 [ 1762.418630] copy_ipcs+0x2dd/0x570 [ 1762.418655] create_new_namespaces+0x210/0xab0 [ 1762.418671] ? security_capable+0x2f/0x90 [ 1762.418693] copy_namespaces+0x45c/0x580 [ 1762.418712] copy_process+0x26d4/0x7410 [ 1762.418730] ? __pfx_perf_trace_lock+0x10/0x10 [ 1762.418745] ? perf_tp_event+0x807/0xe70 [ 1762.418779] ? __pfx_copy_process+0x10/0x10 [ 1762.418796] ? __might_fault+0xe0/0x190 [ 1762.418819] ? _copy_from_user+0x5b/0xd0 [ 1762.418845] kernel_clone+0xea/0x7f0 [ 1762.418866] ? __pfx_kernel_clone+0x10/0x10 [ 1762.418894] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1762.418910] ? ksys_write+0x121/0x240 [ 1762.418925] ? lock_is_held_type+0x9e/0x120 [ 1762.418946] __do_sys_clone3+0x1f5/0x280 [ 1762.418962] ? __pfx___do_sys_clone3+0x10/0x10 [ 1762.418976] ? perf_trace_lock+0x337/0x5d0 [ 1762.419021] ? __pfx_perf_trace_lock+0x10/0x10 [ 1762.419040] ? __might_fault+0x138/0x190 [ 1762.419058] ? __might_fault+0xe0/0x190 [ 1762.419073] ? find_held_lock+0x2b/0x80 [ 1762.419087] ? syscall_trace_enter+0x1cf/0x240 [ 1762.419110] ? lock_release+0xc8/0x290 [ 1762.419141] do_syscall_64+0xbf/0x390 [ 1762.419160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.419173] RIP: 0033:0x7ff6d12e7b19 [ 1762.419184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1762.419196] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1762.419208] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1762.419217] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1762.419224] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1762.419232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1762.419239] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1762.419273] [ 1762.454055] FAULT_INJECTION: forcing a failure. [ 1762.454055] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.456023] CPU: 1 UID: 0 PID: 37807 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1762.456054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1762.456068] Call Trace: [ 1762.456077] [ 1762.456086] dump_stack_lvl+0xfa/0x120 [ 1762.456125] should_fail_ex+0x4d7/0x5e0 [ 1762.456156] should_failslab+0xc2/0x120 [ 1762.456186] __kmalloc_cache_noprof+0x81/0x6b0 [ 1762.456220] ? do_raw_spin_lock+0x123/0x260 [ 1762.456258] ? shrinker_alloc+0xad/0xad0 [ 1762.456297] ? shrinker_alloc+0xad/0xad0 [ 1762.456329] shrinker_alloc+0xad/0xad0 [ 1762.456361] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1762.456398] ? __create_object+0x59/0x80 [ 1762.456432] ? pcpu_obj_full_size+0x3c/0x90 [ 1762.456458] ? pcpu_alloc_noprof+0x12d/0x1160 [ 1762.456487] ? __pfx_shrinker_alloc+0x10/0x10 [ 1762.456522] ? lockdep_init_map_type+0x4b/0x240 [ 1762.456555] ? __raw_spin_lock_init+0x3a/0x110 [ 1762.456597] alloc_super+0x7ef/0xb20 [ 1762.456630] sget_fc+0xfe/0xb80 [ 1762.456654] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1762.456679] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1762.456708] get_tree_nodev+0x28/0x190 [ 1762.456734] mqueue_get_tree+0xf6/0x140 [ 1762.456763] vfs_get_tree+0x93/0x340 [ 1762.456798] fc_mount_longterm+0x1a/0x280 [ 1762.456836] mq_init_ns+0x42e/0x630 [ 1762.456870] copy_ipcs+0x2dd/0x570 [ 1762.456905] create_new_namespaces+0x210/0xab0 [ 1762.456930] ? security_capable+0x2f/0x90 [ 1762.456958] copy_namespaces+0x45c/0x580 [ 1762.456984] copy_process+0x26d4/0x7410 [ 1762.457012] ? __pfx_perf_trace_lock+0x10/0x10 [ 1762.457060] ? __pfx_copy_process+0x10/0x10 [ 1762.457087] ? __might_fault+0xe0/0x190 [ 1762.457117] ? _copy_from_user+0x5b/0xd0 [ 1762.457149] kernel_clone+0xea/0x7f0 [ 1762.457175] ? get_pid_task+0xfd/0x250 [ 1762.457203] ? __pfx_kernel_clone+0x10/0x10 [ 1762.457228] ? perf_trace_lock+0xb5/0x5d0 [ 1762.457267] ? find_held_lock+0x2b/0x80 [ 1762.457290] ? ksys_write+0x121/0x240 [ 1762.457315] ? lock_is_held_type+0x9e/0x120 [ 1762.457343] __do_sys_clone3+0x1f5/0x280 [ 1762.457370] ? __pfx___do_sys_clone3+0x10/0x10 [ 1762.457398] ? perf_trace_lock+0xb5/0x5d0 [ 1762.457441] ? lock_acquire+0x15e/0x2f0 [ 1762.457473] ? __pfx_perf_trace_lock+0x10/0x10 [ 1762.457504] ? __might_fault+0x138/0x190 [ 1762.457526] ? lock_release+0xc8/0x290 [ 1762.457556] ? __might_fault+0xe0/0x190 [ 1762.457579] ? find_held_lock+0x2b/0x80 [ 1762.457602] ? syscall_trace_enter+0x1cf/0x240 [ 1762.457631] ? lock_release+0xc8/0x290 [ 1762.457670] do_syscall_64+0xbf/0x390 [ 1762.457698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.457721] RIP: 0033:0x7fc56dfaeb19 [ 1762.457739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1762.457761] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1762.457797] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1762.457812] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1762.457826] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1762.457839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1762.457853] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1762.457886] 01:08:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x57) 01:08:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 42) [ 1762.516020] FAULT_INJECTION: forcing a failure. [ 1762.516020] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.517700] CPU: 1 UID: 0 PID: 37808 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1762.517730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1762.517743] Call Trace: [ 1762.517753] [ 1762.517764] dump_stack_lvl+0xfa/0x120 [ 1762.517812] should_fail_ex+0x4d7/0x5e0 [ 1762.517853] should_failslab+0xc2/0x120 [ 1762.517886] __kmalloc_noprof+0xcd/0x680 [ 1762.517921] ? down_write_nested+0x11d/0x1f0 [ 1762.517959] ? security_sb_alloc+0xe3/0x140 [ 1762.517982] ? lockdep_init_map_type+0x4b/0x240 [ 1762.518031] security_sb_alloc+0xe3/0x140 [ 1762.518060] alloc_super+0x1e9/0xb20 [ 1762.518088] ? lock_release+0xc8/0x290 [ 1762.518146] sget_fc+0xfe/0xb80 [ 1762.518177] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1762.518210] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1762.518238] get_tree_nodev+0x28/0x190 [ 1762.518273] mqueue_get_tree+0xf6/0x140 [ 1762.518308] vfs_get_tree+0x93/0x340 [ 1762.518350] fc_mount_longterm+0x1a/0x280 [ 1762.518393] mq_init_ns+0x42e/0x630 [ 1762.518438] copy_ipcs+0x2dd/0x570 [ 1762.518484] create_new_namespaces+0x210/0xab0 [ 1762.518511] ? security_capable+0x2f/0x90 [ 1762.518551] copy_namespaces+0x45c/0x580 [ 1762.518586] copy_process+0x26d4/0x7410 [ 1762.518617] ? __pfx_perf_trace_lock+0x10/0x10 [ 1762.518647] ? perf_tp_event+0x807/0xe70 [ 1762.518710] ? __pfx_copy_process+0x10/0x10 [ 1762.518742] ? __might_fault+0xe0/0x190 [ 1762.518784] ? _copy_from_user+0x5b/0xd0 [ 1762.518830] kernel_clone+0xea/0x7f0 [ 1762.518869] ? __pfx_kernel_clone+0x10/0x10 [ 1762.518923] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1762.518953] ? ksys_write+0x121/0x240 [ 1762.518981] ? lock_is_held_type+0x9e/0x120 [ 1762.519019] __do_sys_clone3+0x1f5/0x280 [ 1762.519050] ? __pfx___do_sys_clone3+0x10/0x10 [ 1762.519076] ? perf_trace_lock+0x337/0x5d0 [ 1762.519160] ? __pfx_perf_trace_lock+0x10/0x10 [ 1762.519194] ? __might_fault+0x138/0x190 [ 1762.519229] ? __might_fault+0xe0/0x190 [ 1762.519256] ? find_held_lock+0x2b/0x80 [ 1762.519282] ? syscall_trace_enter+0x1cf/0x240 [ 1762.519313] ? lock_release+0xc8/0x290 [ 1762.519372] do_syscall_64+0xbf/0x390 [ 1762.519406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.519430] RIP: 0033:0x7f2be6d39b19 [ 1762.519449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1762.519471] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1762.519493] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1762.519508] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1762.519521] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1762.519535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1762.519548] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1762.519611] 01:08:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x50f0000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x7000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff030000}, 0x58) 01:08:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 44) 01:08:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x10000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x6000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 49) 01:08:06 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:08:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff0f0000}, 0x58) 01:08:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x7000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x20000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffc99a3b}, 0x58) 01:08:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xf000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2b000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 45) 01:08:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x20000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffff0300}, 0x58) 01:08:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3b9ac9ff, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:17 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:08:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 43) 01:08:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 50) 01:08:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) dup2(r0, r1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x7f, 0x3, 0x78, 0x0, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x1, 0x8, 0x0, 0x1, 0x52, 0x7fe14a59, 0x8cbf, 0x0, 0x0, 0x0, 0x80000000000}, 0xffffffffffffffff, 0x7, r0, 0xb) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1773.666385] FAULT_INJECTION: forcing a failure. [ 1773.666385] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.667804] CPU: 0 UID: 0 PID: 38060 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1773.667829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.667840] Call Trace: [ 1773.667847] [ 1773.667856] dump_stack_lvl+0xfa/0x120 [ 1773.667886] should_fail_ex+0x4d7/0x5e0 [ 1773.667921] should_failslab+0xc2/0x120 [ 1773.667948] __kmalloc_noprof+0xcd/0x680 [ 1773.667977] ? down_write_nested+0x11d/0x1f0 [ 1773.668009] ? security_sb_alloc+0xe3/0x140 [ 1773.668027] ? lockdep_init_map_type+0x4b/0x240 [ 1773.668067] security_sb_alloc+0xe3/0x140 [ 1773.668090] alloc_super+0x1e9/0xb20 [ 1773.668120] ? lock_release+0xc8/0x290 [ 1773.668160] sget_fc+0xfe/0xb80 [ 1773.668185] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1773.668211] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1773.668235] get_tree_nodev+0x28/0x190 [ 1773.668263] mqueue_get_tree+0xf6/0x140 [ 1773.668290] vfs_get_tree+0x93/0x340 [ 1773.668324] fc_mount_longterm+0x1a/0x280 [ 1773.668359] mq_init_ns+0x42e/0x630 [ 1773.668395] copy_ipcs+0x2dd/0x570 [ 1773.668431] create_new_namespaces+0x210/0xab0 [ 1773.668454] ? security_capable+0x2f/0x90 [ 1773.668486] copy_namespaces+0x45c/0x580 [ 1773.668514] copy_process+0x26d4/0x7410 [ 1773.668540] ? __pfx_perf_trace_lock+0x10/0x10 [ 1773.668564] ? perf_tp_event+0x807/0xe70 [ 1773.668613] ? __pfx_copy_process+0x10/0x10 [ 1773.668639] ? __might_fault+0xe0/0x190 [ 1773.668672] ? _copy_from_user+0x5b/0xd0 [ 1773.668710] kernel_clone+0xea/0x7f0 [ 1773.668741] ? __pfx_kernel_clone+0x10/0x10 [ 1773.668783] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1773.668806] ? ksys_write+0x121/0x240 [ 1773.668829] ? lock_is_held_type+0x9e/0x120 [ 1773.668861] __do_sys_clone3+0x1f5/0x280 [ 1773.668885] ? __pfx___do_sys_clone3+0x10/0x10 [ 1773.668906] ? perf_trace_lock+0x337/0x5d0 [ 1773.668974] ? __pfx_perf_trace_lock+0x10/0x10 [ 1773.669001] ? __might_fault+0x138/0x190 [ 1773.669029] ? __might_fault+0xe0/0x190 [ 1773.669050] ? find_held_lock+0x2b/0x80 [ 1773.669071] ? syscall_trace_enter+0x1cf/0x240 [ 1773.669098] ? lock_release+0xc8/0x290 [ 1773.669144] do_syscall_64+0xbf/0x390 [ 1773.669172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.669191] RIP: 0033:0x7ff6d12e7b19 [ 1773.669206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.669223] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1773.669240] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1773.669253] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1773.669263] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.669274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1773.669285] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1773.669335] [ 1773.690566] FAULT_INJECTION: forcing a failure. [ 1773.690566] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.708016] CPU: 1 UID: 0 PID: 38064 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1773.708052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.708068] Call Trace: [ 1773.708077] [ 1773.708088] dump_stack_lvl+0xfa/0x120 [ 1773.708128] should_fail_ex+0x4d7/0x5e0 [ 1773.708164] should_failslab+0xc2/0x120 [ 1773.708198] __kmalloc_noprof+0xcd/0x680 [ 1773.708236] ? __pfx_shrinker_alloc+0x10/0x10 [ 1773.708275] ? __list_lru_init+0xeb/0x4a0 [ 1773.708310] __list_lru_init+0xeb/0x4a0 [ 1773.708341] alloc_super+0x8e6/0xb20 [ 1773.708380] sget_fc+0xfe/0xb80 [ 1773.708409] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1773.708438] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1773.708471] get_tree_nodev+0x28/0x190 [ 1773.708502] mqueue_get_tree+0xf6/0x140 [ 1773.708536] vfs_get_tree+0x93/0x340 [ 1773.708578] fc_mount_longterm+0x1a/0x280 [ 1773.708620] mq_init_ns+0x42e/0x630 [ 1773.708661] copy_ipcs+0x2dd/0x570 [ 1773.708703] create_new_namespaces+0x210/0xab0 [ 1773.708731] ? security_capable+0x2f/0x90 [ 1773.708764] copy_namespaces+0x45c/0x580 [ 1773.708794] copy_process+0x26d4/0x7410 [ 1773.708826] ? __pfx_perf_trace_lock+0x10/0x10 [ 1773.708882] ? __pfx_copy_process+0x10/0x10 [ 1773.708914] ? __might_fault+0xe0/0x190 [ 1773.708948] ? _copy_from_user+0x5b/0xd0 [ 1773.708986] kernel_clone+0xea/0x7f0 [ 1773.709016] ? get_pid_task+0xfd/0x250 [ 1773.709049] ? __pfx_kernel_clone+0x10/0x10 [ 1773.709079] ? perf_trace_lock+0xb5/0x5d0 [ 1773.709125] ? find_held_lock+0x2b/0x80 [ 1773.709152] ? ksys_write+0x121/0x240 [ 1773.709182] ? lock_is_held_type+0x9e/0x120 [ 1773.709218] __do_sys_clone3+0x1f5/0x280 [ 1773.709250] ? __pfx___do_sys_clone3+0x10/0x10 [ 1773.709283] ? perf_trace_lock+0xb5/0x5d0 [ 1773.709335] ? lock_acquire+0x15e/0x2f0 [ 1773.709372] ? __pfx_perf_trace_lock+0x10/0x10 [ 1773.709410] ? __might_fault+0x138/0x190 [ 1773.709436] ? lock_release+0xc8/0x290 [ 1773.709472] ? __might_fault+0xe0/0x190 [ 1773.709499] ? find_held_lock+0x2b/0x80 [ 1773.709525] ? syscall_trace_enter+0x1cf/0x240 [ 1773.709559] ? lock_release+0xc8/0x290 [ 1773.709605] do_syscall_64+0xbf/0x390 [ 1773.709638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.709665] RIP: 0033:0x7fc56dfaeb19 [ 1773.709685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.709710] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1773.709736] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1773.709753] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1773.709769] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.709785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1773.709801] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1773.709840] 01:08:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3f000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2b000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 44) 01:08:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 51) 01:08:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffffff7f}, 0x58) 01:08:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x40000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3b9ac9ff, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xfffffffe}, 0x58) 01:08:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 46) 01:08:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x62000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 52) 01:08:30 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:08:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3f000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:30 executing program 4: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/24, 0x18}, {&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/173, 0xad}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/38, 0x26}, {&(0x7f0000001700)=""/247, 0xf7}], 0xa, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000001a00)=""/167, 0xa7}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/163, 0xa3}], 0x3, &(0x7f0000002bc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000002c80)=""/199, 0xc7}, {&(0x7f0000002d80)=""/93, 0x5d}, {&(0x7f0000002e00)=""/168, 0xa8}, {&(0x7f0000002ec0)=""/41, 0x29}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/175, 0xaf}], 0x6}}, {{&(0x7f0000004040)=@abs, 0x6e, &(0x7f00000053c0)=[{&(0x7f00000040c0)=""/215, 0xd7}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f00000051c0)}, {&(0x7f0000005200)=""/166, 0xa6}, {&(0x7f00000052c0)=""/47, 0x2f}, {&(0x7f0000005300)=""/180, 0xb4}], 0x7}}, {{&(0x7f0000005440), 0x6e, &(0x7f0000006900)=[{&(0x7f00000054c0)=""/234, 0xea}, {&(0x7f00000055c0)=""/108, 0x6c}, {&(0x7f0000005640)=""/150, 0x96}, {&(0x7f0000005700)=""/87, 0x57}, {&(0x7f0000005780)=""/214, 0xd6}], 0x5, &(0x7f0000006980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="0000000010100000000000000100000001000000"], 0x50}}], 0x5, 0x100, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x1c00, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000006c00)=@can={0x1d, 0x0}, &(0x7f0000006c80)=0x80) sendto(r1, &(0x7f0000006b40)="31e8cc111280ca94d31d577162a140236bbbb9d83902d75c740583a3dfbf020cb52369ea7a9ee31572835eb9c029a9b5965f6e5a9bc6f769307fe06385f63e924a6d56c98b0d107d9eadbb871efb9a0c7d2ff57af39031a83c10750378b28bb01a1bd6e730e7ab56927d82f71e6612b8717388280b1be4763dc1160a314f48e4750de9787e70edf4b716b286be1ca2fa7c99175a9bfeb0a4ee7d904e6b84f239", 0xa0, 0x800, &(0x7f0000006cc0)=@ll={0x11, 0x3, r2, 0x1, 0x9, 0x6, @random="f9dd9e299317"}, 0x80) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) write(r3, &(0x7f0000000100)="7cc5e2d493337fff79a5ea75a29bef82fed5bbd0a187668e5598dd850d0c3f3d77d48247f93599ec9f82d976fadb5a1bfdbd0232b3f11d009da4f7f268640e21c3315a7eec3a42c2d0f085aac537a29196c2d9705afb621af0416d9a1fd0b4bc885d925cec3b9eafe78c86da3ac24ebf70e0cbbc50f64f41e30d43f1f1a169c685e58fbcd0e1db23e43968d9e290c9c2d9145f79df037fa56e4468bc71d68fd20fa17a8bffc4ea20077d0d9512cb", 0xae) epoll_pwait2(r0, &(0x7f0000006d40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f00000051c0)={0x77359400}, &(0x7f0000006dc0)={[0x2]}, 0x8) 01:08:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x100000800}, 0x58) 01:08:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 45) [ 1786.913750] FAULT_INJECTION: forcing a failure. [ 1786.913750] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.915458] CPU: 0 UID: 0 PID: 38313 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1786.915490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1786.915503] Call Trace: [ 1786.915513] [ 1786.915524] dump_stack_lvl+0xfa/0x120 [ 1786.915560] should_fail_ex+0x4d7/0x5e0 [ 1786.915602] should_failslab+0xc2/0x120 [ 1786.915635] __kmalloc_noprof+0xcd/0x680 [ 1786.915667] ? lockdep_init_map_type+0x4b/0x240 [ 1786.915707] ? __list_lru_init+0xeb/0x4a0 [ 1786.915750] __list_lru_init+0xeb/0x4a0 [ 1786.915785] alloc_super+0x92f/0xb20 [ 1786.915837] sget_fc+0xfe/0xb80 [ 1786.915867] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1786.915899] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1786.915929] get_tree_nodev+0x28/0x190 [ 1786.915964] mqueue_get_tree+0xf6/0x140 [ 1786.915998] vfs_get_tree+0x93/0x340 [ 1786.916040] fc_mount_longterm+0x1a/0x280 [ 1786.916083] mq_init_ns+0x42e/0x630 [ 1786.916145] copy_ipcs+0x2dd/0x570 [ 1786.916199] create_new_namespaces+0x210/0xab0 [ 1786.916227] ? security_capable+0x2f/0x90 [ 1786.916268] copy_namespaces+0x45c/0x580 [ 1786.916303] copy_process+0x26d4/0x7410 [ 1786.916335] ? __pfx_perf_trace_lock+0x10/0x10 [ 1786.916366] ? perf_tp_event+0x807/0xe70 [ 1786.916428] ? __pfx_copy_process+0x10/0x10 [ 1786.916460] ? __might_fault+0xe0/0x190 [ 1786.916502] ? _copy_from_user+0x5b/0xd0 [ 1786.916549] kernel_clone+0xea/0x7f0 [ 1786.916588] ? __pfx_kernel_clone+0x10/0x10 [ 1786.916641] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1786.916670] ? ksys_write+0x121/0x240 [ 1786.916699] ? lock_is_held_type+0x9e/0x120 [ 1786.916738] __do_sys_clone3+0x1f5/0x280 [ 1786.916769] ? __pfx___do_sys_clone3+0x10/0x10 [ 1786.916795] ? perf_trace_lock+0x337/0x5d0 [ 1786.916879] ? __pfx_perf_trace_lock+0x10/0x10 [ 1786.916913] ? __might_fault+0x138/0x190 [ 1786.916947] ? __might_fault+0xe0/0x190 [ 1786.916975] ? find_held_lock+0x2b/0x80 [ 1786.917001] ? syscall_trace_enter+0x1cf/0x240 [ 1786.917034] ? lock_release+0xc8/0x290 [ 1786.917110] do_syscall_64+0xbf/0x390 [ 1786.917146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.917170] RIP: 0033:0x7fc56dfaeb19 [ 1786.917190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1786.917211] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1786.917233] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1786.917249] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1786.917262] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.917276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1786.917289] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1786.917352] 01:08:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x80040000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x10000000000}, 0x58) 01:08:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x40000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 53) 01:08:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xac020000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x40000000000}, 0x58) 01:08:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x58100000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1787.314439] FAULT_INJECTION: forcing a failure. 01:08:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xec030000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1787.314439] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.316411] CPU: 1 UID: 0 PID: 38529 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1787.316443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1787.316457] Call Trace: [ 1787.316464] [ 1787.316473] dump_stack_lvl+0xfa/0x120 [ 1787.316505] should_fail_ex+0x4d7/0x5e0 [ 1787.316537] should_failslab+0xc2/0x120 [ 1787.316569] __kmalloc_noprof+0xcd/0x680 [ 1787.316616] ? __pfx_shrinker_alloc+0x10/0x10 [ 1787.316653] ? __list_lru_init+0xeb/0x4a0 [ 1787.316684] __list_lru_init+0xeb/0x4a0 [ 1787.316710] alloc_super+0x8e6/0xb20 [ 1787.316744] sget_fc+0xfe/0xb80 [ 1787.316768] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1787.316794] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1787.316822] get_tree_nodev+0x28/0x190 [ 1787.316849] mqueue_get_tree+0xf6/0x140 [ 1787.316877] vfs_get_tree+0x93/0x340 [ 1787.316914] fc_mount_longterm+0x1a/0x280 [ 1787.316951] mq_init_ns+0x42e/0x630 [ 1787.316986] copy_ipcs+0x2dd/0x570 [ 1787.317021] create_new_namespaces+0x210/0xab0 [ 1787.317046] ? security_capable+0x2f/0x90 [ 1787.317075] copy_namespaces+0x45c/0x580 [ 1787.317100] copy_process+0x26d4/0x7410 [ 1787.317137] ? __pfx_perf_trace_lock+0x10/0x10 [ 1787.317185] ? __pfx_copy_process+0x10/0x10 [ 1787.317213] ? __might_fault+0xe0/0x190 [ 1787.317242] ? _copy_from_user+0x5b/0xd0 [ 1787.317275] kernel_clone+0xea/0x7f0 [ 1787.317300] ? get_pid_task+0xfd/0x250 [ 1787.317329] ? __pfx_kernel_clone+0x10/0x10 [ 1787.317353] ? perf_trace_lock+0xb5/0x5d0 [ 1787.317393] ? find_held_lock+0x2b/0x80 [ 1787.317416] ? ksys_write+0x121/0x240 [ 1787.317441] ? lock_is_held_type+0x9e/0x120 [ 1787.317470] __do_sys_clone3+0x1f5/0x280 [ 1787.317497] ? __pfx___do_sys_clone3+0x10/0x10 [ 1787.317525] ? perf_trace_lock+0xb5/0x5d0 [ 1787.317569] ? lock_acquire+0x15e/0x2f0 [ 1787.317602] ? __pfx_perf_trace_lock+0x10/0x10 [ 1787.317633] ? __might_fault+0x138/0x190 [ 1787.317662] ? lock_release+0xc8/0x290 [ 1787.317697] ? __might_fault+0xe0/0x190 [ 1787.317720] ? find_held_lock+0x2b/0x80 [ 1787.317743] ? syscall_trace_enter+0x1cf/0x240 [ 1787.317771] ? lock_release+0xc8/0x290 [ 1787.317811] do_syscall_64+0xbf/0x390 [ 1787.317839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.317862] RIP: 0033:0x7fc56dfaeb19 [ 1787.317879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1787.317902] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1787.317924] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1787.317940] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1787.317953] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1787.317967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1787.317980] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1787.318028] 01:08:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 47) 01:08:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x62000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 54) 01:08:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 46) 01:08:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xfeffffff, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2020000000000}, 0x58) 01:08:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0xe0, 0x6, 0x2, 0x7f, 0x0, 0x400, 0x1088, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x801, 0x0, 0x9, 0x1, 0x8, 0x8, 0x7, 0x0, 0x2, 0x0, 0x5}) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x2, 0xfa, 0x1, 0x6, 0x0, 0x7ff, 0x8000, 0x19, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x4000, 0x2, 0x0, 0x9, 0x4800000000000, 0x4, 0xfff, 0x0, 0x7, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:45 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:08:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff030000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4000000000000}, 0x58) 01:08:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x80040000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff0f0000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x890f0000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8000000000000}, 0x58) 01:08:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffc99a3b, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:08:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8000001000000}, 0x58) 01:09:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 48) 01:09:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xba0f0000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffff0300, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:00 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:09:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 47) 01:09:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x66}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 55) 01:09:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x10100000000000}, 0x58) [ 1816.648637] FAULT_INJECTION: forcing a failure. [ 1816.648637] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.649908] CPU: 1 UID: 0 PID: 38797 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1816.649926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1816.649933] Call Trace: [ 1816.649938] [ 1816.649944] dump_stack_lvl+0xfa/0x120 [ 1816.649967] should_fail_ex+0x4d7/0x5e0 [ 1816.649993] should_failslab+0xc2/0x120 [ 1816.650012] __kmalloc_cache_noprof+0x81/0x6b0 [ 1816.650031] ? do_raw_spin_lock+0x123/0x260 [ 1816.650055] ? shrinker_alloc+0xad/0xad0 [ 1816.650087] ? shrinker_alloc+0xad/0xad0 [ 1816.650111] shrinker_alloc+0xad/0xad0 [ 1816.650130] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1816.650153] ? __create_object+0x59/0x80 [ 1816.650174] ? pcpu_obj_full_size+0x3c/0x90 [ 1816.650192] ? pcpu_alloc_noprof+0x12d/0x1160 [ 1816.650212] ? __pfx_shrinker_alloc+0x10/0x10 [ 1816.650234] ? lockdep_init_map_type+0x4b/0x240 [ 1816.650255] ? __raw_spin_lock_init+0x3a/0x110 [ 1816.650301] alloc_super+0x7ef/0xb20 [ 1816.650339] sget_fc+0xfe/0xb80 [ 1816.650356] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1816.650374] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1816.650391] get_tree_nodev+0x28/0x190 [ 1816.650411] mqueue_get_tree+0xf6/0x140 [ 1816.650430] vfs_get_tree+0x93/0x340 [ 1816.650454] fc_mount_longterm+0x1a/0x280 [ 1816.650479] mq_init_ns+0x42e/0x630 [ 1816.650507] copy_ipcs+0x2dd/0x570 [ 1816.650533] create_new_namespaces+0x210/0xab0 [ 1816.650549] ? security_capable+0x2f/0x90 [ 1816.650575] copy_namespaces+0x45c/0x580 [ 1816.650594] copy_process+0x26d4/0x7410 [ 1816.650614] ? __pfx_perf_trace_lock+0x10/0x10 [ 1816.650636] ? perf_tp_event+0x807/0xe70 [ 1816.650672] ? __pfx_copy_process+0x10/0x10 [ 1816.650690] ? __might_fault+0xe0/0x190 [ 1816.650713] ? _copy_from_user+0x5b/0xd0 [ 1816.650739] kernel_clone+0xea/0x7f0 [ 1816.650760] ? __pfx_kernel_clone+0x10/0x10 [ 1816.650788] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1816.650804] ? ksys_write+0x121/0x240 [ 1816.650820] ? lock_is_held_type+0x9e/0x120 [ 1816.650840] __do_sys_clone3+0x1f5/0x280 [ 1816.650856] ? __pfx___do_sys_clone3+0x10/0x10 [ 1816.650870] ? perf_trace_lock+0x337/0x5d0 [ 1816.650916] ? __pfx_perf_trace_lock+0x10/0x10 [ 1816.650934] ? __might_fault+0x138/0x190 [ 1816.650953] ? __might_fault+0xe0/0x190 [ 1816.650968] ? find_held_lock+0x2b/0x80 [ 1816.650982] ? syscall_trace_enter+0x1cf/0x240 [ 1816.651000] ? lock_release+0xc8/0x290 [ 1816.651031] do_syscall_64+0xbf/0x390 [ 1816.651051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.651064] RIP: 0033:0x7f2be6d39b19 [ 1816.651075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1816.651087] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1816.651099] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1816.651109] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1816.651116] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1816.651124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1816.651133] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1816.651170] 01:09:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffffff7f, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x10400000000000}, 0x58) 01:09:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xbe030000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 56) 01:09:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xfffffffe, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x100000000000000}, 0x58) [ 1816.837948] FAULT_INJECTION: forcing a failure. [ 1816.837948] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.839016] CPU: 1 UID: 0 PID: 38875 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1816.839034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1816.839042] Call Trace: [ 1816.839047] [ 1816.839052] dump_stack_lvl+0xfa/0x120 [ 1816.839072] should_fail_ex+0x4d7/0x5e0 [ 1816.839091] should_failslab+0xc2/0x120 [ 1816.839113] __kmalloc_noprof+0xcd/0x680 [ 1816.839133] ? memcg_list_lru_alloc+0x4da/0x760 [ 1816.839152] memcg_list_lru_alloc+0x4da/0x760 [ 1816.839171] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1816.839192] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 1816.839213] __memcg_slab_post_alloc_hook+0x130/0x9e0 [ 1816.839228] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1816.839249] ? __create_object+0x59/0x80 [ 1816.839270] kmem_cache_alloc_lru_noprof+0x512/0x690 [ 1816.839290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1816.839308] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1816.839325] ? mqueue_alloc_inode+0x27/0x50 [ 1816.839338] mqueue_alloc_inode+0x27/0x50 [ 1816.839352] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1816.839366] alloc_inode+0x67/0x250 [ 1816.839384] new_inode+0x1e/0x160 [ 1816.839402] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1816.839416] mqueue_get_inode+0x2e/0xdf0 [ 1816.839430] ? sget_fc+0x766/0xb80 [ 1816.839447] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1816.839461] mqueue_fill_super+0x14e/0x260 [ 1816.839476] get_tree_nodev+0xdc/0x190 [ 1816.839491] mqueue_get_tree+0xf6/0x140 [ 1816.839506] vfs_get_tree+0x93/0x340 [ 1816.839526] fc_mount_longterm+0x1a/0x280 [ 1816.839546] mq_init_ns+0x42e/0x630 [ 1816.839565] copy_ipcs+0x2dd/0x570 [ 1816.839584] create_new_namespaces+0x210/0xab0 [ 1816.839598] ? security_capable+0x2f/0x90 [ 1816.839614] copy_namespaces+0x45c/0x580 [ 1816.839628] copy_process+0x26d4/0x7410 [ 1816.839645] ? __pfx_perf_trace_lock+0x10/0x10 [ 1816.839672] ? __pfx_copy_process+0x10/0x10 [ 1816.839687] ? __might_fault+0xe0/0x190 [ 1816.839703] ? _copy_from_user+0x5b/0xd0 [ 1816.839721] kernel_clone+0xea/0x7f0 [ 1816.839735] ? get_pid_task+0xfd/0x250 [ 1816.839751] ? __pfx_kernel_clone+0x10/0x10 [ 1816.839764] ? perf_trace_lock+0xb5/0x5d0 [ 1816.839785] ? find_held_lock+0x2b/0x80 [ 1816.839798] ? ksys_write+0x121/0x240 [ 1816.839812] ? lock_is_held_type+0x9e/0x120 [ 1816.839828] __do_sys_clone3+0x1f5/0x280 [ 1816.839844] ? __pfx___do_sys_clone3+0x10/0x10 [ 1816.839859] ? perf_trace_lock+0xb5/0x5d0 [ 1816.839882] ? lock_acquire+0x15e/0x2f0 [ 1816.839900] ? __pfx_perf_trace_lock+0x10/0x10 [ 1816.839917] ? __might_fault+0x138/0x190 [ 1816.839929] ? lock_release+0xc8/0x290 [ 1816.839946] ? __might_fault+0xe0/0x190 [ 1816.839958] ? find_held_lock+0x2b/0x80 [ 1816.839971] ? syscall_trace_enter+0x1cf/0x240 [ 1816.839987] ? lock_release+0xc8/0x290 [ 1816.840009] do_syscall_64+0xbf/0x390 [ 1816.840024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.840038] RIP: 0033:0x7fc56dfaeb19 [ 1816.840048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1816.840061] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1816.840074] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1816.840082] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1816.840090] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1816.840098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1816.840106] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1816.840125] 01:09:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 49) 01:09:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x41, 0xfe, 0x0, 0x0, 0x100a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x0, 0x80, 0x20, 0x0, 0x2, 0x100, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x40000, 0x9, 0x1000, 0x9, 0x5, 0x6, 0x9a84, 0x0, 0x8, 0x0, 0x10001}, r0, 0x0, 0xffffffffffffffff, 0x9) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:11 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:09:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 57) 01:09:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xfeffffff, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x200000000000000}, 0x58) 01:09:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x100000800, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 48) 01:09:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x10000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x40000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x300000000000000}, 0x58) 01:09:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff030000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:11 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r2 = getpgrp(r1) r3 = fork() ptrace(0x10, r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f0000000440)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x30}, &(0x7f0000000140)=""/194, 0xc2, &(0x7f00000002c0)=""/103, &(0x7f00000003c0)=[r2, r1, r3, r4, r1], 0x5, {r5}}, 0x58) fchmod(r0, 0x110) 01:09:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x400000000000000}, 0x58) 01:09:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff0f0000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2020000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x500000000000000}, 0x58) 01:09:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 50) 01:09:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 49) 01:09:24 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:09:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 58) 01:09:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x600000000000000}, 0x58) 01:09:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffc99a3b, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 51) 01:09:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r0 = getpgid(0x0) sched_getattr(r0, &(0x7f0000000300)={0x38}, 0x38, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) dup2(r1, r2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x5, 0x8d, 0x8, 0x4, 0x0, 0x9, 0x40, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x5, 0x9}, 0x6, 0x20, 0x3, 0x6, 0x4, 0x0, 0x8, 0x0, 0x101, 0x0, 0x9}, r0, 0xc, r1, 0x0) 01:09:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffff0300, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x603000000000000}, 0x58) 01:09:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffffff7f, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x700000000000000}, 0x58) 01:09:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8000001000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xfffffffe, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 50) 01:09:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 52) 01:09:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x100000800, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xe00000000000000}, 0x58) 01:09:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x10100000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x480, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) dup2(r0, r1) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1f, 0x20, 0x40, 0x1f, 0x0, 0x2, 0x4002, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2c, 0x1, @perf_config_ext={0x6, 0x3}, 0x81, 0x5, 0x6, 0x5, 0x9, 0x80, 0x6, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x5, r0, 0xb) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 59) 01:09:36 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:09:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x10000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1853.157001] FAULT_INJECTION: forcing a failure. [ 1853.157001] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.158220] CPU: 0 UID: 0 PID: 39626 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1853.158242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1853.158252] Call Trace: [ 1853.158258] [ 1853.158266] dump_stack_lvl+0xfa/0x120 [ 1853.158294] should_fail_ex+0x4d7/0x5e0 [ 1853.158325] should_failslab+0xc2/0x120 [ 1853.158347] __kmalloc_noprof+0xcd/0x680 [ 1853.158373] ? __pfx_shrinker_alloc+0x10/0x10 [ 1853.158399] ? __list_lru_init+0xeb/0x4a0 [ 1853.158430] __list_lru_init+0xeb/0x4a0 [ 1853.158456] alloc_super+0x8e6/0xb20 [ 1853.158494] sget_fc+0xfe/0xb80 [ 1853.158516] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1853.158538] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1853.158559] get_tree_nodev+0x28/0x190 [ 1853.158583] mqueue_get_tree+0xf6/0x140 [ 1853.158608] vfs_get_tree+0x93/0x340 [ 1853.158658] fc_mount_longterm+0x1a/0x280 [ 1853.158688] mq_init_ns+0x42e/0x630 [ 1853.158721] copy_ipcs+0x2dd/0x570 [ 1853.158754] create_new_namespaces+0x210/0xab0 [ 1853.158774] ? security_capable+0x2f/0x90 [ 1853.158804] copy_namespaces+0x45c/0x580 [ 1853.158829] copy_process+0x26d4/0x7410 [ 1853.158851] ? __pfx_perf_trace_lock+0x10/0x10 [ 1853.158873] ? perf_tp_event+0x807/0xe70 [ 1853.158920] ? __pfx_copy_process+0x10/0x10 [ 1853.158942] ? __might_fault+0xe0/0x190 [ 1853.158974] ? _copy_from_user+0x5b/0xd0 [ 1853.159009] kernel_clone+0xea/0x7f0 [ 1853.159037] ? __pfx_kernel_clone+0x10/0x10 [ 1853.159076] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1853.159101] ? ksys_write+0x121/0x240 [ 1853.159120] ? lock_is_held_type+0x9e/0x120 [ 1853.159149] __do_sys_clone3+0x1f5/0x280 [ 1853.159170] ? __pfx___do_sys_clone3+0x10/0x10 [ 1853.159188] ? perf_trace_lock+0x337/0x5d0 [ 1853.159250] ? __pfx_perf_trace_lock+0x10/0x10 [ 1853.159274] ? __might_fault+0x138/0x190 [ 1853.159300] ? __might_fault+0xe0/0x190 [ 1853.159319] ? find_held_lock+0x2b/0x80 [ 1853.159337] ? syscall_trace_enter+0x1cf/0x240 [ 1853.159360] ? lock_release+0xc8/0x290 [ 1853.159403] do_syscall_64+0xbf/0x390 [ 1853.159428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.159444] RIP: 0033:0x7ff6d12e7b19 [ 1853.159458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1853.159473] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1853.159488] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1853.159498] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1853.159507] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1853.159517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1853.159526] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1853.159575] [ 1853.185213] FAULT_INJECTION: forcing a failure. [ 1853.185213] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.188073] CPU: 1 UID: 0 PID: 39629 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1853.188096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1853.188111] Call Trace: [ 1853.188119] [ 1853.188126] dump_stack_lvl+0xfa/0x120 [ 1853.188154] should_fail_ex+0x4d7/0x5e0 [ 1853.188186] should_failslab+0xc2/0x120 [ 1853.188210] __kmalloc_noprof+0xcd/0x680 [ 1853.188233] ? lockdep_init_map_type+0x4b/0x240 [ 1853.188263] ? __list_lru_init+0xeb/0x4a0 [ 1853.188296] __list_lru_init+0xeb/0x4a0 [ 1853.188322] alloc_super+0x92f/0xb20 [ 1853.188363] sget_fc+0xfe/0xb80 [ 1853.188385] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1853.188409] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1853.188433] get_tree_nodev+0x28/0x190 [ 1853.188458] mqueue_get_tree+0xf6/0x140 [ 1853.188485] vfs_get_tree+0x93/0x340 [ 1853.188519] fc_mount_longterm+0x1a/0x280 [ 1853.188550] mq_init_ns+0x42e/0x630 [ 1853.188585] copy_ipcs+0x2dd/0x570 [ 1853.188618] create_new_namespaces+0x210/0xab0 [ 1853.188638] ? security_capable+0x2f/0x90 [ 1853.188670] copy_namespaces+0x45c/0x580 [ 1853.188695] copy_process+0x26d4/0x7410 [ 1853.188719] ? __pfx_perf_trace_lock+0x10/0x10 [ 1853.188742] ? perf_tp_event+0x807/0xe70 [ 1853.188791] ? __pfx_copy_process+0x10/0x10 [ 1853.188813] ? __might_fault+0xe0/0x190 [ 1853.188846] ? _copy_from_user+0x5b/0xd0 [ 1853.188881] kernel_clone+0xea/0x7f0 [ 1853.188909] ? __pfx_kernel_clone+0x10/0x10 [ 1853.188949] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1853.188969] ? ksys_write+0x121/0x240 [ 1853.188990] ? lock_is_held_type+0x9e/0x120 [ 1853.189019] __do_sys_clone3+0x1f5/0x280 [ 1853.189040] ? __pfx___do_sys_clone3+0x10/0x10 [ 1853.189058] ? perf_trace_lock+0x337/0x5d0 [ 1853.189125] ? __pfx_perf_trace_lock+0x10/0x10 [ 1853.189149] ? __might_fault+0x138/0x190 [ 1853.189174] ? __might_fault+0xe0/0x190 [ 1853.189194] ? find_held_lock+0x2b/0x80 [ 1853.189213] ? syscall_trace_enter+0x1cf/0x240 [ 1853.189237] ? lock_release+0xc8/0x290 [ 1853.189280] do_syscall_64+0xbf/0x390 [ 1853.189305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.189322] RIP: 0033:0x7f2be6d39b19 [ 1853.189337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1853.189354] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1853.189369] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1853.189380] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1853.189390] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1853.189401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1853.189410] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1853.189460] 01:09:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x10400000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x40000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x1000000000000000}, 0x58) 01:09:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x100000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 51) 01:09:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2000000000000000}, 0x58) 01:09:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2020000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 53) 01:09:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 54) 01:09:48 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000180)={@loopback, @broadcast}, 0x8) dup2(r0, r1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0xff, 0x1, 0xff, 0x0, 0x40d5, 0x441, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x100, 0x7, 0x8000, 0x1, 0x3, 0x0, 0x8, 0x0, 0x4c384570, 0x0, 0x8}, 0x0, 0xf, r0, 0x1) 01:09:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 52) 01:09:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3f00000000000000}, 0x58) 01:09:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 60) 01:09:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x200000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:48 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:09:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1864.677658] FAULT_INJECTION: forcing a failure. [ 1864.677658] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.678838] CPU: 0 UID: 0 PID: 39867 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1864.678856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.678865] Call Trace: [ 1864.678870] [ 1864.678876] dump_stack_lvl+0xfa/0x120 [ 1864.678900] should_fail_ex+0x4d7/0x5e0 [ 1864.678926] should_failslab+0xc2/0x120 [ 1864.678946] __kmalloc_noprof+0xcd/0x680 [ 1864.678963] ? lockdep_init_map_type+0x4b/0x240 [ 1864.678989] ? __list_lru_init+0xeb/0x4a0 [ 1864.679016] __list_lru_init+0xeb/0x4a0 [ 1864.679037] alloc_super+0x92f/0xb20 [ 1864.679078] sget_fc+0xfe/0xb80 [ 1864.679107] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1864.679126] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1864.679143] get_tree_nodev+0x28/0x190 [ 1864.679163] mqueue_get_tree+0xf6/0x140 [ 1864.679182] vfs_get_tree+0x93/0x340 [ 1864.679206] fc_mount_longterm+0x1a/0x280 [ 1864.679231] mq_init_ns+0x42e/0x630 [ 1864.679258] copy_ipcs+0x2dd/0x570 [ 1864.679285] create_new_namespaces+0x210/0xab0 [ 1864.679301] ? security_capable+0x2f/0x90 [ 1864.679326] copy_namespaces+0x45c/0x580 [ 1864.679347] copy_process+0x26d4/0x7410 [ 1864.679366] ? __pfx_perf_trace_lock+0x10/0x10 [ 1864.679385] ? perf_tp_event+0x807/0xe70 [ 1864.679425] ? __pfx_copy_process+0x10/0x10 [ 1864.679442] ? __might_fault+0xe0/0x190 [ 1864.679468] ? _copy_from_user+0x5b/0xd0 [ 1864.679497] kernel_clone+0xea/0x7f0 [ 1864.679520] ? __pfx_kernel_clone+0x10/0x10 [ 1864.679552] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1864.679568] ? ksys_write+0x121/0x240 [ 1864.679584] ? lock_is_held_type+0x9e/0x120 [ 1864.679608] __do_sys_clone3+0x1f5/0x280 [ 1864.679625] ? __pfx___do_sys_clone3+0x10/0x10 [ 1864.679639] ? perf_trace_lock+0x337/0x5d0 [ 1864.679694] ? __pfx_perf_trace_lock+0x10/0x10 [ 1864.679713] ? __might_fault+0x138/0x190 [ 1864.679733] ? __might_fault+0xe0/0x190 [ 1864.679748] ? find_held_lock+0x2b/0x80 [ 1864.679763] ? syscall_trace_enter+0x1cf/0x240 [ 1864.679782] ? lock_release+0xc8/0x290 [ 1864.679816] do_syscall_64+0xbf/0x390 [ 1864.679836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.679850] RIP: 0033:0x7ff6d12e7b19 [ 1864.679861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.679874] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1864.679886] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1864.679895] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1864.679902] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.679910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.679918] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1864.679957] [ 1864.720987] FAULT_INJECTION: forcing a failure. [ 1864.720987] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.722194] CPU: 0 UID: 0 PID: 39869 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1864.722220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.722231] Call Trace: [ 1864.722239] [ 1864.722247] dump_stack_lvl+0xfa/0x120 [ 1864.722280] should_fail_ex+0x4d7/0x5e0 [ 1864.722322] ? security_inode_alloc+0x3e/0x130 [ 1864.722344] should_failslab+0xc2/0x120 [ 1864.722374] kmem_cache_alloc_noprof+0x80/0x690 [ 1864.722406] ? __pfx_map_id_range_down+0x10/0x10 [ 1864.722464] ? security_inode_alloc+0x3e/0x130 [ 1864.722483] security_inode_alloc+0x3e/0x130 [ 1864.722513] inode_init_always_gfp+0xc94/0xff0 [ 1864.722550] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1864.722576] alloc_inode+0x8d/0x250 [ 1864.722611] new_inode+0x1e/0x160 [ 1864.722645] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1864.722669] mqueue_get_inode+0x2e/0xdf0 [ 1864.722692] ? sget_fc+0x766/0xb80 [ 1864.722742] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1864.722767] mqueue_fill_super+0x14e/0x260 [ 1864.722796] get_tree_nodev+0xdc/0x190 [ 1864.722827] mqueue_get_tree+0xf6/0x140 [ 1864.722858] vfs_get_tree+0x93/0x340 [ 1864.722897] fc_mount_longterm+0x1a/0x280 [ 1864.722936] mq_init_ns+0x42e/0x630 [ 1864.722978] copy_ipcs+0x2dd/0x570 [ 1864.723020] create_new_namespaces+0x210/0xab0 [ 1864.723045] ? security_capable+0x2f/0x90 [ 1864.723081] copy_namespaces+0x45c/0x580 [ 1864.723113] copy_process+0x26d4/0x7410 [ 1864.723142] ? __pfx_perf_trace_lock+0x10/0x10 [ 1864.723171] ? perf_tp_event+0x807/0xe70 [ 1864.723227] ? __pfx_copy_process+0x10/0x10 [ 1864.723256] ? __might_fault+0xe0/0x190 [ 1864.723294] ? _copy_from_user+0x5b/0xd0 [ 1864.723336] kernel_clone+0xea/0x7f0 [ 1864.723372] ? __pfx_kernel_clone+0x10/0x10 [ 1864.723420] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1864.723446] ? ksys_write+0x121/0x240 [ 1864.723471] ? lock_is_held_type+0x9e/0x120 [ 1864.723506] __do_sys_clone3+0x1f5/0x280 [ 1864.723533] ? __pfx___do_sys_clone3+0x10/0x10 [ 1864.723555] ? perf_trace_lock+0x337/0x5d0 [ 1864.723630] ? __pfx_perf_trace_lock+0x10/0x10 [ 1864.723661] ? __might_fault+0x138/0x190 [ 1864.723692] ? __might_fault+0xe0/0x190 [ 1864.723716] ? find_held_lock+0x2b/0x80 [ 1864.723739] ? syscall_trace_enter+0x1cf/0x240 [ 1864.723767] ? lock_release+0xc8/0x290 [ 1864.723768] FAULT_INJECTION: forcing a failure. [ 1864.723768] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.723823] do_syscall_64+0xbf/0x390 [ 1864.723854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.723874] RIP: 0033:0x7fc56dfaeb19 [ 1864.723890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.723909] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1864.723928] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1864.723941] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1864.723953] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.723965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.723976] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1864.724033] [ 1864.772538] CPU: 1 UID: 0 PID: 39876 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1864.772572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.772586] Call Trace: [ 1864.772596] [ 1864.772608] dump_stack_lvl+0xfa/0x120 [ 1864.772646] should_fail_ex+0x4d7/0x5e0 [ 1864.772688] ? mqueue_alloc_inode+0x27/0x50 [ 1864.772717] should_failslab+0xc2/0x120 [ 1864.772753] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 1864.772795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1864.772846] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1864.772880] ? mqueue_alloc_inode+0x27/0x50 [ 1864.772907] mqueue_alloc_inode+0x27/0x50 [ 1864.772935] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1864.772963] alloc_inode+0x67/0x250 [ 1864.773004] new_inode+0x1e/0x160 [ 1864.773045] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1864.773075] mqueue_get_inode+0x2e/0xdf0 [ 1864.773112] ? sget_fc+0x766/0xb80 [ 1864.773150] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1864.773180] mqueue_fill_super+0x14e/0x260 [ 1864.773215] get_tree_nodev+0xdc/0x190 [ 1864.773252] mqueue_get_tree+0xf6/0x140 [ 1864.773290] vfs_get_tree+0x93/0x340 [ 1864.773336] fc_mount_longterm+0x1a/0x280 [ 1864.773381] mq_init_ns+0x42e/0x630 [ 1864.773430] copy_ipcs+0x2dd/0x570 [ 1864.773479] create_new_namespaces+0x210/0xab0 [ 1864.773510] ? security_capable+0x2f/0x90 [ 1864.773554] copy_namespaces+0x45c/0x580 [ 1864.773592] copy_process+0x26d4/0x7410 [ 1864.773626] ? __pfx_perf_trace_lock+0x10/0x10 [ 1864.773659] ? perf_tp_event+0x807/0xe70 [ 1864.773726] ? __pfx_copy_process+0x10/0x10 [ 1864.773760] ? __might_fault+0xe0/0x190 [ 1864.773805] ? _copy_from_user+0x5b/0xd0 [ 1864.773856] kernel_clone+0xea/0x7f0 [ 1864.773898] ? __pfx_kernel_clone+0x10/0x10 [ 1864.773955] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1864.773987] ? ksys_write+0x121/0x240 [ 1864.774018] ? lock_is_held_type+0x9e/0x120 [ 1864.774058] __do_sys_clone3+0x1f5/0x280 [ 1864.774092] ? __pfx___do_sys_clone3+0x10/0x10 [ 1864.774120] ? perf_trace_lock+0x337/0x5d0 [ 1864.774211] ? __pfx_perf_trace_lock+0x10/0x10 [ 1864.774248] ? __might_fault+0x138/0x190 [ 1864.774285] ? __might_fault+0xe0/0x190 [ 1864.774315] ? find_held_lock+0x2b/0x80 [ 1864.774343] ? syscall_trace_enter+0x1cf/0x240 [ 1864.774378] ? lock_release+0xc8/0x290 [ 1864.774441] do_syscall_64+0xbf/0x390 [ 1864.774478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.774504] RIP: 0033:0x7f2be6d39b19 [ 1864.774524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.774548] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1864.774572] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1864.774589] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1864.774606] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.774620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.774634] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1864.774702] 01:09:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x300000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 53) 01:09:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 61) 01:09:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4000000000000000}, 0x58) 01:09:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6200000000000000}, 0x58) 01:09:48 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/mei', 0xc02, 0x5b) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$setlease(r2, 0x400, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0x40bc5311, &(0x7f00000001c0)={0x0, 0x0, 'client1\x00', 0x0, "9debdd2d1ab718c7", "0709194f39a8b43208ce9e5f89b8e30147871d8f6af0d6df83bfabf1d782ec43"}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0xb7, 0x3, 0x8, 0x0, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0x8}, 0x4a, 0x8, 0x8, 0x3, 0xfffffffffffff7b0, 0xc0, 0x200, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x10, r0, 0xa) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) clone3(&(0x7f0000000580)={0x4800000, &(0x7f0000000180), &(0x7f00000003c0)=0x0, &(0x7f0000000400), {0x25}, &(0x7f0000000440)=""/51, 0x33, &(0x7f0000000480)=""/172, &(0x7f0000000540)=[0x0, r4, 0x0, r4, r4, r4], 0x6, {r1}}, 0x58) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x200000, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x20, 0x63, 0x5, 0x9, 0x0, 0xffffffff, 0x9803, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xad, 0x2, @perf_bp, 0x4001, 0x800, 0x4, 0x1, 0x4, 0x7bb, 0x0, 0x0, 0x0, 0x0, 0x9dab}, r5, 0x3, r6, 0x1) 01:09:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7810000000000000}, 0x58) 01:09:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 55) 01:09:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8000001000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x400000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 62) 01:09:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7c01000000000000}, 0x58) 01:09:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 54) 01:09:58 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:09:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x500000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1875.062419] FAULT_INJECTION: forcing a failure. [ 1875.062419] name failslab, interval 1, probability 0, space 0, times 0 [ 1875.064382] CPU: 0 UID: 0 PID: 40219 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1875.064423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1875.064437] Call Trace: [ 1875.064448] [ 1875.064459] dump_stack_lvl+0xfa/0x120 [ 1875.064497] should_fail_ex+0x4d7/0x5e0 [ 1875.064539] ? __d_alloc+0x31/0xa10 [ 1875.064567] should_failslab+0xc2/0x120 [ 1875.064603] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 1875.064655] ? do_raw_spin_unlock+0x53/0x220 [ 1875.064705] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1875.064739] ? __d_alloc+0x31/0xa10 [ 1875.064768] __d_alloc+0x31/0xa10 [ 1875.064798] ? mqueue_get_inode+0x1f6/0xdf0 [ 1875.064837] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1875.064867] d_make_root+0x42/0x90 [ 1875.064901] mqueue_fill_super+0x176/0x260 [ 1875.064937] get_tree_nodev+0xdc/0x190 [ 1875.064975] mqueue_get_tree+0xf6/0x140 [ 1875.065012] vfs_get_tree+0x93/0x340 [ 1875.065057] fc_mount_longterm+0x1a/0x280 [ 1875.065111] mq_init_ns+0x42e/0x630 [ 1875.065160] copy_ipcs+0x2dd/0x570 [ 1875.065209] create_new_namespaces+0x210/0xab0 [ 1875.065239] ? security_capable+0x2f/0x90 [ 1875.065283] copy_namespaces+0x45c/0x580 [ 1875.065320] copy_process+0x26d4/0x7410 [ 1875.065354] ? __pfx_perf_trace_lock+0x10/0x10 [ 1875.065386] ? perf_tp_event+0x807/0xe70 [ 1875.065453] ? __pfx_copy_process+0x10/0x10 [ 1875.065487] ? __might_fault+0xe0/0x190 [ 1875.065533] ? _copy_from_user+0x5b/0xd0 [ 1875.065583] kernel_clone+0xea/0x7f0 [ 1875.065625] ? __pfx_kernel_clone+0x10/0x10 [ 1875.065682] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1875.065713] ? ksys_write+0x121/0x240 [ 1875.065744] ? lock_is_held_type+0x9e/0x120 [ 1875.065785] __do_sys_clone3+0x1f5/0x280 [ 1875.065818] ? __pfx___do_sys_clone3+0x10/0x10 [ 1875.065846] ? perf_trace_lock+0x337/0x5d0 [ 1875.065937] ? __pfx_perf_trace_lock+0x10/0x10 [ 1875.065974] ? __might_fault+0x138/0x190 [ 1875.066011] ? __might_fault+0xe0/0x190 [ 1875.066041] ? find_held_lock+0x2b/0x80 [ 1875.066068] ? syscall_trace_enter+0x1cf/0x240 [ 1875.066103] ? lock_release+0xc8/0x290 [ 1875.066165] do_syscall_64+0xbf/0x390 [ 1875.066202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.066227] RIP: 0033:0x7fc56dfaeb19 01:09:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8004000000000000}, 0x58) [ 1875.066248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1875.066271] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1875.066295] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1875.066311] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1875.066326] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1875.066340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1875.066355] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1875.066423] 01:09:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x600000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1875.122678] FAULT_INJECTION: forcing a failure. [ 1875.122678] name failslab, interval 1, probability 0, space 0, times 0 [ 1875.125281] CPU: 0 UID: 0 PID: 40218 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1875.125315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1875.125330] Call Trace: [ 1875.125339] [ 1875.125350] dump_stack_lvl+0xfa/0x120 [ 1875.125387] should_fail_ex+0x4d7/0x5e0 [ 1875.125428] ? mqueue_alloc_inode+0x27/0x50 [ 1875.125456] should_failslab+0xc2/0x120 [ 1875.125490] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 1875.125532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1875.125580] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1875.125612] ? mqueue_alloc_inode+0x27/0x50 [ 1875.125639] mqueue_alloc_inode+0x27/0x50 [ 1875.125666] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1875.125693] alloc_inode+0x67/0x250 [ 1875.125736] new_inode+0x1e/0x160 [ 1875.125778] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1875.125808] mqueue_get_inode+0x2e/0xdf0 [ 1875.125837] ? sget_fc+0x766/0xb80 [ 1875.125874] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1875.125903] mqueue_fill_super+0x14e/0x260 [ 1875.125938] get_tree_nodev+0xdc/0x190 [ 1875.125975] mqueue_get_tree+0xf6/0x140 [ 1875.126012] vfs_get_tree+0x93/0x340 [ 1875.126057] fc_mount_longterm+0x1a/0x280 [ 1875.126109] mq_init_ns+0x42e/0x630 [ 1875.126157] copy_ipcs+0x2dd/0x570 [ 1875.126206] create_new_namespaces+0x210/0xab0 [ 1875.126236] ? security_capable+0x2f/0x90 [ 1875.126280] copy_namespaces+0x45c/0x580 [ 1875.126317] copy_process+0x26d4/0x7410 [ 1875.126351] ? __pfx_perf_trace_lock+0x10/0x10 [ 1875.126384] ? perf_tp_event+0x807/0xe70 [ 1875.126450] ? __pfx_copy_process+0x10/0x10 [ 1875.126485] ? __might_fault+0xe0/0x190 [ 1875.126530] ? _copy_from_user+0x5b/0xd0 [ 1875.126579] kernel_clone+0xea/0x7f0 [ 1875.126621] ? __pfx_kernel_clone+0x10/0x10 [ 1875.126678] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1875.126709] ? ksys_write+0x121/0x240 [ 1875.126739] ? lock_is_held_type+0x9e/0x120 [ 1875.126779] __do_sys_clone3+0x1f5/0x280 [ 1875.126812] ? __pfx___do_sys_clone3+0x10/0x10 [ 1875.126866] ? perf_trace_lock+0x337/0x5d0 [ 1875.126957] ? __pfx_perf_trace_lock+0x10/0x10 [ 1875.126994] ? __might_fault+0x138/0x190 [ 1875.127031] ? __might_fault+0xe0/0x190 [ 1875.127060] ? find_held_lock+0x2b/0x80 [ 1875.127088] ? syscall_trace_enter+0x1cf/0x240 [ 1875.127123] ? lock_release+0xc8/0x290 [ 1875.127185] do_syscall_64+0xbf/0x390 [ 1875.127221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.127247] RIP: 0033:0x7ff6d12e7b19 [ 1875.127267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1875.127289] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1875.127313] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1875.127329] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1875.127344] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1875.127360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1875.127375] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1875.127444] 01:09:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x10100000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x700000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:59 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:09:59 executing program 4: r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x608000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:09:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 63) 01:10:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 56) 01:10:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 55) 01:10:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x1000000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xfeffffff00000000}, 0x58) 01:10:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x10400000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:11 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r7, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) io_submit(r1, 0x7, &(0x7f0000000840)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3f, r2, &(0x7f0000000100)="a0fae66379e211d5b3207527ca3fcd53780edea3cebec855f2d24103a7e4839ac1217a96af27104485c14c62a9b1ecd4dd38dc348902f9affc95f7288a8d113f9418807b8070f09799", 0x49, 0x1, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x20, r3, &(0x7f00000002c0)="d2d4bd5b95e97ac194fbd96f4ce1b2aaf7128d9d3eec7199196b07399ff1ffc0f10c368ac59740520bf87618b2f195969685870009ad2533ce8a48960c0fa714c9d95bc68e37cbffe09710430c23be90cecc9ff8f15cb5cd2bc81f194d65698d05275560b1f8c86976f606d47768ae88b53c0101d3213d9eb08857e8cc5431b5461ceda6904e1f5cf854e95693a9a953a9e69fe7cd6f15a8e14d892b0bad036bba7b75e97fd876b261ac5b3e431afacd932dc9ae5623e1ec2529c4717115c787e293da19bc2a46fe1ecfeef36b0c63", 0xcf, 0x1, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8001, r4, &(0x7f00000003c0)="40f72b7e77a6fc07734977bb7e9cc90d364c4314d04ebb19affb268831c60af15a88a2d6d3cbae0089c1301de3e1d1b970b44440c35c5ba4bb23f4f3b5533385c804bba08ee52bf9f6d90050feab481a50e55852f1df304b79b6e8ab3c69e8b759ce55ebf6813691a8f9707cf0ec2694c0478d2f92804fd1c19be07dc41912e2a4b9ed2ea9bf8ee31eb47c179b8957f4c99f4d981199a81bb3fabf1f0af2b525505a6c70acb18de056ea4e7e17433577e7d70fe97bf62568a7f55fb6a15bb0e529413b2fb74962fe04a083a7fb439ac77c945434379bdb9ec62bf5a408ecd8a9c9bf77e9cdc29587695a089e64a1dbd34eec", 0xf2, 0x7fff, 0x0, 0x5, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, r6, &(0x7f0000000500)="22048f21c7bc9883dad3bf51af3ca2d10733d04790dfdb3fe26da2a75d92860eb979396799c73bee567663a7ead66c0ffbeace4cebdc0dabeef22e773d4f62e404cf63acc9cb2ac77dfe0d9be481bb65fe2fc420364277a805cf39d4e53b350151f936dea10a60670e0672251957bf598a962e4636000af01bc5b7e18e11", 0x7e, 0x6, 0x0, 0x0, r7}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x9, r8, &(0x7f00000005c0)="680ed506d1627e8560f8ce977af22c01f2a76b5f0a7779a5508a4b06b237b4f6a817edd377620ae066139d2861fd4b67ee9fa7786aebb33f0aa5d4a97a2a7cd3dcf62c01ae46a5d7e5a026759107123fd62383a1f19185a338054f232bf233c5e5f6bcfeafa2013dcbe03e66c2e2f051744d23a0e92f930afb9aa3", 0x7b, 0x401}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x332, r0, &(0x7f0000000680)="db838252b895843f5a9ba7fbd4d4271b3725ecbd85bbf19f2cf037f444d9c14fda39a87ce5f9be6661000d6a36feb94e8b9bd7ec256b5be63d6ff0f8fd3ecf3dac5bcf8f702b49c1deebfe500299a5e564831b8bb350a3ad32f243fb05ceee00cc60f70b775fc99019c99951ecbd1d05aca3cb1db9a2605f4e", 0x79, 0x3f3, 0x0, 0x1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x8, r9, &(0x7f0000000740)="9f8766c3cabd9a1a9c03ed1e5c8aa9beeb805ff50ac803ed57c548d40481722fc69e983abbab68a1d494a2daade4210a4f0325b7fea891e0cf3a223b5bf1a83e143efc17636fe7027cc2cf61f1bcfe2a7888faa03e60a2b9f5abe62a6d3ac62a5492b9eb40e50c0b2ea38e20c691ee4942225e1fe5e2cacb85317cad1cea3e513c", 0x81, 0x0, 0x0, 0x1}]) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x39}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x48) 01:10:11 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:10:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 64) [ 1887.830519] FAULT_INJECTION: forcing a failure. [ 1887.830519] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.831494] CPU: 1 UID: 0 PID: 40556 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1887.831511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1887.831520] Call Trace: [ 1887.831525] [ 1887.831531] dump_stack_lvl+0xfa/0x120 [ 1887.831555] should_fail_ex+0x4d7/0x5e0 [ 1887.831581] should_failslab+0xc2/0x120 [ 1887.831601] __kmalloc_noprof+0xcd/0x680 [ 1887.831623] ? perf_trace_lock+0x337/0x5d0 [ 1887.831642] ? memcg_list_lru_alloc+0x4da/0x760 [ 1887.831668] memcg_list_lru_alloc+0x4da/0x760 [ 1887.831701] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1887.831735] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 1887.831765] __memcg_slab_post_alloc_hook+0x130/0x9e0 [ 1887.831784] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1887.831807] ? __create_object+0x59/0x80 [ 1887.831833] kmem_cache_alloc_lru_noprof+0x512/0x690 [ 1887.831855] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1887.831881] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1887.831899] ? mqueue_alloc_inode+0x27/0x50 [ 1887.831913] mqueue_alloc_inode+0x27/0x50 [ 1887.831926] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1887.831941] alloc_inode+0x67/0x250 [ 1887.831962] new_inode+0x1e/0x160 [ 1887.831984] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1887.831999] mqueue_get_inode+0x2e/0xdf0 [ 1887.832014] ? sget_fc+0x766/0xb80 [ 1887.832035] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1887.832050] mqueue_fill_super+0x14e/0x260 [ 1887.832068] get_tree_nodev+0xdc/0x190 [ 1887.832088] mqueue_get_tree+0xf6/0x140 [ 1887.832112] vfs_get_tree+0x93/0x340 [ 1887.832137] fc_mount_longterm+0x1a/0x280 [ 1887.832161] mq_init_ns+0x42e/0x630 [ 1887.832187] copy_ipcs+0x2dd/0x570 [ 1887.832214] create_new_namespaces+0x210/0xab0 [ 1887.832229] ? security_capable+0x2f/0x90 [ 1887.832255] copy_namespaces+0x45c/0x580 [ 1887.832275] copy_process+0x26d4/0x7410 [ 1887.832294] ? __pfx_perf_trace_lock+0x10/0x10 [ 1887.832310] ? perf_tp_event+0x807/0xe70 [ 1887.832349] ? __pfx_copy_process+0x10/0x10 [ 1887.832368] ? __might_fault+0xe0/0x190 [ 1887.832394] ? _copy_from_user+0x5b/0xd0 [ 1887.832423] kernel_clone+0xea/0x7f0 [ 1887.832446] ? __pfx_kernel_clone+0x10/0x10 [ 1887.832478] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1887.832494] ? ksys_write+0x121/0x240 [ 1887.832510] ? lock_is_held_type+0x9e/0x120 [ 1887.832533] __do_sys_clone3+0x1f5/0x280 [ 1887.832550] ? __pfx___do_sys_clone3+0x10/0x10 [ 1887.832564] ? perf_trace_lock+0x337/0x5d0 [ 1887.832611] ? __pfx_perf_trace_lock+0x10/0x10 [ 1887.832629] ? __might_fault+0x138/0x190 [ 1887.832648] ? __might_fault+0xe0/0x190 [ 1887.832663] ? find_held_lock+0x2b/0x80 [ 1887.832677] ? syscall_trace_enter+0x1cf/0x240 [ 1887.832696] ? lock_release+0xc8/0x290 [ 1887.832727] do_syscall_64+0xbf/0x390 [ 1887.832747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.832760] RIP: 0033:0x7f2be6d39b19 [ 1887.832770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1887.832782] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1887.832795] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1887.832803] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1887.832811] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1887.832819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1887.832826] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1887.832860] 01:10:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff03000000000000}, 0x58) 01:10:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2000000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x100000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2b00000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 56) 01:10:22 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:10:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 57) 01:10:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff0f000000000000}, 0x58) 01:10:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 65) 01:10:22 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xfa, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc001, 0x0, 0xa0000000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, r0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000000)=""/19, 0x0}, 0x58) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)={0x3, 0xfb, "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"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xfa}}, './file0\x00'}) waitid$P_PIDFD(0x3, r2, &(0x7f0000000100), 0x1, 0x0) [ 1898.955961] FAULT_INJECTION: forcing a failure. [ 1898.955961] name failslab, interval 1, probability 0, space 0, times 0 [ 1898.957992] CPU: 0 UID: 0 PID: 40789 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1898.958025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1898.958039] Call Trace: [ 1898.958049] [ 1898.958060] dump_stack_lvl+0xfa/0x120 [ 1898.958097] should_fail_ex+0x4d7/0x5e0 [ 1898.958148] should_failslab+0xc2/0x120 [ 1898.958183] __kmalloc_noprof+0xcd/0x680 [ 1898.958224] ? perf_trace_lock+0x337/0x5d0 [ 1898.958259] ? memcg_list_lru_alloc+0x4da/0x760 [ 1898.958305] memcg_list_lru_alloc+0x4da/0x760 [ 1898.958363] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1898.958424] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 1898.958476] __memcg_slab_post_alloc_hook+0x130/0x9e0 [ 1898.958511] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1898.958554] ? __create_object+0x59/0x80 [ 1898.958602] kmem_cache_alloc_lru_noprof+0x512/0x690 [ 1898.958644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1898.958692] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1898.958726] ? mqueue_alloc_inode+0x27/0x50 [ 1898.958753] mqueue_alloc_inode+0x27/0x50 [ 1898.958780] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1898.958808] alloc_inode+0x67/0x250 [ 1898.958848] new_inode+0x1e/0x160 [ 1898.958889] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1898.958919] mqueue_get_inode+0x2e/0xdf0 [ 1898.958949] ? sget_fc+0x766/0xb80 [ 1898.958986] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1898.959016] mqueue_fill_super+0x14e/0x260 [ 1898.959066] get_tree_nodev+0xdc/0x190 [ 1898.959104] mqueue_get_tree+0xf6/0x140 [ 1898.959141] vfs_get_tree+0x93/0x340 [ 1898.959186] fc_mount_longterm+0x1a/0x280 [ 1898.959230] mq_init_ns+0x42e/0x630 [ 1898.959279] copy_ipcs+0x2dd/0x570 [ 1898.959327] create_new_namespaces+0x210/0xab0 [ 1898.959356] ? security_capable+0x2f/0x90 [ 1898.959400] copy_namespaces+0x45c/0x580 [ 1898.959436] copy_process+0x26d4/0x7410 [ 1898.959469] ? __pfx_perf_trace_lock+0x10/0x10 [ 1898.959500] ? perf_tp_event+0x807/0xe70 [ 1898.959566] ? __pfx_copy_process+0x10/0x10 [ 1898.959600] ? __might_fault+0xe0/0x190 [ 1898.959645] ? _copy_from_user+0x5b/0xd0 [ 1898.959694] kernel_clone+0xea/0x7f0 [ 1898.959736] ? __pfx_kernel_clone+0x10/0x10 [ 1898.959792] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1898.959823] ? ksys_write+0x121/0x240 [ 1898.959853] ? lock_is_held_type+0x9e/0x120 [ 1898.959893] __do_sys_clone3+0x1f5/0x280 [ 1898.959926] ? __pfx___do_sys_clone3+0x10/0x10 [ 1898.959953] ? perf_trace_lock+0x337/0x5d0 [ 1898.960043] ? __pfx_perf_trace_lock+0x10/0x10 [ 1898.960079] ? __might_fault+0x138/0x190 [ 1898.960117] ? __might_fault+0xe0/0x190 [ 1898.960146] ? find_held_lock+0x2b/0x80 [ 1898.960174] ? syscall_trace_enter+0x1cf/0x240 [ 1898.960208] ? lock_release+0xc8/0x290 [ 1898.960270] do_syscall_64+0xbf/0x390 [ 1898.960306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.960331] RIP: 0033:0x7ff6d12e7b19 [ 1898.960352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1898.960376] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1898.960399] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1898.960416] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1898.960431] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1898.960446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1898.960460] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1898.960527] 01:10:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffc99a3b00000000}, 0x58) 01:10:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3f00000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x200000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 57) 01:10:23 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:10:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffff030000000000}, 0x58) 01:10:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4000000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffffff7f00000000}, 0x58) 01:10:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 58) 01:10:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x300000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xffffffff00000000}, 0x58) 01:10:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x6200000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x57) 01:10:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x400000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 66) 01:10:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 59) 01:10:34 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:10:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x500000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff7ffffffffffc}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 1: r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x7f, &(0x7f00000003c0)="63ec7c71a93c16d1d8a880cb2d51cca54af6d13bcd72248d7bc19894dfb74fdaa16f49b3679e5304cab2bca37ce12260324029805ec5e079e5dfbcfc1bea289409af5776d6b30d9b09035c8aef45ebfb1fbbb2f41068d5704eae15b1f971ec09479713802a12feda6c710210ec0ba1d761a89dc5e86eeeb6b7770707ff49c87b5cef53a2ba590e398c4c8bf63dd7d7b95c9e267ed4e0044febb0014aaec078e8a0ab9c6edbc6aba2e4010cc098fddb24d61f871e50c767e87b90919a") ptrace$setregs(0x3, r0, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a") sched_setattr(r0, &(0x7f0000000100)={0x38, 0x5, 0x41, 0x1f, 0x2, 0x1f, 0x0, 0x40, 0x2, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r1 = getpgid(0x0) sched_getattr(r1, &(0x7f0000000300)={0x38}, 0x38, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0xf7, 0x20, 0x3f, 0x0, 0xffffffffffff17ab, 0x22, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1a7a, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x1c00, 0x0, 0xd9, 0xe, 0x5, 0x7, 0x7, 0x0, 0x6, 0x0, 0x3ff}, r1, 0x3, 0xffffffffffffffff, 0x3) 01:10:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8004000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 58) 01:10:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x50f000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xac02000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x600000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xec03000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x700000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xf00000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xfeffffff00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2000000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 67) 01:10:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 01:10:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff03000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:47 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:10:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 60) 01:10:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x2b00000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 59) [ 1923.790039] FAULT_INJECTION: forcing a failure. [ 1923.790039] name failslab, interval 1, probability 0, space 0, times 0 [ 1923.796425] CPU: 1 UID: 0 PID: 41395 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1923.796458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1923.796471] Call Trace: [ 1923.796480] [ 1923.796491] dump_stack_lvl+0xfa/0x120 [ 1923.796527] should_fail_ex+0x4d7/0x5e0 [ 1923.796566] ? security_inode_alloc+0x3e/0x130 [ 1923.796590] should_failslab+0xc2/0x120 [ 1923.796624] kmem_cache_alloc_noprof+0x80/0x690 [ 1923.796658] ? __pfx_map_id_range_down+0x10/0x10 [ 1923.796718] ? security_inode_alloc+0x3e/0x130 [ 1923.796741] security_inode_alloc+0x3e/0x130 [ 1923.796774] inode_init_always_gfp+0xc94/0xff0 [ 1923.796814] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1923.796843] alloc_inode+0x8d/0x250 [ 1923.796880] new_inode+0x1e/0x160 [ 1923.796918] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1923.796946] mqueue_get_inode+0x2e/0xdf0 [ 1923.796973] ? sget_fc+0x766/0xb80 [ 1923.797009] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1923.797037] mqueue_fill_super+0x14e/0x260 [ 1923.797069] get_tree_nodev+0xdc/0x190 [ 1923.797112] mqueue_get_tree+0xf6/0x140 [ 1923.797146] vfs_get_tree+0x93/0x340 [ 1923.797188] fc_mount_longterm+0x1a/0x280 [ 1923.797231] mq_init_ns+0x42e/0x630 [ 1923.797276] copy_ipcs+0x2dd/0x570 [ 1923.797321] create_new_namespaces+0x210/0xab0 [ 1923.797350] ? security_capable+0x2f/0x90 [ 1923.797390] copy_namespaces+0x45c/0x580 [ 1923.797425] copy_process+0x26d4/0x7410 [ 1923.797458] ? __pfx_perf_trace_lock+0x10/0x10 [ 1923.797489] ? perf_tp_event+0x807/0xe70 [ 1923.797551] ? __pfx_copy_process+0x10/0x10 [ 1923.797583] ? __might_fault+0xe0/0x190 [ 1923.797626] ? _copy_from_user+0x5b/0xd0 [ 1923.797673] kernel_clone+0xea/0x7f0 [ 1923.797712] ? __pfx_kernel_clone+0x10/0x10 [ 1923.797765] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1923.797794] ? ksys_write+0x121/0x240 [ 1923.797823] ? lock_is_held_type+0x9e/0x120 [ 1923.797861] __do_sys_clone3+0x1f5/0x280 [ 1923.797892] ? __pfx___do_sys_clone3+0x10/0x10 [ 1923.797918] ? perf_trace_lock+0x337/0x5d0 [ 1923.798003] ? __pfx_perf_trace_lock+0x10/0x10 [ 1923.798037] ? __might_fault+0x138/0x190 [ 1923.798072] ? __might_fault+0xe0/0x190 [ 1923.798100] ? find_held_lock+0x2b/0x80 [ 1923.798126] ? syscall_trace_enter+0x1cf/0x240 [ 1923.798158] ? lock_release+0xc8/0x290 [ 1923.798216] do_syscall_64+0xbf/0x390 [ 1923.798251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.798274] RIP: 0033:0x7f2be6d39b19 [ 1923.798294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1923.798317] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1923.798339] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1923.798355] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1923.798369] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1923.798382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1923.798396] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1923.798459] 01:10:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x3f00000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff0f000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x4000000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 61) 01:10:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffc99a3b00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:47 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:10:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x5810000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffff030000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 60) 01:10:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 68) 01:10:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 61) 01:10:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1f, 0xff, 0x0, 0x1, 0x0, 0x400000000000000, 0x1110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}, 0x2080, 0x0, 0x0, 0x8, 0x100000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x6200000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffffff7f00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:10:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 62) 01:10:59 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) [ 1935.543379] FAULT_INJECTION: forcing a failure. [ 1935.543379] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.544021] FAULT_INJECTION: forcing a failure. [ 1935.544021] name failslab, interval 1, probability 0, space 0, times 0 [ 1935.544411] CPU: 0 UID: 0 PID: 41734 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1935.544430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.544438] Call Trace: [ 1935.544443] [ 1935.544449] dump_stack_lvl+0xfa/0x120 [ 1935.544472] should_fail_ex+0x4d7/0x5e0 [ 1935.544495] ? alloc_vfsmnt+0x23/0x6e0 [ 1935.544513] should_failslab+0xc2/0x120 [ 1935.544531] kmem_cache_alloc_noprof+0x80/0x690 [ 1935.544553] ? lock_release+0xc8/0x290 [ 1935.544582] ? alloc_vfsmnt+0x23/0x6e0 [ 1935.544597] alloc_vfsmnt+0x23/0x6e0 [ 1935.544619] fc_mount_longterm+0x15a/0x280 [ 1935.544641] mq_init_ns+0x42e/0x630 [ 1935.544667] copy_ipcs+0x2dd/0x570 [ 1935.544692] create_new_namespaces+0x210/0xab0 [ 1935.544707] ? security_capable+0x2f/0x90 [ 1935.544730] copy_namespaces+0x45c/0x580 [ 1935.544749] copy_process+0x26d4/0x7410 [ 1935.544766] ? __pfx_perf_trace_lock+0x10/0x10 [ 1935.544784] ? perf_tp_event+0x807/0xe70 [ 1935.544818] ? __pfx_copy_process+0x10/0x10 [ 1935.544835] ? __might_fault+0xe0/0x190 [ 1935.544858] ? _copy_from_user+0x5b/0xd0 [ 1935.544884] kernel_clone+0xea/0x7f0 [ 1935.544905] ? __pfx_kernel_clone+0x10/0x10 [ 1935.544933] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1935.544949] ? ksys_write+0x121/0x240 [ 1935.544965] ? lock_is_held_type+0x9e/0x120 [ 1935.544986] __do_sys_clone3+0x1f5/0x280 [ 1935.545003] ? __pfx___do_sys_clone3+0x10/0x10 [ 1935.545017] ? perf_trace_lock+0x337/0x5d0 [ 1935.545062] ? __pfx_perf_trace_lock+0x10/0x10 [ 1935.545081] ? __might_fault+0x138/0x190 [ 1935.545105] ? __might_fault+0xe0/0x190 [ 1935.545120] ? find_held_lock+0x2b/0x80 [ 1935.545134] ? syscall_trace_enter+0x1cf/0x240 [ 1935.545152] ? lock_release+0xc8/0x290 [ 1935.545183] do_syscall_64+0xbf/0x390 [ 1935.545201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.545215] RIP: 0033:0x7fc56dfaeb19 [ 1935.545225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.545238] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1935.545250] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1935.545258] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1935.545266] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.545274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.545281] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1935.545315] [ 1935.565005] CPU: 1 UID: 0 PID: 41738 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1935.565022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.565030] Call Trace: [ 1935.565036] [ 1935.565042] dump_stack_lvl+0xfa/0x120 [ 1935.565065] should_fail_ex+0x4d7/0x5e0 [ 1935.565088] ? __d_alloc+0x31/0xa10 [ 1935.565108] should_failslab+0xc2/0x120 [ 1935.565127] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 1935.565154] ? do_raw_spin_unlock+0x53/0x220 [ 1935.565181] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1935.565199] ? __d_alloc+0x31/0xa10 [ 1935.565214] __d_alloc+0x31/0xa10 [ 1935.565229] ? mqueue_get_inode+0x1f6/0xdf0 [ 1935.565249] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1935.565265] d_make_root+0x42/0x90 [ 1935.565282] mqueue_fill_super+0x176/0x260 [ 1935.565300] get_tree_nodev+0xdc/0x190 [ 1935.565320] mqueue_get_tree+0xf6/0x140 [ 1935.565338] vfs_get_tree+0x93/0x340 [ 1935.565362] fc_mount_longterm+0x1a/0x280 [ 1935.565385] mq_init_ns+0x42e/0x630 [ 1935.565410] copy_ipcs+0x2dd/0x570 [ 1935.565434] create_new_namespaces+0x210/0xab0 [ 1935.565450] ? security_capable+0x2f/0x90 [ 1935.565473] copy_namespaces+0x45c/0x580 [ 1935.565492] copy_process+0x26d4/0x7410 [ 1935.565510] ? __pfx_perf_trace_lock+0x10/0x10 [ 1935.565527] ? perf_tp_event+0x807/0xe70 [ 1935.565562] ? __pfx_copy_process+0x10/0x10 [ 1935.565579] ? __might_fault+0xe0/0x190 [ 1935.565602] ? _copy_from_user+0x5b/0xd0 [ 1935.565628] kernel_clone+0xea/0x7f0 [ 1935.565649] ? __pfx_kernel_clone+0x10/0x10 [ 1935.565678] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1935.565693] ? ksys_write+0x121/0x240 [ 1935.565708] ? lock_is_held_type+0x9e/0x120 [ 1935.565730] __do_sys_clone3+0x1f5/0x280 [ 1935.565747] ? __pfx___do_sys_clone3+0x10/0x10 [ 1935.565761] ? perf_trace_lock+0x337/0x5d0 [ 1935.565807] ? __pfx_perf_trace_lock+0x10/0x10 [ 1935.565825] ? __might_fault+0x138/0x190 [ 1935.565844] ? __might_fault+0xe0/0x190 [ 1935.565859] ? find_held_lock+0x2b/0x80 [ 1935.565873] ? syscall_trace_enter+0x1cf/0x240 [ 1935.565891] ? lock_release+0xc8/0x290 [ 1935.565922] do_syscall_64+0xbf/0x390 [ 1935.565941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.565955] RIP: 0033:0x7f2be6d39b19 [ 1935.565966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.565978] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1935.565994] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1935.566003] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1935.566011] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.566018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.566025] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1935.566059] 01:11:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 69) 01:11:11 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:11:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x8004000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 63) 01:11:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffffffff00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 62) 01:11:11 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000072100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000072300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000073300)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000073500)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000074500)={{0x0, 0x80000001, 0x45d, 0x400, 0x5, 0x101, 0x9, 0x9, 0xffffffff, 0xff, 0x2, 0x1f, 0xfffffffffffffffb, 0x2, 0x401}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000075500)={{0x0, 0xdf00, 0xc0b, 0x3, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x8000, 0x5, 0x0, 0xbe4, 0x5, 0x100, 0x0, 0x0, 0x10001}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000076500)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "0270bf0b49c1a2"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000077500)={{0x0, 0x2, 0x7, 0x7fff, 0xffffffffffff7fff, 0x9, 0x4798000000000, 0x1ff, 0x800, 0x80000000, 0x1, 0x1ff, 0x2, 0x1, 0x10001}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000078500)={0x11c5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "bed2a187c736ea"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000079500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000079700)={0xed, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7d, "6be00dfa3e42a2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000007a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007a900)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x58, "af9c9a2d86328f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYBLOB="d10500000000000002000000000000000900000000000000ff5900000000008000040000000000001f4fdf34000000000600000000040000ff010000060000001bffc65100800000000000000000000000000000070000000000000006000000000000001000"/124]) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000007b980)={{0x0, 0x92, 0x7, 0x19f, 0x1, 0x5, 0x1ff, 0x1f, 0x9, 0x80, 0x4, 0x10000, 0xdd5e, 0x101, 0xff}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000007c980)={0x0, 0x0, "9982b56ff86cbf001d215dc38d50b4970cab7a036f6fe3e1a3baf46e0082a3ddd8cd7aad13f765b2627f95cc249f09948647f592f5cc8941dd5f6af5a455eac0c5c36d317b257c9f2eb0cdf401bbcf4d21d93ffc9fc4a2b6a51a1e0d4f5afc3de98dc6d6b487bdf7a2c83698e323297919a1d57bcc864f974d076883326677298266e6ecfec781bad8a72e28eab7a2e256383856c39873fd4429152e18b8048f6b7f1ef11177befa7e3d9514a65a01dea2088208dc4f1164b491c12a2c7e4c5d1dfa91564e1d3fe95799beed44c4ca689c4aa7883c2719fc47765b4e9132e0d0d4c0a40999dd957378fdca88a1e5b3a6e411a3109f915a155fd9a5a52614e2c1", "e47537ccda0d27561693dc0b8d5c2e20302eb4dbe347b7bf560f0342dfe838ea1530287dcf890ff870005cf5b27d314389a0aeb6edd5bd2674954ad89c12a90775de6e4a00677aa6445b85dac8fb081f1469c260b5273516a65267b6a4f60cc27516aa6aa7879a51aaf14497009c48d86b293778123053d8f9569b436c25e5312641f9c82ef6453ce709967c414669ca9b08752d4274a2bb8b5dfb29e113ddd798279be5327602105f2493e8b455c15ae64805c8223dfab4e0072fc213b1bba79f64ecb708c655ab9d84fe9ea0b6357084799959f9d802f54b4359f53fe396334a8e3fb28c6a9420f0b2e3fe5090216bcccb3c40899a677fef3abeed29c5286ffdf519a8866a12f8a5dcc502c761b19b8059a3377baef22f6cf36555bf22176bb1cdb73b857e02ca9aa683b3adcc7b893a8f361cc24b4b858034433f6ca1a65bdb98f937e3d309f43545170402861d10f3150a214a459fe12fef36c6744bb078178029c27ed685f9a3f707ffc24f710f32e4fa8b0e617b09522d952270ce17f6ec628feadb91c620fc985f2fcab41a7726f2cb3aa58e603ae03cf3564104b49a46c084155cf24196bc472d484aba52da775cca518a4c941060ba21d0d2421b980e6e05fd6aeb7493980431a9dbb487377326b483050f2fd9de03fc2720079d216e4bfa5331a0072adf02e63b4b781becf7e3013df6b57fc239a8b6736acfae127d438a36bec6307c254a3c9d8f3148314b4c067e5c172b3d252328221fc1f308ea9e998c8f156ddf7430bdcef209caa0a7d8e6b482fcda505ccc8654886d7185221825aa94bf16d32765e8e9247e44b7fa6cf30f96bd78ae1a4927d80e0f4401852be2e42e729bb5750cfbc423a26be0a6cb5c0c093595db08a73ae6e8fb3a863f5a62c9151d5aeb09ae2247a0a212a0979a197dc098b83bb54671fc4273bb8f55953ccba11f34a5956616bc524923c80408213a3c9208e8e824fdd13f577dc8f021c771d8259e3f02a552226d1b1a86c146e6172dbec36dea33489dcec0e5ad786deee27a4a4c16e2747f3d6e8ad1382ae4783cc7d35b9288db2bc84f294fb41492c834b3f9c6dfe7cc916bc82b29945b830bad74b97b1183540c4f4f4bd8e79638030f45b1c3c8c123c2c9d95432778183f79265920ab823cd25fdb1893c142ee78a731e171dcb023fcad7e4a9d93d505e59af44fc3e060ee65211af4ced41ac14157979a9b51d8bdf4bee3ac0aac45b29635d9320a108a9db61bae63b0e1cae5e06e18b0b002f818c5be7b3638575167677241561a3db204ded8fe947fded3990d1fd50ca8ded80cd4a74835f83afa560b7871141016495cc2c8b0703c23b492eca9f10c18bacdff023bf21b066b0adeaadd5d3542ef16d97c7c2f0841107e95131c2a9f4debf064a631251e9380c9f44a79370db852d52d5cbc042222518f8aef9d52e096918dab6247683a103c710dee3538148092699089d63aee4c3380360807698e84d1316b5fde804d6824c0e4abb081f758aa1ccbd4be3d07676a0c27bd728326dbdeaba09097175cd7634f7302480289dd95674b9b335a792bc5781db951875757863504b83e242f77e398db3937191a4e6db41b4026ab02dc89563f4b6f27200ff163867a954c4b0dbb5f5941289dd665c5cfc08e1e35525e8a78d3c200be42c35ca400837110d2dfef75a2ca068bac879a736a8a55983c76108da8745e6f9adf776709091502e73e36907a53bd3d5a69d94531ad60bbb5c37a60a0fb4c3f32e40389f90df67640224a8a102cef15b612f94057746a5850d798da2db1049b3a5801b9369921e0a66eb29201ae9366837f2523dd78863cd006af4e9d84fbc7920870ccbec2a0a7ec96b857eea78ae345b5538475e52cca9ea83fbbafc2d36526b8b6d164bfbb96da2aea0853bb79efc8e0045c5e6d1599ac5818ac6c064d879ef7cc02305257c60d12717da8c8809d2f187fcb85c9ad32d1bdf147191c3d823546da8fe037edbbfe2a44a185b871c847db823e45e645bde00c5099c7f0830a0fa325f9cc6dfc68d2f633906e7eb6507233243b09319e65efa6faa0c6fa619116fe604878197df192e8cbd323de5d8069bb5a152d24b778b3c9091c70d87c6dfd6d61e21af028a6f40d14d1d8234ca24960960858d1fc8ae62f05e3973ff1ebbe84fb06150ebc90509bc1fee5963218ab40915e7bff59a21cda13457eab9f9f8f4e4d2426096aa1434b117df97ae2310a711f4a493af1b8e90d054d6afac21a2121b5b82aa70a4b6e1f6223f61909e11d799de43e20c3edc93baa74f7f10e6a866a7dafce95c54fa9e8c9269aa14e520831616c9c069d36024092b785a0220f11f049db1b6459fa9af68ed5e2d99e24daef6396649e74f51358366c5ef83b9894167732ceecfda295434bd3ac10031ce7951a61950fb86584a86e4159cff61db8087828e34755cdedd34fd5e9fe137bef74a28b989ec470ce2c3efb2e83058d806b1ed08fc270f2866f18526d997652d3b32d227039257b058e75f8a3d8e19f659604968bd9f2cf6ac594a8bd9dcb9e7358f855807aa6e90671296a7333f5ccf822b7aa57910230d0536a8da92be8ea0958838ec196c52064bdbbc27945aa15150dfb08483fb131db3387157a4a10783d2a720d2c950f6b2306f98fe4fab434391f32c48d50117a4c7bcdbc138b6781e9ab8e4b1844d2a556493766bb9668d05a88fe203f3cae89ccba98715f008367c46574cfc0482ee892caa22ea8c63ec4ed91c0c85610355f200d609a17d8e7f488a872c59fe476a9fabdffb7e9f997a204b3a74ac3fcc5c58806261709da5d152627c3fdf2908a377bef1a58e2178048c2ba0492b3765ab2ab12cdb4a3904b5d59129954b6d57050fee708e052e0a37605f9bcf9907c920871392ee4676a2963c299d11dd82a3fe27665766b931f3ed29ce3a1707efe7c39c1c2444d48c0b46f784237d4df0f19b5f9e97fdb661599d6476b4aae7eea4db92d899f83e5b5e7f375ab1653da44caa760d1272e556c35defd3820971be9355ff6e4f5df2617036f84da7dbec3d7022e446fc14c57a32ae6c026cfb45482e615f067c730d19dc7735169c3375b20e59786d208037c212ab4997a2daf76da939d0804fea847a2a75c4e7b75fef919fdfe8ada72688b26437e5ef648416b65242082c3e48a59284b9fe3662033515122c8061abdbbb73be97f157002df625c9b153dfac50d32804c6b3826506931286b6e1ae17f1cbcef38ef63d0456831b48805a44abaa50055fd8b1b106b51f958e226b0df7a78a46d77e16c3ab2c4652de82db5b64b6069a69b1e574f6f3a0f437f4a5600cd62d04e5e44da9722c7a74ff19015123bed74ec687d99748dbae794655347a372336cc7455d898a41a22ddd04357d0589d4cc110ab927f58da101b2d23bc1205f79131be3fb823c84d54fc607d281aefd7a78309d244f53a5815b29a34ac3bc2a30768ba2dc815c721b771c62c0cb1df7725d8c9967df1b875a347635b6940194e392fbd6d07b7130035f0a944a7a488695f3e2b83d19ed4160864e1a8a79ca3a9020c208a618d1865f700fdaff82ae9c0cbc4aa3bde49a3fd31781453defd0196dc3614529fcf8fea67966779b7b8b7b96f594e3b187e695d54ca85e72c39402a49e97f8024ec26b2f4ebf1e6a2cd6e6845301729e092038b564ef65641cd01f2d77e9ff5dc85be222b05a061a5d13b571031b9bb75773ebe9ad1790f0871e028ece28627e77467e1e2779acd68c6687e99d962b07e76aa819cc6dbf7a9ae3611cf3faf3a7acc9660caf7dfc940e056d9849d77b6c4dba1153d4597c01cbf18a63801206d48f8a02247ba8e2c0d463401fe66e7f288797a05c5031b3c3a1e23c4cde835b969fffa2a33369c63c9b99d0bafaa66b5bbae92003ea5138d8aa3b94de491ed98863e9a1a5f37c540af230fb0c2de8455a1fec18e170659751d18aa2082de70f4d380239a6adab2e4d42ee8861107acd83a572e7e7c077650265fde3f6cd391342b7d028014a70c8e146a82e5bdcea37db686f05bc7071872474ea82adc03c70981e1bff9b020004936ed1ed41bdc455277418b5135b2bc810fbcc3072504c0b0f879cdc1d9e252d454b41c302d4cba37d8ed298676719905db606df3c4705779742aa2f1d37b49b7530d653cac38f095ae70c0375402eb842a4db783de6981c55f36081b893d5f99123f7df0f4ff88fa0591d44e9c8d0fc2a644696acd73bbc08a2c949de29647720c92bc7086de94c739c2da0a45605a5875cfb02e3d6eea1ed983fbe6fc9f233ba87a7a61d1ed64318ec197b0ccf96c727c72c617197d0c4d6a682079ffdd326627fc8fcff84c74ede58bf5c7e1cd351b24ed7c21b5ce74b3904e58636f254b1df5aec83e7e975662d300930be4f54fb32ab71384f2dd58050bcfebe75bc5b7119c300f74ef873ea55224def171c473df473884fb0b2f2ee421072cf3e79d2b743ac67632617340d82f61d7228c5eca7e0d94de6519adcdde24ff9f1d7268573cd349c9b223db9a380b77b5f940cad28a8454003dba4b2ecd1b6c93eb3df463905665a4c8b59824f63c9df4a2ed034d670bf2686ad27a26706e6c72b7c6365a78880fc203443024393635ad3163be8ef02142a48caf35180e94d022a502252a9b39cca834cbb524aefa7a98392c935f3ffbc120b362f25bad2a2fe3de6b5a2679b8b073c57d006f94c6e56ee67d1b196d854ac05db82e06deeddfb529fe7e31ffd4c2f92ccc1b843061224e960982b3d6c1aefcacd06b30dda16d1af242aa36ffd63a68d6637632fa04cd5e02edb53bd429475092525f7b122676bf48cc24a9470d2fbe9502b708693c5086a8fa5eed51d31906e206f2a76b5532e2ecc999ecdee9907a9b33bd2b8364145b66248bda9e8a7b74a6b6ebe51b1acb70661940130878a3291b19ff9da60fa7bec89ef976734d196dc9cc76491c700a5fce843fd7a21b272296b78db2ff5d98f3e928603b35d8f50287739ba99863d92681acad75e2fe877f50c5a0cac77f550777a7eeaa54e9f150879e4d7a83e5029622778b2d717f79b215b3ebec603efe7e7f6c7a1ccdbd221a403938c0fac15b82517dc48e26ff41ba463b4df63fa0c8eafb8959d7a7ce85f1379ab63a5db35d094a352cbe5c503c0fcd99349cbe9e381ee7ecae1cb2719d51815470c49d6324465de0201b62d0b91649dec74d619d1b3da116023fce358a507464776a99b795b3f5cd467ce2009b5784795d557a6ce93ec6e2194c1796fd156d788cc2375350fcb72bdc9c77cf99f0642df5903740f8bde22b8c205a40fc9e344b47e4bead3b9aa666c96db03ac44cce3d0c4f797e482cec2c4ebee537fa8c3c44846cd6fffcb665517f9c0e7fa2a826"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000007d980)={{0x0, 0x6, 0x1, 0xfa, 0x7fff, 0xfffffffffffffffc, 0x19, 0x5, 0x401, 0x2, 0x9, 0x2, 0x20, 0x5, 0x1}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000007da40)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "6ce2559fd93783"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007ea40)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}, {}, {r4}, {}, {0x0, r5}, {r6}, {}, {}, {r7}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {r10}, {}, {r11, r12}, {r13}, {}, {0x0, r14}, {r15}, {r16}, {0x0, r17}, {r18}, {}, {}, {r19}], 0x9, "e180b949af70a2"}) 01:11:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x7f, &(0x7f00000003c0)="63ec7c71a93c16d1d8a880cb2d51cca54af6d13bcd72248d7bc19894dfb74fdaa16f49b3679e5304cab2bca37ce12260324029805ec5e079e5dfbcfc1bea289409af5776d6b30d9b09035c8aef45ebfb1fbbb2f41068d5704eae15b1f971ec09479713802a12feda6c710210ec0ba1d761a89dc5e86eeeb6b7770707ff49c87b5cef53a2ba590e398c4c8bf63dd7d7b95c9e267ed4e0044febb0014aaec078e8a0ab9c6edbc6aba2e4010cc098fddb24d61f871e50c767e87b90919a") ptrace$setregs(0x3, r0, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a") sched_setattr(r0, &(0x7f0000000100)={0x38, 0x5, 0x41, 0x1f, 0x2, 0x1f, 0x0, 0x40, 0x2, 0x7}, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) dup2(r1, r2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0xc1, 0x7, 0x4, 0x0, 0x6, 0x12004, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x8, 0x6}, 0x8200, 0x6, 0x9, 0x2, 0x1, 0x4, 0x8, 0x0, 0x4, 0x0, 0x5b}, r0, 0x2, r1, 0x3) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1947.398789] FAULT_INJECTION: forcing a failure. [ 1947.398789] name failslab, interval 1, probability 0, space 0, times 0 [ 1947.399795] CPU: 1 UID: 0 PID: 42060 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1947.399812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1947.399820] Call Trace: [ 1947.399826] [ 1947.399832] dump_stack_lvl+0xfa/0x120 [ 1947.399854] should_fail_ex+0x4d7/0x5e0 [ 1947.399878] ? __d_alloc+0x31/0xa10 [ 1947.399893] should_failslab+0xc2/0x120 [ 1947.399912] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 1947.399939] ? do_raw_spin_unlock+0x53/0x220 [ 1947.399965] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1947.399983] ? __d_alloc+0x31/0xa10 [ 1947.399998] __d_alloc+0x31/0xa10 [ 1947.400013] ? mqueue_get_inode+0x1f6/0xdf0 [ 1947.400032] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1947.400048] d_make_root+0x42/0x90 [ 1947.400065] mqueue_fill_super+0x176/0x260 [ 1947.400083] get_tree_nodev+0xdc/0x190 [ 1947.400106] mqueue_get_tree+0xf6/0x140 [ 1947.400125] vfs_get_tree+0x93/0x340 [ 1947.400148] fc_mount_longterm+0x1a/0x280 [ 1947.400172] mq_init_ns+0x42e/0x630 [ 1947.400197] copy_ipcs+0x2dd/0x570 [ 1947.400222] create_new_namespaces+0x210/0xab0 [ 1947.400237] ? security_capable+0x2f/0x90 [ 1947.400260] copy_namespaces+0x45c/0x580 [ 1947.400279] copy_process+0x26d4/0x7410 [ 1947.400297] ? __pfx_perf_trace_lock+0x10/0x10 [ 1947.400314] ? perf_tp_event+0x807/0xe70 [ 1947.400348] ? __pfx_copy_process+0x10/0x10 [ 1947.400365] ? __might_fault+0xe0/0x190 [ 1947.400389] ? _copy_from_user+0x5b/0xd0 [ 1947.400415] kernel_clone+0xea/0x7f0 [ 1947.400436] ? __pfx_kernel_clone+0x10/0x10 [ 1947.400465] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1947.400480] ? ksys_write+0x121/0x240 [ 1947.400496] ? lock_is_held_type+0x9e/0x120 [ 1947.400517] __do_sys_clone3+0x1f5/0x280 [ 1947.400534] ? __pfx___do_sys_clone3+0x10/0x10 [ 1947.400548] ? perf_trace_lock+0x337/0x5d0 [ 1947.400593] ? __pfx_perf_trace_lock+0x10/0x10 [ 1947.400612] ? __might_fault+0x138/0x190 [ 1947.400630] ? __might_fault+0xe0/0x190 [ 1947.400645] ? find_held_lock+0x2b/0x80 [ 1947.400660] ? syscall_trace_enter+0x1cf/0x240 [ 1947.400678] ? lock_release+0xc8/0x290 [ 1947.400709] do_syscall_64+0xbf/0x390 [ 1947.400728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1947.400742] RIP: 0033:0x7ff6d12e7b19 [ 1947.400752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1947.400765] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1947.400777] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1947.400786] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1947.400793] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1947.400801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1947.400808] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1947.400842] 01:11:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x890f000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2}, 0x58) 01:11:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 70) 01:11:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 63) 01:11:11 executing program 4: r0 = fork() r1 = getpgid(0x0) sched_getattr(r1, &(0x7f0000000300)={0x38}, 0x38, 0x0) wait4(r1, &(0x7f0000000000), 0x2, &(0x7f00000002c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x7f, &(0x7f00000003c0)="63ec7c71a93c16d1d8a880cb2d51cca54af6d13bcd72248d7bc19894dfb74fdaa16f49b3679e5304cab2bca37ce12260324029805ec5e079e5dfbcfc1bea289409af5776d6b30d9b09035c8aef45ebfb1fbbb2f41068d5704eae15b1f971ec09479713802a12feda6c710210ec0ba1d761a89dc5e86eeeb6b7770707ff49c87b5cef53a2ba590e398c4c8bf63dd7d7b95c9e267ed4e0044febb0014aaec078e8a0ab9c6edbc6aba2e4010cc098fddb24d61f871e50c767e87b90919a") ptrace$setregs(0x3, r0, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a") sched_setattr(r0, &(0x7f0000000100)={0x38, 0x5, 0x41, 0x1f, 0x2, 0x1f, 0x0, 0x40, 0x2, 0x7}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800}, 0x58100}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xba0f000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3}, 0x58) 01:11:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 71) 01:11:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 64) 01:11:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xbe03000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:22 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:11:22 executing program 4: ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x3, 0x400}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) 01:11:22 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0xffffffffffffffff, &(0x7f0000000180)=0x7, 0x4, 0x0) r1 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r2 = getpgid(0x0) sched_getattr(r2, &(0x7f0000000300)={0x38}, 0x38, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) sendmsg$netlink(r3, &(0x7f00000002c0)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004440)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="3000610079ed642a74a300f63888018b938d2edd14916e6b85cd2c04878e9753d309664171d5f788f10818111308cce00f5a9dd4c8e9e889074f2de49a4d32592a6e020000008cf7761d2b1e7c0c405964d44d7ed164898c10020865caef9d9419bd011a3e2add953f56a6f8758c97474258bd653f48b7f037b84d085fb96504d24071becce580b3aae9aa8afe3250e7bb3e4a002869079a1967d10c004700070000000000000008009400", @ANYRES32=0xee00, @ANYBLOB="00d441fd9ca46548a505da16b5832832c37cc64ac58b688f223292a4bd33c5376b41ac797bb10a1f119cc6a0b3f86e2228a9708f407fbbcdcaae3c059bf47c34e2ae377b37cf26bea0fb43b2d3fbe0d50291271e33b486d700003d10c7b5c752198dd9e2d9a521e1601b98c7184c08006b00", @ANYRES32=0x0, @ANYBLOB="000000fed7b9b57d227925f1428dfbbbf7a56877f7cdf5bd60da6525e4e1a174af4fb275629ae4ccef5b96cb29ebca38c6482bd8013f38005c8008005a00", @ANYRES32=r0, @ANYBLOB="090005005da62d2c0000000005008d000000000008001d00", @ANYRES32=r0, @ANYBLOB='\b\x00}\x00', @ANYRES32=r4, @ANYBLOB="08008600810000000000"], 0x3d0}, {&(0x7f0000000740)={0x110, 0x11, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x84, 0x81, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0xfffffffc}, @typed={0x7, 0x28, 0x0, 0x0, @str='&\"\x00'}, @generic="15cec78ecf00eb2b90b182d6ecc0d442006fb8178618dd8f1ebc7a5fe56b48686d2f55f748f4689403f97310df351cde79ea297b1fc365fd0c9ac1c2c1b75043e9154854f69bfd828ab42ac11445c15ca85c22d45fe66aa4d93d6e4bfdb8dd55e8cfe884efb411408b8e6eea7bb7bc7b"]}, @generic="40452417a5bbb61cab3efd6ab4eebb85f0a0534af9911229db899c440a7305cce2e33aa83b5a50c7ecf1207739a8ba3f202610c97ac2800a5218cc984cc0d075ddf40a8533d928776442fde055e9ba32b5c6d3bfa6f065cc4ec3f64b57f53e287b29430fe453c48dd533b0396d", @typed={0xc, 0x8e, 0x0, 0x0, @str='!\xae-\\:@\'\x00'}]}, 0x110}, {&(0x7f0000000880)={0x2518, 0x11, 0x100, 0x70bd28, 0x25dfdbfc, "", [@generic="be65214da27d1920ce406e30930810a92fe61c87", @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x1e5, 0x6, 0x0, 0x1, [@generic="05f90d484499155dda454e84d7ad31d5f865f1652fd422dd8c495e55daf5222d", @generic="2d2d1f161b9ad9f3e1386931ef506b04e2f4ac7d8580d2353d054d600504a17fa5e84f226954c3f90f59edf85b37e58934402fe22d49c29b7ebe", @generic="6fe4ff2bdd967653e1b09a4baa5805ac7f4e6a284af062ac4535e1e5f9687822781266af20dcdd3197d6cfc3aabe60cb1e3a82eac8ccb8af090258b68d8a505f177db68d397a0d5432571c127ac23f610d03f9692946a5644e1aba485a6e3a18ea50b273de3a3c2b385893e1400378713a4feb208c2362e919658a5f7f25fe04745e007138c74f10ece4217be5471b0f2a491b0fac15", @generic, @typed={0xa, 0x62, 0x0, 0x0, @str='!%#+-\x00'}, @generic="75615d2b14f569ac34ded139ce9c0477d4d53dc7eaddef953de253570ba6093f97ba9c58de4504f2b112235526ddc1c6da776e33c090018ac619e7400290ac443eb3a963b3322a66a7359d668928fecbb13976adbf4afcaa81eb9cbca714635feb2b1dda91cf6faa68366a1567485a179b01bbd1864db272b48b3b4138bc21e7a59ca2b2a6e4679c266f026fdce843f158c44278dd9d53cb21988709a605135a1503cdf9068447733a357b5dac2626fb4e094d700e2d2de009501c0136d485932177810e0b83125cc5ffdcc053", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x1a, 0x0, 0x0, @fd}, @typed={0x8, 0x15, 0x0, 0x0, @fd=r5}]}, @nested={0xa1, 0x38, 0x0, 0x1, [@generic="24449053e3985238ed43320cce7f35339e6c8f4d480771687418dc8564cc3b939af2544c14a970d51b19f7fb0c287eea8b4ce883d9bfeb82bd7dd13711132ceb7422c63568877921898acb1d81cc9f0982613bd10e9a606345217ab3982b331b8e799564db9bdabce8ee2168be07d8536f3a4f04b5747d0924907a9124ac41524219071dea89b2cb083e22fad1a7a4a36116d790900b0a556d32408510"]}, @nested={0x12f, 0x9, 0x0, 0x1, [@generic="e46e6e698ced25e18d893148e8f6df06f0bd44bf0cc1598ec8a3416413ff4f49c10fcf9dc732c7675967d8121896cbd80704aec4f5802cd04f4690669f", @generic="6da4bf157ac8ebea25542fe846d3", @typed={0xde, 0x49, 0x0, 0x0, @binary="c3304747ac15eb13572490ac8974b6a3be75fbb3e146a493bd279ad03e561e9a98453790acae3f84734ebd3aec699ec089202a9367ba3c7c759d13983c588e426c5bdbb15b74c95f22d8b20a145cd88f9b05aaf9319bcea0addcdc19fb1436e15d1ec81ac7a95bd319f814be5f8c9debde596c563a4257fa68b8e5885555e62e0c31cfd494b76a3892e3fe01537554f7b2426a11bbb4a6d2f8764d5c8d0ec6fcdf8789bb7bd2a67411e061b3d7199f7e171c407b4da6d3f65fec377f09ee0cc1fd1a998312056b181e6ae011ef0da4e41115f9971d37721810b6"}]}, @typed={0x8, 0x45, 0x0, 0x0, @u32=0x5}, @nested={0x10f5, 0x17, 0x0, 0x1, [@generic="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", @typed={0x8, 0x29, 0x0, 0x0, @pid=r1}, @generic="9f9cc9737daaba8cef10bb3b38c96d58583c44b671976eaaea8c07742fc9d5dda9d0d372dc64d04678a0e0ff8c33484f9961e609e79bfed42b9c1df762e79fcc6a71cfe151f0d833732e2dd9620a4d9225f388b7f343192c38a31218d7c5aeee50777435a52b1783a79b23ea90b961cdc309781ecb8a073f55f61c0b433998914c51ffde67e3bd664bbc25abf1a15b98240c0c89166746a3c54f0ea0d3a2f1b8069bf267c437cd72f092f4055d1dff78a665e2fa4cbb990d322293f916658477cebf4ad1f06c9a641d9a42cc39f083c6640ee9ed906f7279d9b467d4b57fc841ae210c31c2e53a87e8"]}, @typed={0x5, 0x95, 0x0, 0x0, @str='\x00'}, @nested={0x1028, 0x3d, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0x600, 0x0, 0x0, @ipv4=@remote}, @typed={0x6, 0x0, 0x0, 0x0, @str='(\x00'}, @generic="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", @typed={0x8, 0x64, 0x0, 0x0, @pid}, @typed={0x4, 0x5}]}]}, 0x2518}, {&(0x7f0000002dc0)={0x114, 0x21, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @u32=0x7}]}, @typed={0xd3, 0x10, 0x0, 0x0, @binary="3426bec75822b582d6bfaa93d9bcd06ce41689385242bdddd74ed990f20cf3097fbd04f0c93dea077c1da46fa706bfd08e52e5d044cd0392348cd70ecb02bec3bb87769df80c88c6ef997dd368330bb61e76c2f251b3742bcd3d1c372c2c897b24765936c33b2ea6613a77e08055f88fc37fc4397e2d9bfffbbbcfcdfdcd72e307fa868940c40535d241868e2a3dfc77f85c9d105136a122f9c45af595de6f82281f83aeeb2621c6e164b6df917d6020460e71054422ab5ef82c5c8de94eaf24533866c3fc6ee2934d19cb11d0fee0"}, @generic="0e4cdab976ac49748189944571834a94f9c508517565fa67f153f698f290a2e2b57225d1"]}, 0x114}, {&(0x7f0000002f00)={0x1524, 0x11, 0x200, 0x70bd25, 0x25dfdbfc, "", [@nested={0x14, 0x40, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x43, 0x89, 0x0, 0x0, @binary="f4d6b11c0af38742d75e4b9d6b20b52b42086248650640431cadf39f25307949c9f028798714a3a7823b1cd99a99788143640c0f29bb8070b85768e07dde07"}, @nested={0x1096, 0x4a, 0x0, 0x1, [@generic="641c189f680a78ddfe00b7fc854d9a83c69e91266912caa99c91a418483f2c88eb1739c6becfb8f30f0fdcb910f9c7dab428b6d14ef211867a532673a02631eda8d24737", @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="0e182e49cd942c945962a7d75c3481b05287f16f56c4e7703cbf161f5ef742d685412d45e67f5fcc41c0d604a31e40919d8d", @generic="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", @typed={0x7, 0x5d, 0x0, 0x0, @str=')\x06\x00'}]}, @generic="f35b6d23a0ea1314797649f941a2ef5951c2e91aa7e196ae4df15fbf20c27266f6256fc19dbf2278c5011b538c5390f3ce98b89808c8b5d6f368b252515d469094e658ce8045f693f8cad8e3c10dbe36cfa5a52b4ff97c225339057af85410bd11b779ff5ab28101a290aaccbf6dc30585a2c601bc80feeb5ac166661cb5673f5c4b88e2022060f14fe3b52e732ec0f7add7c3b6c11f57", @generic="816c4ae4c81a110728f1d076c29e8cc1155089dedb814e1a32c30185d751a441d27471f59a9f378c3fc46d709b26dcbeefba2984d4afc4598f3d7ff8647f636616276e0d0fadadb8559ba8f0992742c02e7fb7eeb638575a4069fac49b79e8c07d3d35a4acb8863378ae93f469518d2a579fa1ed1620aa18", @generic="b6a7d1277e367c6c2fe934c493c7705be622a716e46b92dd36cb3b576e4b6b376014feb3b4d3e7b6476b059dee577086dc40c3e680ce10036a82a64224fa1ca8d27b6cc29a33d8d9ccfa150f0e6a6f7ea70b14384357852c9364f1a69d441a28a084b101ce0c57f7ae9f3d8d2e71d4f8b92057bbd807d5138f0e92224d4c3b97628604143503f7fb65837a724ab31b2e42877b0e981a5ae67acc3885c60d86f2b67b7c204111661d8129f378eaef8619a9f25185248b3d0e23419f41589f79ad7f320b2e31a49896779d426b43c572039e15f826", @nested={0x238, 0x6f, 0x0, 0x1, [@typed={0x4, 0x64}, @generic="1ed5c72384350b2cdb046f5813e39d935d20f7bf9b32c2bb8bfd990c5ff2ff636a92fe9a5c8901ec3516137316997b69b5a2b5ed52a19fc344ab5806793a93fe9d070bba606e08ea8957edb6ca5d5bde4663ae0daa19d68a017501af489a07bce7f4e30c93747ac8254bd7f929115014565806970378489ff95a17155ee1da4a194ab31c2299ab87a16dd546c67a9cad9013c06d2b5832591fa3787a1ccc808ef67ecfec18c504b99b531f17750315ab64dab4131312aef737deefffc5673974b71e0cca0dd0d3e187ae953eecac0718944c13ec8aa8f376639eebca3ba1990d7081", @generic, @generic="6f4a1a2efa86925b5db470a78fdbcef635389579e366a7df5c2996bf3655265d290aa964c0226b9b34c2169997f52aa6cc1390af1c805338ba39dee67ac5b7976b50572949deea63e3cef815c1ca96119ae3cf690ebe89", @generic="63e46c0a9055fb9c06996f73ff2e7886c789f79612b5a30f8a65655d52c42fd38d05ac4b06edabab8d8f471d51af8e0e731989ffa464fde9de9f6a84f872bc6d3d7229e1ae13da50c962819642ef48ccfe8603d8e0168c3f5c2cb64c56dd7177938e7e2ec3b4ff61c87296c49ffcfbb91802c4f291feceab628a86f4ab20bf9d1e0c9940a513e8de7b341aed08be26b8ed1922047e731e15dd0713e466276f4f251bc29d37010885eb3705d2041f1284b7f2db5a7d4ad1e294cd4a29c919d66b4d8a0175569b2fbbffa300d51d235c7d6aa82554d74f50a1f598ead9cb5dedbae7a2d6a6196c460d6c3028c9008544e96b827e103d54da"]}, @typed={0x8, 0x27, 0x0, 0x0, @u32}]}, 0x1524}], 0x5, 0x0, 0x0, 0x20044d4}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x81, 0x0, 0x6, 0x8, 0x0, 0x6, 0x10, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x4000, 0x100, 0x4, 0x9, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8}, r2, 0x5, r0, 0x8) 01:11:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 64) [ 1958.235658] FAULT_INJECTION: forcing a failure. [ 1958.235658] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.235750] FAULT_INJECTION: forcing a failure. [ 1958.235750] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.236727] CPU: 0 UID: 0 PID: 42512 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1958.236747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.236757] Call Trace: [ 1958.236764] [ 1958.236771] dump_stack_lvl+0xfa/0x120 [ 1958.236796] should_fail_ex+0x4d7/0x5e0 [ 1958.236823] should_failslab+0xc2/0x120 [ 1958.236844] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 1958.236866] ? setup_mq_sysctls+0x5d/0x240 [ 1958.236886] ? kfree+0x284/0x550 [ 1958.236915] kmemdup_noprof+0x2b/0x60 [ 1958.236938] setup_mq_sysctls+0x5d/0x240 [ 1958.236967] copy_ipcs+0x3e5/0x570 [ 1958.236995] create_new_namespaces+0x210/0xab0 [ 1958.237014] ? security_capable+0x2f/0x90 [ 1958.237039] copy_namespaces+0x45c/0x580 [ 1958.237061] copy_process+0x26d4/0x7410 [ 1958.237081] ? __pfx_perf_trace_lock+0x10/0x10 [ 1958.237105] ? perf_tp_event+0x807/0xe70 [ 1958.237144] ? __pfx_copy_process+0x10/0x10 [ 1958.237163] ? __might_fault+0xe0/0x190 [ 1958.237189] ? _copy_from_user+0x5b/0xd0 [ 1958.237218] kernel_clone+0xea/0x7f0 [ 1958.237242] ? __pfx_kernel_clone+0x10/0x10 [ 1958.237274] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1958.237292] ? ksys_write+0x121/0x240 [ 1958.237311] ? lock_is_held_type+0x9e/0x120 [ 1958.237335] __do_sys_clone3+0x1f5/0x280 [ 1958.237354] ? __pfx___do_sys_clone3+0x10/0x10 [ 1958.237370] ? perf_trace_lock+0x337/0x5d0 [ 1958.237422] ? __pfx_perf_trace_lock+0x10/0x10 [ 1958.237443] ? __might_fault+0x138/0x190 [ 1958.237464] ? __might_fault+0xe0/0x190 [ 1958.237481] ? find_held_lock+0x2b/0x80 [ 1958.237497] ? syscall_trace_enter+0x1cf/0x240 [ 1958.237517] ? lock_release+0xc8/0x290 [ 1958.237553] do_syscall_64+0xbf/0x390 [ 1958.237574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.237589] RIP: 0033:0x7fc56dfaeb19 [ 1958.237601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.237615] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1958.237628] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1958.237638] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1958.237646] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.237655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.237663] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1958.237700] [ 1958.273062] CPU: 1 UID: 0 PID: 42505 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) 01:11:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xfeffffff00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1958.273094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.273114] Call Trace: [ 1958.273124] [ 1958.273137] dump_stack_lvl+0xfa/0x120 [ 1958.273178] should_fail_ex+0x4d7/0x5e0 [ 1958.273223] should_failslab+0xc2/0x120 [ 1958.273258] __kmalloc_noprof+0xcd/0x680 [ 1958.273298] ? perf_trace_lock+0x337/0x5d0 [ 1958.273333] ? memcg_list_lru_alloc+0x4da/0x760 [ 1958.273378] memcg_list_lru_alloc+0x4da/0x760 [ 1958.273436] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1958.273496] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 1958.273547] __memcg_slab_post_alloc_hook+0x130/0x9e0 [ 1958.273581] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1958.273622] ? __create_object+0x59/0x80 [ 1958.273669] kmem_cache_alloc_lru_noprof+0x512/0x690 [ 1958.273734] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1958.273767] ? __d_alloc+0x31/0xa10 [ 1958.273797] __d_alloc+0x31/0xa10 [ 1958.273825] ? mqueue_get_inode+0x1f6/0xdf0 [ 1958.273862] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1958.273890] d_make_root+0x42/0x90 [ 1958.273922] mqueue_fill_super+0x176/0x260 [ 1958.273955] get_tree_nodev+0xdc/0x190 [ 1958.273992] mqueue_get_tree+0xf6/0x140 [ 1958.274027] vfs_get_tree+0x93/0x340 [ 1958.274071] fc_mount_longterm+0x1a/0x280 [ 1958.274115] mq_init_ns+0x42e/0x630 [ 1958.274162] copy_ipcs+0x2dd/0x570 [ 1958.274210] create_new_namespaces+0x210/0xab0 [ 1958.274238] ? security_capable+0x2f/0x90 [ 1958.274282] copy_namespaces+0x45c/0x580 [ 1958.274317] copy_process+0x26d4/0x7410 [ 1958.274351] ? __pfx_perf_trace_lock+0x10/0x10 [ 1958.274381] ? perf_tp_event+0x807/0xe70 [ 1958.274447] ? __pfx_copy_process+0x10/0x10 [ 1958.274480] ? __might_fault+0xe0/0x190 [ 1958.274524] ? _copy_from_user+0x5b/0xd0 [ 1958.274572] kernel_clone+0xea/0x7f0 [ 1958.274612] ? __pfx_kernel_clone+0x10/0x10 [ 1958.274666] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1958.274695] ? ksys_write+0x121/0x240 [ 1958.274724] ? lock_is_held_type+0x9e/0x120 [ 1958.274762] __do_sys_clone3+0x1f5/0x280 [ 1958.274793] ? __pfx___do_sys_clone3+0x10/0x10 [ 1958.274820] ? perf_trace_lock+0x337/0x5d0 [ 1958.274905] ? __pfx_perf_trace_lock+0x10/0x10 [ 1958.274940] ? __might_fault+0x138/0x190 [ 1958.274975] ? __might_fault+0xe0/0x190 [ 1958.275003] ? find_held_lock+0x2b/0x80 [ 1958.275029] ? syscall_trace_enter+0x1cf/0x240 [ 1958.275062] ? lock_release+0xc8/0x290 [ 1958.275121] do_syscall_64+0xbf/0x390 [ 1958.275155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.275180] RIP: 0033:0x7f2be6d39b19 [ 1958.275199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.275221] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1958.275243] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1958.275258] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1958.275272] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.275286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:11:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 72) [ 1958.275299] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1958.275362] 01:11:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4}, 0x58) 01:11:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff03000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1958.415352] FAULT_INJECTION: forcing a failure. [ 1958.415352] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.417067] CPU: 1 UID: 0 PID: 42509 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1958.417103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.417116] Call Trace: [ 1958.417125] [ 1958.417136] dump_stack_lvl+0xfa/0x120 [ 1958.417171] should_fail_ex+0x4d7/0x5e0 [ 1958.417213] should_failslab+0xc2/0x120 [ 1958.417246] __kmalloc_noprof+0xcd/0x680 [ 1958.417284] ? perf_trace_lock+0x337/0x5d0 [ 1958.417316] ? memcg_list_lru_alloc+0x4da/0x760 [ 1958.417360] memcg_list_lru_alloc+0x4da/0x760 [ 1958.417415] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1958.417471] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 1958.417520] __memcg_slab_post_alloc_hook+0x130/0x9e0 [ 1958.417554] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1958.417593] ? __create_object+0x59/0x80 [ 1958.417639] kmem_cache_alloc_lru_noprof+0x512/0x690 [ 1958.417702] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1958.417734] ? __d_alloc+0x31/0xa10 [ 1958.417763] __d_alloc+0x31/0xa10 [ 1958.417791] ? mqueue_get_inode+0x1f6/0xdf0 [ 1958.417828] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1958.417856] d_make_root+0x42/0x90 [ 1958.417888] mqueue_fill_super+0x176/0x260 [ 1958.417921] get_tree_nodev+0xdc/0x190 [ 1958.417956] mqueue_get_tree+0xf6/0x140 [ 1958.417991] vfs_get_tree+0x93/0x340 [ 1958.418033] fc_mount_longterm+0x1a/0x280 [ 1958.418077] mq_init_ns+0x42e/0x630 [ 1958.418124] copy_ipcs+0x2dd/0x570 [ 1958.418169] create_new_namespaces+0x210/0xab0 [ 1958.418197] ? security_capable+0x2f/0x90 [ 1958.418238] copy_namespaces+0x45c/0x580 [ 1958.418273] copy_process+0x26d4/0x7410 [ 1958.418305] ? __pfx_perf_trace_lock+0x10/0x10 [ 1958.418334] ? perf_tp_event+0x807/0xe70 [ 1958.418396] ? __pfx_copy_process+0x10/0x10 [ 1958.418428] ? __might_fault+0xe0/0x190 [ 1958.418470] ? _copy_from_user+0x5b/0xd0 [ 1958.418516] kernel_clone+0xea/0x7f0 [ 1958.418556] ? __pfx_kernel_clone+0x10/0x10 [ 1958.418609] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1958.418638] ? ksys_write+0x121/0x240 [ 1958.418667] ? lock_is_held_type+0x9e/0x120 [ 1958.418705] __do_sys_clone3+0x1f5/0x280 [ 1958.418736] ? __pfx___do_sys_clone3+0x10/0x10 [ 1958.418762] ? perf_trace_lock+0x337/0x5d0 [ 1958.418845] ? __pfx_perf_trace_lock+0x10/0x10 [ 1958.418879] ? __might_fault+0x138/0x190 [ 1958.418914] ? __might_fault+0xe0/0x190 [ 1958.418942] ? find_held_lock+0x2b/0x80 [ 1958.418968] ? syscall_trace_enter+0x1cf/0x240 [ 1958.419000] ? lock_release+0xc8/0x290 [ 1958.419058] do_syscall_64+0xbf/0x390 [ 1958.419093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.419117] RIP: 0033:0x7ff6d12e7b19 [ 1958.419136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1958.419158] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1958.419180] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1958.419195] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1958.419209] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.419222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.419236] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1958.419299] 01:11:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) dup2(r0, r1) 01:11:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r0 = getpgid(0x0) sched_getattr(r0, &(0x7f0000000300)={0x38}, 0x38, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x9, 0x2, 0xff, 0x0, 0x505e, 0x46198, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x434c0, 0x2, 0x0, 0x5, 0x7ff, 0x0, 0x6528, 0x0, 0x6, 0x0, 0xffffffffffff0000}, r0, 0x7, 0xffffffffffffffff, 0x8) 01:11:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x5}, 0x58) 01:11:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 65) 01:11:33 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:11:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 65) 01:11:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xff0f000000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 73) [ 1969.901904] FAULT_INJECTION: forcing a failure. [ 1969.901904] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.903175] CPU: 1 UID: 0 PID: 42836 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1969.903193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1969.903201] Call Trace: [ 1969.903206] [ 1969.903212] dump_stack_lvl+0xfa/0x120 [ 1969.903235] should_fail_ex+0x4d7/0x5e0 [ 1969.903259] ? __d_alloc+0x31/0xa10 [ 1969.903275] should_failslab+0xc2/0x120 [ 1969.903295] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 1969.903323] ? do_raw_spin_unlock+0x53/0x220 [ 1969.903350] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1969.903369] ? __d_alloc+0x31/0xa10 [ 1969.903383] __d_alloc+0x31/0xa10 [ 1969.903399] ? mqueue_get_inode+0x1f6/0xdf0 [ 1969.903419] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1969.903434] d_make_root+0x42/0x90 [ 1969.903452] mqueue_fill_super+0x176/0x260 [ 1969.903470] get_tree_nodev+0xdc/0x190 [ 1969.903493] mqueue_get_tree+0xf6/0x140 [ 1969.903512] vfs_get_tree+0x93/0x340 [ 1969.903537] fc_mount_longterm+0x1a/0x280 [ 1969.903562] mq_init_ns+0x42e/0x630 [ 1969.903590] copy_ipcs+0x2dd/0x570 [ 1969.903616] create_new_namespaces+0x210/0xab0 [ 1969.903632] ? security_capable+0x2f/0x90 [ 1969.903657] copy_namespaces+0x45c/0x580 [ 1969.903677] copy_process+0x26d4/0x7410 [ 1969.903695] ? __pfx_perf_trace_lock+0x10/0x10 [ 1969.903726] ? perf_tp_event+0x807/0xe70 [ 1969.903761] ? __pfx_copy_process+0x10/0x10 [ 1969.903780] ? __might_fault+0xe0/0x190 [ 1969.903804] ? _copy_from_user+0x5b/0xd0 [ 1969.903832] kernel_clone+0xea/0x7f0 [ 1969.903855] ? __pfx_kernel_clone+0x10/0x10 [ 1969.903886] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1969.903903] ? ksys_write+0x121/0x240 [ 1969.903918] ? lock_is_held_type+0x9e/0x120 [ 1969.903941] __do_sys_clone3+0x1f5/0x280 [ 1969.903958] ? __pfx___do_sys_clone3+0x10/0x10 [ 1969.903972] ? perf_trace_lock+0x337/0x5d0 [ 1969.904017] ? __pfx_perf_trace_lock+0x10/0x10 [ 1969.904036] ? __might_fault+0x138/0x190 [ 1969.904054] ? __might_fault+0xe0/0x190 [ 1969.904069] ? find_held_lock+0x2b/0x80 [ 1969.904083] ? syscall_trace_enter+0x1cf/0x240 [ 1969.904106] ? lock_release+0xc8/0x290 [ 1969.904137] do_syscall_64+0xbf/0x390 [ 1969.904156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.904169] RIP: 0033:0x7f2be6d39b19 [ 1969.904179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.904192] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1969.904204] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1969.904212] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1969.904220] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.904227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1969.904234] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1969.904269] [ 1969.951761] FAULT_INJECTION: forcing a failure. [ 1969.951761] name failslab, interval 1, probability 0, space 0, times 0 [ 1969.952826] CPU: 1 UID: 0 PID: 42838 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1969.952843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1969.952851] Call Trace: [ 1969.952855] [ 1969.952861] dump_stack_lvl+0xfa/0x120 [ 1969.952881] should_fail_ex+0x4d7/0x5e0 [ 1969.952904] ? __d_alloc+0x31/0xa10 [ 1969.952918] should_failslab+0xc2/0x120 [ 1969.952936] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 1969.952965] ? do_raw_spin_unlock+0x53/0x220 [ 1969.952990] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1969.953007] ? __d_alloc+0x31/0xa10 [ 1969.953022] __d_alloc+0x31/0xa10 [ 1969.953037] ? mqueue_get_inode+0x1f6/0xdf0 [ 1969.953058] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1969.953073] d_make_root+0x42/0x90 [ 1969.953090] mqueue_fill_super+0x176/0x260 [ 1969.953112] get_tree_nodev+0xdc/0x190 [ 1969.953133] mqueue_get_tree+0xf6/0x140 [ 1969.953152] vfs_get_tree+0x93/0x340 [ 1969.953176] fc_mount_longterm+0x1a/0x280 [ 1969.953200] mq_init_ns+0x42e/0x630 [ 1969.953224] copy_ipcs+0x2dd/0x570 [ 1969.953249] create_new_namespaces+0x210/0xab0 [ 1969.953264] ? security_capable+0x2f/0x90 [ 1969.953287] copy_namespaces+0x45c/0x580 [ 1969.953305] copy_process+0x26d4/0x7410 [ 1969.953322] ? __pfx_perf_trace_lock+0x10/0x10 [ 1969.953339] ? perf_tp_event+0x807/0xe70 [ 1969.953372] ? __pfx_copy_process+0x10/0x10 [ 1969.953389] ? __might_fault+0xe0/0x190 [ 1969.953412] ? _copy_from_user+0x5b/0xd0 [ 1969.953438] kernel_clone+0xea/0x7f0 [ 1969.953459] ? __pfx_kernel_clone+0x10/0x10 [ 1969.953487] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1969.953503] ? ksys_write+0x121/0x240 [ 1969.953518] ? lock_is_held_type+0x9e/0x120 [ 1969.953539] __do_sys_clone3+0x1f5/0x280 [ 1969.953556] ? __pfx___do_sys_clone3+0x10/0x10 [ 1969.953570] ? perf_trace_lock+0x337/0x5d0 [ 1969.953616] ? __pfx_perf_trace_lock+0x10/0x10 [ 1969.953634] ? __might_fault+0x138/0x190 [ 1969.953653] ? __might_fault+0xe0/0x190 [ 1969.953668] ? find_held_lock+0x2b/0x80 [ 1969.953682] ? syscall_trace_enter+0x1cf/0x240 [ 1969.953699] ? lock_release+0xc8/0x290 [ 1969.953730] do_syscall_64+0xbf/0x390 [ 1969.953749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.953761] RIP: 0033:0x7ff6d12e7b19 [ 1969.953772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.953784] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1969.953795] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1969.953804] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1969.953812] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.953819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1969.953826] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1969.953860] 01:11:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffc99a3b00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffff030000000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 1970.049359] FAULT_INJECTION: forcing a failure. [ 1970.049359] name failslab, interval 1, probability 0, space 0, times 0 [ 1970.051601] CPU: 0 UID: 0 PID: 42869 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1970.051635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1970.051650] Call Trace: [ 1970.051660] [ 1970.051671] dump_stack_lvl+0xfa/0x120 [ 1970.051726] should_fail_ex+0x4d7/0x5e0 [ 1970.051771] should_failslab+0xc2/0x120 [ 1970.051807] __kmalloc_noprof+0xcd/0x680 [ 1970.051843] ? __create_object+0x59/0x80 [ 1970.051885] ? __register_sysctl_table+0xb5/0x16a0 [ 1970.051932] __register_sysctl_table+0xb5/0x16a0 [ 1970.051955] ? kasan_save_track+0x14/0x30 [ 1970.051987] ? __kasan_kmalloc+0x7f/0x90 [ 1970.052035] ? __pfx___register_sysctl_table+0x10/0x10 [ 1970.052058] ? setup_mq_sysctls+0x5d/0x240 [ 1970.052116] ? __asan_memcpy+0x3d/0x60 [ 1970.052159] setup_mq_sysctls+0x145/0x240 [ 1970.052212] copy_ipcs+0x3e5/0x570 [ 1970.052262] create_new_namespaces+0x210/0xab0 [ 1970.052293] ? security_capable+0x2f/0x90 [ 1970.052337] copy_namespaces+0x45c/0x580 [ 1970.052376] copy_process+0x26d4/0x7410 [ 1970.052410] ? __pfx_perf_trace_lock+0x10/0x10 [ 1970.052444] ? perf_tp_event+0x807/0xe70 [ 1970.052512] ? __pfx_copy_process+0x10/0x10 [ 1970.052547] ? __might_fault+0xe0/0x190 [ 1970.052593] ? _copy_from_user+0x5b/0xd0 [ 1970.052644] kernel_clone+0xea/0x7f0 [ 1970.052686] ? __pfx_kernel_clone+0x10/0x10 [ 1970.052744] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1970.052777] ? ksys_write+0x121/0x240 [ 1970.052808] ? lock_is_held_type+0x9e/0x120 [ 1970.052850] __do_sys_clone3+0x1f5/0x280 [ 1970.052884] ? __pfx___do_sys_clone3+0x10/0x10 [ 1970.052913] ? perf_trace_lock+0x337/0x5d0 [ 1970.053005] ? __pfx_perf_trace_lock+0x10/0x10 [ 1970.053043] ? __might_fault+0x138/0x190 [ 1970.053081] ? __might_fault+0xe0/0x190 [ 1970.053112] ? find_held_lock+0x2b/0x80 [ 1970.053141] ? syscall_trace_enter+0x1cf/0x240 [ 1970.053176] ? lock_release+0xc8/0x290 [ 1970.053240] do_syscall_64+0xbf/0x390 [ 1970.053277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.053305] RIP: 0033:0x7fc56dfaeb19 [ 1970.053328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1970.053352] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1970.053376] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1970.053394] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1970.053409] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1970.053424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1970.053439] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1970.053508] 01:11:34 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x100000000, 0x100) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xc, 0x1d4, &(0x7f0000000280)="7d67b5bb696e61d715c983b0c39bdd4f7893441e2d8bb67956bba0bd76bd37fedbc146ea553faabad04196f11b4fcee9ac0bf218b3325c87abdfefdfd978232688d4249990cbf7a538d57d6481a29cbd237933dfadffcffa8b55a8908ad3c7bf37febbb98c25fb7563faf1b911f0943d709a579111a246ea367724e1b5b0a8adbf668d2152a16036fa1721850d4b18de86dde919ff2948cd5aaccb01b5913e0c385844043b9f008694ba26fbac4194a8864d0a041c2e45e33c8689a1f82ce009173a44a9bea6ca98f64b3fb13c938fdfc62c4701a61210410ad034134d436b8a1f2884616aa72b8dede2bfe9ee13932bf3a1aead8cd5dd0ef06ee929065a0e109f7133210f7d63a46f906c6a26cf8577840ae655946d9a7957b0b69588ff57d1600016c3944f48053acaf57215c58e7c13e2e12e63b415b2a2be6fbd23989a5d868327446f5e338093024e9c9dd0d10057d2e6cabde0220e688e18fcd29b0fb42613c0de3d2ce24025494a5ed64954d1973159787129c38684ea131509c23131e7717f59b2c0c4571ee315000a88da7be2b63287f98aaf99e1dfee65ebcd7b26fc9b7f37ae369d589aeac2feb7033940826712d765eac8508a4ebe66638e1b085e35f12562e1d4c1f601957e87385fa7686c7b498d2e1f3dce788f72c40845df72c4ade99b8ecb276064e5b6c40f4e6ddae417e437aa5c95d8108afaf31043978775d972cd9b9d1192f9fb1efc07073d2b3b1d7b0b3c9085f07f6ad46667c92462157294a9c61c82ec67d09af4b613920ac537d3edd33946a32707479403372da1153440520f1503c818931cf0553184d08251deee0b9ad5788c9f21424ccb4f680d8d4f391eb738d8eb3fdb97afea87476b32ee6af4a539fcc507c01c0e472f93de1baeb71ce493c71bdb2e65d8acde3cd989328b0e486f370ec2ef792eaf6350064fc252f12fe86e5f436f08878b9e9f2f7b2d377d3028ae427b4dd27fc3713e3d219efc615f2b4a7c07d056f8cb8ca2b6c703c7a8cc0b381be24a2e30e51e0df58dcdebed651a55f0fe9cbddce6ccbc5cdead12e45c26d32b659b47031c87c51ee953833831f14fff0b363c87b9c9e5927af6a1137eda971b9bf44add101f776fe5dc21d6d586d03031a767f5479051a91718a7ba082653217a1ddd5f4132bb8f26a27a196026286211f55b272f2acf50c3c115301e0672b1419977fe66d1f504a3615b51b00966e4f6c5f1c8c4505a4e6221bdd3970fe88e81c7dbef804a885d2ec73eb2f9e003f1371d85aa8b5a12750c7f63ccce875237d8ffc7ff363261641df890be8fdc7185aa60bf4b2f073536d10da375009776865b150b173bb1b2600eb85919be5572f8a0529627505ba297b692c8bfe7e4165d9211928829b2fe220f79c48c00eaee4e1becd309acc7d5407c87579b8647fa4356e96a3903e2"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000140)=0x1) 01:11:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffffff7f00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 66) 01:11:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 66) 01:11:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 74) 01:11:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0xffffffff00000000, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6}, 0x58) 01:11:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2}, 0x58) 01:11:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) socketpair(0xf, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000180)=""/83, 0x53}, {&(0x7f00000002c0)=""/109, 0x6d}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/233, 0xe9}, {&(0x7f0000001440)=""/217, 0xd9}], 0x6, &(0x7f00000015c0)=ANY=[@ANYBLOB="2c000000000011000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x148}, 0x1) 01:11:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 67) 01:11:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7}, 0x58) 01:11:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 75) 01:11:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3}, 0x58) 01:11:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 68) 01:11:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 67) 01:11:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:11:47 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:11:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) dup2(r0, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x40, 0x8, 0x4, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x4, 0x5}, 0x4800, 0x1, 0x1000, 0x1, 0x4, 0x4, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x9) [ 1983.750952] FAULT_INJECTION: forcing a failure. [ 1983.750952] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.752338] CPU: 1 UID: 0 PID: 43392 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1983.752364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1983.752375] Call Trace: [ 1983.752383] [ 1983.752391] dump_stack_lvl+0xfa/0x120 [ 1983.752424] should_fail_ex+0x4d7/0x5e0 [ 1983.752460] ? alloc_vfsmnt+0x23/0x6e0 [ 1983.752485] should_failslab+0xc2/0x120 [ 1983.752515] kmem_cache_alloc_noprof+0x80/0x690 [ 1983.752550] ? lock_release+0xc8/0x290 [ 1983.752598] ? alloc_vfsmnt+0x23/0x6e0 [ 1983.752621] alloc_vfsmnt+0x23/0x6e0 [ 1983.752655] fc_mount_longterm+0x15a/0x280 [ 1983.752689] mq_init_ns+0x42e/0x630 [ 1983.752728] copy_ipcs+0x2dd/0x570 [ 1983.752767] create_new_namespaces+0x210/0xab0 [ 1983.752791] ? security_capable+0x2f/0x90 [ 1983.752826] copy_namespaces+0x45c/0x580 [ 1983.752856] copy_process+0x26d4/0x7410 [ 1983.752885] ? __pfx_perf_trace_lock+0x10/0x10 [ 1983.752910] ? perf_tp_event+0x807/0xe70 [ 1983.752966] ? __pfx_copy_process+0x10/0x10 [ 1983.752991] ? __might_fault+0xe0/0x190 [ 1983.753026] ? _copy_from_user+0x5b/0xd0 [ 1983.753066] kernel_clone+0xea/0x7f0 [ 1983.753105] ? __pfx_kernel_clone+0x10/0x10 [ 1983.753150] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1983.753175] ? ksys_write+0x121/0x240 [ 1983.753200] ? lock_is_held_type+0x9e/0x120 [ 1983.753236] __do_sys_clone3+0x1f5/0x280 [ 1983.753262] ? __pfx___do_sys_clone3+0x10/0x10 [ 1983.753283] ? perf_trace_lock+0x337/0x5d0 [ 1983.753357] ? __pfx_perf_trace_lock+0x10/0x10 [ 1983.753387] ? __might_fault+0x138/0x190 [ 1983.753415] ? __might_fault+0xe0/0x190 [ 1983.753438] ? find_held_lock+0x2b/0x80 [ 1983.753459] ? syscall_trace_enter+0x1cf/0x240 [ 1983.753486] ? lock_release+0xc8/0x290 [ 1983.753535] do_syscall_64+0xbf/0x390 [ 1983.753568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.753588] RIP: 0033:0x7ff6d12e7b19 [ 1983.753605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.753623] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1983.753642] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1983.753655] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1983.753667] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1983.753678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1983.753689] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1983.753744] 01:11:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8}, 0x58) [ 1983.832415] FAULT_INJECTION: forcing a failure. [ 1983.832415] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.834175] CPU: 0 UID: 0 PID: 43400 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1983.834198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1983.834208] Call Trace: [ 1983.834215] [ 1983.834224] dump_stack_lvl+0xfa/0x120 [ 1983.834254] should_fail_ex+0x4d7/0x5e0 [ 1983.834293] should_failslab+0xc2/0x120 [ 1983.834321] __kmalloc_noprof+0xcd/0x680 [ 1983.834348] ? __register_sysctl_table+0xd3e/0x16a0 [ 1983.834371] ? lock_release+0xc8/0x290 [ 1983.834395] ? __register_sysctl_table+0xd4f/0x16a0 [ 1983.834429] __register_sysctl_table+0xd4f/0x16a0 [ 1983.834467] ? __pfx___register_sysctl_table+0x10/0x10 [ 1983.834484] ? setup_mq_sysctls+0x5d/0x240 [ 1983.834523] ? __asan_memcpy+0x3d/0x60 [ 1983.834558] setup_mq_sysctls+0x145/0x240 [ 1983.834601] copy_ipcs+0x3e5/0x570 [ 1983.834640] create_new_namespaces+0x210/0xab0 [ 1983.834664] ? security_capable+0x2f/0x90 [ 1983.834700] copy_namespaces+0x45c/0x580 [ 1983.834731] copy_process+0x26d4/0x7410 [ 1983.834759] ? __pfx_perf_trace_lock+0x10/0x10 [ 1983.834785] ? perf_tp_event+0x807/0xe70 [ 1983.834842] ? __pfx_copy_process+0x10/0x10 [ 1983.834871] ? __might_fault+0xe0/0x190 [ 1983.834910] ? _copy_from_user+0x5b/0xd0 [ 1983.834952] kernel_clone+0xea/0x7f0 [ 1983.834987] ? __pfx_kernel_clone+0x10/0x10 [ 1983.835034] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1983.835059] ? ksys_write+0x121/0x240 [ 1983.835084] ? lock_is_held_type+0x9e/0x120 [ 1983.835123] __do_sys_clone3+0x1f5/0x280 [ 1983.835148] ? __pfx___do_sys_clone3+0x10/0x10 [ 1983.835170] ? perf_trace_lock+0x337/0x5d0 [ 1983.835240] ? __pfx_perf_trace_lock+0x10/0x10 [ 1983.835271] ? __might_fault+0x138/0x190 [ 1983.835301] ? __might_fault+0xe0/0x190 [ 1983.835324] ? find_held_lock+0x2b/0x80 [ 1983.835346] ? syscall_trace_enter+0x1cf/0x240 [ 1983.835374] ? lock_release+0xc8/0x290 [ 1983.835422] do_syscall_64+0xbf/0x390 [ 1983.835450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.835470] RIP: 0033:0x7fc56dfaeb19 [ 1983.835485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.835503] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1983.835521] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1983.835534] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1983.835546] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1983.835557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1983.835568] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1983.835621] [ 1983.859377] sysctl could not get directory: /fs -12 01:11:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4}, 0x58) 01:11:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 76) 01:11:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 69) 01:11:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x5}, 0x58) 01:11:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x10}, 0x58) 01:11:47 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:11:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2b}, 0x58) 01:11:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6}, 0x58) 01:11:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x7}, 0x58) 01:11:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x62}, 0x58) 01:11:48 executing program 1: lseek(0xffffffffffffffff, 0x2, 0x8) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r2 = inotify_init1(0x80800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xe8) r5 = fork() ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x7f, &(0x7f00000003c0)="63ec7c71a93c16d1d8a880cb2d51cca54af6d13bcd72248d7bc19894dfb74fdaa16f49b3679e5304cab2bca37ce12260324029805ec5e079e5dfbcfc1bea289409af5776d6b30d9b09035c8aef45ebfb1fbbb2f41068d5704eae15b1f971ec09479713802a12feda6c710210ec0ba1d761a89dc5e86eeeb6b7770707ff49c87b5cef53a2ba590e398c4c8bf63dd7d7b95c9e267ed4e0044febb0014aaec078e8a0ab9c6edbc6aba2e4010cc098fddb24d61f871e50c767e87b90919a") ptrace$setregs(0x3, r5, 0x40, &(0x7f00000001c0)="17627cd826a3260fdd92fec80ba5fea8e3724af047480389c6e4a244fe0782f07c8a42bedc136013cd30951c180368139c25e44146d6adef41f9e7cf5f5b29d6dd971c81e5476544281bc983f13df89e4e2cd3aa5cab520bb86f55c41356e29d88ecfc7535376375679f8e492d4f6c19ae4dd42e7a025e672acac72af5237cbaff548ced3b956e89010516955fb42ede0f32121ded61a58c724fbc671015cef5283f997da4543813360025080754fa512937c237a23886aacbcfb3b3b7315abfd1a058be13912a61d14d1b0489799a") sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x41, 0x1f, 0x2, 0x1f, 0x0, 0x40, 0x2, 0x7}, 0x0) stat(&(0x7f0000000700)='.\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000a80), 0x2000, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) clone3(&(0x7f0000000d00)={0x40000, &(0x7f0000000ac0)=0xffffffffffffffff, &(0x7f0000000b00), &(0x7f0000000b40), {0x41}, &(0x7f0000000b80)=""/126, 0x7e, &(0x7f0000000c00)=""/188, &(0x7f0000000cc0)=[r1, r1, r1, r1, r1, r1], 0x6}, 0x58) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000100)="29757eee828b10bf301b9a78f99d070a39cb21bdd82d7046b55f8f78d0969fe554c855f88306b5b2420c042b94076810a7edad8b9a9714c2860a2b5badd883b562f3c4f59f821ce54e78acff52ba1b7ab9bc60dd57e439be466dafac53af00f28cf7e93e66668c88549a880cfb37f9b13e951b826cfcce2503cf798783f5a63db35e70f5d7a211e269cb0a14d8eb388ce4fc9c63f181dc0f76f1b09e78d33847debc688fe533cec6da7f85a4810d8fbe76c95311c8926e19", 0xb8}, {&(0x7f00000001c0)="705c6994fdfd60d2957a911633aca5970399b595f0d41f4248b492390126f7957ec9fe3842e8998bbe67a3481b9e64a4db8ed8cc9a621b1cb29db301f1eea1857371a7d1ba782052754c3ecf7de58bc5f101a9a6f1d606d5bf213d1a3662ab34", 0x60}, {&(0x7f0000000280)="00180094f250e8a77d3308ca8fad7f4248e17fcbc7bbc9790b58139d5db534faeb", 0x21}, {&(0x7f00000002c0)="b571dcf4e676e444dec36a9667047d3ee3454027e04aac8d2ba5df56ac52983f66ec386959463ea93a7d33a5e6d8f153f71f71c8caaa81e55917e86dbda311fde04a89a132a032a645791ff97b0153be76aca68a03209bc3e5c8694be4d9de7a23edbe941992a23eb198828f31cb5871449142e355dd3f9e0b858f705cabab49d2ffd99dd3eba11840e7b757adebe66799d678e2cdabc08f55", 0x99}, {&(0x7f0000000380)="4bbf0d739f85e7a26a2f5064441e3b080d9db1adf21bd7677afff776da794f6a0566bd8ec5a02b29a7bb64f9e39917710874b027ce272fa13d62308cfea75a8be27e300333a2da39108e94af82e334d5d35d1d0532b107895041c4647ed05e7eb0181f2049034dd68b8a08b1893356becba4bc0455a29842c1c982cd1e3448e14f907afb2d65d150e6116646052442e761e51eb9fd3f19a8b00ea5ce220b14d28a3aa1474c7b26267a0c", 0xaa}, {&(0x7f0000000440)="ee1e507e6490bf897ae19e64b9ab5d01", 0x10}, {&(0x7f0000000480)="afdef518b4152fc370529947c2378284c69d963f587ad1f7535f0051ea04478381bec342b0abf8cf6caa78c8aa06bd88229a41c6cc3efba8c2d6bb1aa0c3dc5d94604a575c71798ac53776caa32ebe32372fbca9d79006c4b2e0200103bcf27350ec5a193dd74ea52d547f7d1b5c87df287b2f10a08d339a426860c4694002ac6e05d583bd48b846d4e907c790985cef7cb69d724be735143b3686292e4be26c17bc", 0xa2}], 0x7, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r4, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, r6}}}], 0x78, 0x4000}}, {{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000008c0)="951d37e0e303d483d960545e980fc0eb2a2fd4f51aec0ef62491d4da6b8aad74c571088eb7619d353531f5b57947e49d1d6a5928ee66b10be57db6b3ec5e1a3c1a97427244b197e86e59285df67818d5004ca0d5ea302e687b907606aeb8d22b78", 0x61}, {&(0x7f0000000940)="5cabd69e3e55423d6e533453a8f842f4afd76197e021a75489d68eddd1932e27c06d34d7bbb2b0a76f03e09ad8f3bb273f23ed4defba5450bcb02a60051ba607dfd9176f14431ea778271dc0a2996c7bad7b22dcdad5e51083fa8ae8ca11059448b5766d654a20189bec029e1be3c8f22bf6789e5d1294ac2398ce6d550c54d2ac69", 0x82}, {&(0x7f0000000a00)}], 0x3, &(0x7f0000000d80)=[@rights={{0x38, 0x1, 0x1, [r7, r0, r0, r0, r8, r0, r9, r10, r0, r0]}}], 0x38, 0x1}}], 0x2, 0x0) 01:11:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 68) 01:11:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2ac}, 0x58) 01:11:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8}, 0x58) [ 1984.596686] FAULT_INJECTION: forcing a failure. [ 1984.596686] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.598438] CPU: 0 UID: 0 PID: 43795 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1984.598466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1984.598477] Call Trace: [ 1984.598485] [ 1984.598494] dump_stack_lvl+0xfa/0x120 [ 1984.598526] should_fail_ex+0x4d7/0x5e0 [ 1984.598562] ? alloc_vfsmnt+0x23/0x6e0 [ 1984.598585] should_failslab+0xc2/0x120 [ 1984.598611] kmem_cache_alloc_noprof+0x80/0x690 [ 1984.598640] ? lock_release+0xc8/0x290 [ 1984.598682] ? alloc_vfsmnt+0x23/0x6e0 [ 1984.598704] alloc_vfsmnt+0x23/0x6e0 [ 1984.598735] fc_mount_longterm+0x15a/0x280 [ 1984.598768] mq_init_ns+0x42e/0x630 [ 1984.598806] copy_ipcs+0x2dd/0x570 [ 1984.598849] create_new_namespaces+0x210/0xab0 [ 1984.598870] ? security_capable+0x2f/0x90 [ 1984.598907] copy_namespaces+0x45c/0x580 [ 1984.598932] copy_process+0x26d4/0x7410 [ 1984.598958] ? __pfx_perf_trace_lock+0x10/0x10 [ 1984.598981] ? perf_tp_event+0x807/0xe70 [ 1984.599032] ? __pfx_copy_process+0x10/0x10 [ 1984.599056] ? __might_fault+0xe0/0x190 [ 1984.599095] ? _copy_from_user+0x5b/0xd0 [ 1984.599131] kernel_clone+0xea/0x7f0 [ 1984.599160] ? __pfx_kernel_clone+0x10/0x10 [ 1984.599200] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1984.599222] ? ksys_write+0x121/0x240 [ 1984.599244] ? lock_is_held_type+0x9e/0x120 [ 1984.599274] __do_sys_clone3+0x1f5/0x280 [ 1984.599297] ? __pfx___do_sys_clone3+0x10/0x10 [ 1984.599316] ? perf_trace_lock+0x337/0x5d0 [ 1984.599385] ? __pfx_perf_trace_lock+0x10/0x10 [ 1984.599413] ? __might_fault+0x138/0x190 [ 1984.599441] ? __might_fault+0xe0/0x190 [ 1984.599463] ? find_held_lock+0x2b/0x80 [ 1984.599483] ? syscall_trace_enter+0x1cf/0x240 [ 1984.599508] ? lock_release+0xc8/0x290 [ 1984.599556] do_syscall_64+0xbf/0x390 [ 1984.599584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.599603] RIP: 0033:0x7f2be6d39b19 [ 1984.599619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.599637] RSP: 002b:00007f2be42af188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1984.599655] RAX: ffffffffffffffda RBX: 00007f2be6e4cf60 RCX: 00007f2be6d39b19 [ 1984.599668] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1984.599679] RBP: 00007f2be42af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.599691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1984.599702] R13: 00007ffde056de4f R14: 00007f2be42af300 R15: 0000000000022000 [ 1984.599760] 01:11:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xf}, 0x58) 01:11:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x300}, 0x58) 01:11:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 70) 01:12:00 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x7, 0x0, 0x81, 0x0, 0x800, 0x0, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6450, 0x3}, 0x8109, 0xfffffffffffffff7, 0x8, 0x5, 0x6f, 0x1, 0x101, 0x0, 0x8bc80000, 0x0, 0x1000}, 0xffffffffffffffff, 0x8, r0, 0x0) 01:12:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 71) 01:12:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 69) 01:12:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 77) 01:12:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x2}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f0000000180)=""/101, 0x65}, {&(0x7f00000003c0)=""/155, 0x9b}], 0x4, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x80) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4e20, 0x3000, 0x4e22, 0x7, 0x2, 0x20, 0x80, 0x2f, 0x0, r1}, {0x401, 0x4, 0x6, 0x0, 0xb720, 0x1, 0x5, 0xffffffffffffff3a}, {0x8, 0xe0c6, 0x20, 0x8}, 0xd0, 0x6e6bc0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x4d5, 0x6c}, 0x2, @in=@loopback, 0x3505, 0x4, 0x0, 0x5, 0x4509, 0xff, 0x96}}, 0xe8) 01:12:00 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:12:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2b}, 0x58) 01:12:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3ec}, 0x58) [ 1997.123218] FAULT_INJECTION: forcing a failure. [ 1997.123218] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.127187] CPU: 1 UID: 0 PID: 43859 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1997.127232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1997.127251] Call Trace: [ 1997.127265] [ 1997.127281] dump_stack_lvl+0xfa/0x120 [ 1997.127334] should_fail_ex+0x4d7/0x5e0 [ 1997.127398] should_failslab+0xc2/0x120 [ 1997.127449] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 1997.127502] ? setup_mq_sysctls+0x5d/0x240 [ 1997.127551] ? kfree+0x284/0x550 [ 1997.127628] kmemdup_noprof+0x2b/0x60 [ 1997.127684] setup_mq_sysctls+0x5d/0x240 [ 1997.127757] copy_ipcs+0x3e5/0x570 [ 1997.127829] create_new_namespaces+0x210/0xab0 [ 1997.127871] ? security_capable+0x2f/0x90 [ 1997.127935] copy_namespaces+0x45c/0x580 [ 1997.128010] copy_process+0x26d4/0x7410 [ 1997.128059] ? __pfx_perf_trace_lock+0x10/0x10 [ 1997.128114] ? perf_tp_event+0x807/0xe70 [ 1997.128215] ? __pfx_copy_process+0x10/0x10 [ 1997.128266] ? __might_fault+0xe0/0x190 [ 1997.128336] ? _copy_from_user+0x5b/0xd0 [ 1997.128409] kernel_clone+0xea/0x7f0 [ 1997.128472] ? __pfx_kernel_clone+0x10/0x10 [ 1997.128560] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1997.128607] ? ksys_write+0x121/0x240 [ 1997.128652] ? lock_is_held_type+0x9e/0x120 [ 1997.128714] __do_sys_clone3+0x1f5/0x280 [ 1997.128762] ? __pfx___do_sys_clone3+0x10/0x10 [ 1997.128802] ? perf_trace_lock+0x337/0x5d0 [ 1997.128943] ? __pfx_perf_trace_lock+0x10/0x10 [ 1997.128997] ? __might_fault+0x138/0x190 [ 1997.129051] ? __might_fault+0xe0/0x190 [ 1997.129094] ? find_held_lock+0x2b/0x80 [ 1997.129133] ? syscall_trace_enter+0x1cf/0x240 [ 1997.129184] ? lock_release+0xc8/0x290 [ 1997.129276] do_syscall_64+0xbf/0x390 [ 1997.129327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.129360] RIP: 0033:0x7ff6d12e7b19 [ 1997.129390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1997.129424] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1997.129457] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 1997.129482] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1997.129504] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1997.129525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1997.129545] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 1997.129646] [ 1997.201023] FAULT_INJECTION: forcing a failure. [ 1997.201023] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.203245] CPU: 1 UID: 0 PID: 43863 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1997.203296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1997.203317] Call Trace: [ 1997.203330] [ 1997.203344] dump_stack_lvl+0xfa/0x120 [ 1997.203390] should_fail_ex+0x4d7/0x5e0 [ 1997.203438] should_failslab+0xc2/0x120 [ 1997.203485] __kmalloc_noprof+0xcd/0x680 [ 1997.203535] ? __register_sysctl_table+0xd3e/0x16a0 [ 1997.203573] ? lock_release+0xc8/0x290 [ 1997.203618] ? __register_sysctl_table+0xd4f/0x16a0 [ 1997.203662] __register_sysctl_table+0xd4f/0x16a0 [ 1997.203709] ? __pfx___register_sysctl_table+0x10/0x10 [ 1997.203742] ? setup_mq_sysctls+0x5d/0x240 [ 1997.203801] ? __asan_memcpy+0x3d/0x60 [ 1997.203849] setup_mq_sysctls+0x145/0x240 [ 1997.203907] copy_ipcs+0x3e5/0x570 [ 1997.203983] create_new_namespaces+0x210/0xab0 [ 1997.204023] ? security_capable+0x2f/0x90 [ 1997.204068] copy_namespaces+0x45c/0x580 [ 1997.204120] copy_process+0x26d4/0x7410 [ 1997.204168] ? __pfx_perf_trace_lock+0x10/0x10 [ 1997.204247] ? __pfx_copy_process+0x10/0x10 [ 1997.204293] ? __might_fault+0xe0/0x190 [ 1997.204340] ? _copy_from_user+0x5b/0xd0 [ 1997.204393] kernel_clone+0xea/0x7f0 [ 1997.204434] ? get_pid_task+0xfd/0x250 [ 1997.204479] ? __pfx_kernel_clone+0x10/0x10 [ 1997.204520] ? perf_trace_lock+0xb5/0x5d0 [ 1997.204583] ? find_held_lock+0x2b/0x80 [ 1997.204621] ? ksys_write+0x121/0x240 [ 1997.204665] ? lock_is_held_type+0x9e/0x120 [ 1997.204712] __do_sys_clone3+0x1f5/0x280 [ 1997.204760] ? __pfx___do_sys_clone3+0x10/0x10 [ 1997.204805] ? perf_trace_lock+0xb5/0x5d0 [ 1997.204874] ? lock_acquire+0x15e/0x2f0 [ 1997.204927] ? __pfx_perf_trace_lock+0x10/0x10 [ 1997.204981] ? __might_fault+0x138/0x190 [ 1997.205018] ? lock_release+0xc8/0x290 [ 1997.205069] ? __might_fault+0xe0/0x190 [ 1997.205105] ? find_held_lock+0x2b/0x80 [ 1997.205141] ? syscall_trace_enter+0x1cf/0x240 [ 1997.205186] ? lock_release+0xc8/0x290 [ 1997.205247] do_syscall_64+0xbf/0x390 [ 1997.205293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.205329] RIP: 0033:0x7fc56dfaeb19 [ 1997.205355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1997.205389] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1997.205423] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 1997.205448] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 1997.205469] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 1997.205491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1997.205513] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 1997.205568] [ 1997.259795] sysctl could not get directory: /fs -12 01:12:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x480}, 0x58) 01:12:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x62}, 0x58) 01:12:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 78) 01:12:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x500}, 0x58) 01:12:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 72) 01:12:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x300}, 0x58) 01:12:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x600}, 0x58) 01:12:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3be}, 0x58) 01:12:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:20 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x2bd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x7f, 0x6, 0x9, 0x0, 0x0, 0x4014, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70210123, 0x0, @perf_config_ext={0x8, 0xc0000000000000}, 0x80, 0x4, 0x4, 0x3, 0xfe, 0xaaea, 0x5, 0x0, 0x6, 0x0, 0xfa}, r1, 0x3, r0, 0x3) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r3, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) r4 = clone3(&(0x7f0000005880)={0x69a08100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x0, {r3}}, 0x58) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d7072656665722c6d706f6c3d62696e643d72656c617469357c7295b9cdd16692ff0156c57797754510e481c58915321001fbbd2b911f485be80e24b32c2c34bf4d87255e135c030b4e3ceceb960b8b7604c86807542b58485cb373794aa253"]) r5 = syz_open_dev$vcsa(&(0x7f0000000180), 0x4, 0x40000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendfile(r5, r6, 0x0, 0x7) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e22, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='syzkaller1\x00', 0xff, 0x7, 0x9}) sched_setscheduler(r4, 0x1, &(0x7f0000000000)) ptrace(0x4207, r4) fcntl$getown(r2, 0x9) r7 = syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00') clone3(&(0x7f0000000500)={0x200000000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0xd}, &(0x7f0000000400)=""/2, 0x2, &(0x7f0000000440)=""/66, &(0x7f00000004c0)=[r1], 0x1, {r3}}, 0x58) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) 01:12:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 73) 01:12:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 79) 01:12:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x700}, 0x58) 01:12:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x480}, 0x58) 01:12:20 executing program 4: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x6, 0x3, 0x4, 0x1, 0x0, 0x6fb, 0x20404, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1da, 0x4, @perf_config_ext={0x6f, 0x100}, 0x13c08, 0x1, 0x8, 0x4, 0xdf, 0x101, 0xfe, 0x0, 0x80000001, 0x0, 0x33ba55e2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0xc9, 0x6c203) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendfile(r1, r2, &(0x7f0000000100)=0xfffffffffffffff8, 0x101) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:20 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) [ 2017.227165] FAULT_INJECTION: forcing a failure. [ 2017.227165] name failslab, interval 1, probability 0, space 0, times 0 [ 2017.228829] CPU: 0 UID: 0 PID: 44210 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2017.228860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2017.228873] Call Trace: [ 2017.228882] [ 2017.228893] dump_stack_lvl+0xfa/0x120 [ 2017.228928] should_fail_ex+0x4d7/0x5e0 [ 2017.228970] should_failslab+0xc2/0x120 [ 2017.229004] __kmalloc_noprof+0xcd/0x680 [ 2017.229044] ? trace_irq_enable.constprop.0+0x26/0x100 [ 2017.229073] ? __register_sysctl_table+0xb5/0x16a0 [ 2017.229122] __register_sysctl_table+0xb5/0x16a0 [ 2017.229143] ? kasan_save_track+0x14/0x30 [ 2017.229173] ? __kasan_kmalloc+0x7f/0x90 [ 2017.229218] ? __pfx___register_sysctl_table+0x10/0x10 [ 2017.229239] ? setup_mq_sysctls+0x5d/0x240 [ 2017.229285] ? __asan_memcpy+0x3d/0x60 [ 2017.229324] setup_mq_sysctls+0x145/0x240 [ 2017.229372] copy_ipcs+0x3e5/0x570 [ 2017.229417] create_new_namespaces+0x210/0xab0 [ 2017.229445] ? security_capable+0x2f/0x90 [ 2017.229487] copy_namespaces+0x45c/0x580 [ 2017.229521] copy_process+0x26d4/0x7410 [ 2017.229553] ? __pfx_perf_trace_lock+0x10/0x10 [ 2017.229583] ? perf_tp_event+0x807/0xe70 [ 2017.229644] ? __pfx_copy_process+0x10/0x10 [ 2017.229677] ? __might_fault+0xe0/0x190 [ 2017.229718] ? _copy_from_user+0x5b/0xd0 [ 2017.229764] kernel_clone+0xea/0x7f0 [ 2017.229791] ? find_held_lock+0x2b/0x80 [ 2017.229822] ? __pfx_kernel_clone+0x10/0x10 [ 2017.229875] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2017.229908] ? trace_sched_exit_tp+0xbf/0x100 [ 2017.229949] __do_sys_clone3+0x1f5/0x280 [ 2017.229980] ? __pfx___do_sys_clone3+0x10/0x10 [ 2017.230006] ? perf_trace_lock+0x337/0x5d0 [ 2017.230090] ? __pfx_perf_trace_lock+0x10/0x10 [ 2017.230124] ? __might_fault+0x138/0x190 [ 2017.230158] ? __might_fault+0xe0/0x190 [ 2017.230186] ? find_held_lock+0x2b/0x80 [ 2017.230211] ? syscall_trace_enter+0x1cf/0x240 [ 2017.230243] ? lock_release+0xc8/0x290 [ 2017.230301] do_syscall_64+0xbf/0x390 [ 2017.230337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.230361] RIP: 0033:0x7ff6d12e7b19 [ 2017.230380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2017.230401] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2017.230423] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 2017.230438] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 2017.230452] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2017.230465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2017.230479] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 2017.230541] [ 2017.316810] FAULT_INJECTION: forcing a failure. [ 2017.316810] name failslab, interval 1, probability 0, space 0, times 0 [ 2017.318593] CPU: 0 UID: 0 PID: 44211 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2017.318625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2017.318638] Call Trace: [ 2017.318647] [ 2017.318658] dump_stack_lvl+0xfa/0x120 01:12:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2000}, 0x58) [ 2017.318693] should_fail_ex+0x4d7/0x5e0 [ 2017.318735] should_failslab+0xc2/0x120 [ 2017.318769] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 2017.318801] ? __pfx___register_sysctl_table+0x10/0x10 [ 2017.318824] ? setup_ipc_sysctls+0x5d/0x2c0 [ 2017.318873] kmemdup_noprof+0x2b/0x60 [ 2017.318909] setup_ipc_sysctls+0x5d/0x2c0 [ 2017.318950] copy_ipcs+0x406/0x570 [ 2017.318996] create_new_namespaces+0x210/0xab0 [ 2017.319025] ? security_capable+0x2f/0x90 [ 2017.319066] copy_namespaces+0x45c/0x580 [ 2017.319109] copy_process+0x26d4/0x7410 [ 2017.319140] ? __pfx_perf_trace_lock+0x10/0x10 [ 2017.319171] ? perf_tp_event+0x807/0xe70 [ 2017.319232] ? __pfx_copy_process+0x10/0x10 [ 2017.319264] ? __might_fault+0xe0/0x190 [ 2017.319306] ? _copy_from_user+0x5b/0xd0 [ 2017.319352] kernel_clone+0xea/0x7f0 [ 2017.319391] ? __pfx_kernel_clone+0x10/0x10 [ 2017.319443] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2017.319472] ? ksys_write+0x121/0x240 [ 2017.319502] ? lock_is_held_type+0x9e/0x120 [ 2017.319541] __do_sys_clone3+0x1f5/0x280 [ 2017.319572] ? __pfx___do_sys_clone3+0x10/0x10 [ 2017.319597] ? perf_trace_lock+0x337/0x5d0 [ 2017.319680] ? __pfx_perf_trace_lock+0x10/0x10 [ 2017.319714] ? __might_fault+0x138/0x190 [ 2017.319749] ? __might_fault+0xe0/0x190 [ 2017.319776] ? find_held_lock+0x2b/0x80 [ 2017.319803] ? syscall_trace_enter+0x1cf/0x240 [ 2017.319835] ? lock_release+0xc8/0x290 [ 2017.319892] do_syscall_64+0xbf/0x390 [ 2017.319926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.319951] RIP: 0033:0x7fc56dfaeb19 [ 2017.319969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2017.319992] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2017.320014] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 2017.320029] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 2017.320042] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2017.320055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2017.320069] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 2017.320131] 01:12:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x500}, 0x58) 01:12:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 74) 01:12:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2b00}, 0x58) 01:12:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 80) 01:12:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x50f}, 0x58) 01:12:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r1 = fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r3 = fork() clone3(&(0x7f0000000400)={0x2080000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/180, 0xb4, &(0x7f0000000280)=""/210, &(0x7f0000000200)=[r0, r0, r1, r0, r0, r2, r3], 0x7}, 0x58) 01:12:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3f00}, 0x58) 01:12:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 81) 01:12:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x4, 0x81, 0x7f, 0xa0, 0x0, 0x25, 0x6000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x386, 0x2, @perf_config_ext={0x664, 0x2}, 0x200, 0x20, 0x100, 0x3, 0x2, 0x0, 0x76, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x9) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x600}, 0x58) 01:12:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804102, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:34 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:12:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x4000}, 0x58) 01:12:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 75) [ 2031.043033] FAULT_INJECTION: forcing a failure. [ 2031.043033] name failslab, interval 1, probability 0, space 0, times 0 [ 2031.044814] CPU: 0 UID: 0 PID: 44654 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2031.044845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2031.044859] Call Trace: [ 2031.044868] [ 2031.044878] dump_stack_lvl+0xfa/0x120 [ 2031.044915] should_fail_ex+0x4d7/0x5e0 [ 2031.044956] should_failslab+0xc2/0x120 [ 2031.044989] __kmalloc_noprof+0xcd/0x680 [ 2031.045022] ? __register_sysctl_table+0xd3e/0x16a0 [ 2031.045048] ? lock_release+0xc8/0x290 [ 2031.045077] ? __register_sysctl_table+0xd4f/0x16a0 [ 2031.045125] __register_sysctl_table+0xd4f/0x16a0 [ 2031.045172] ? __pfx___register_sysctl_table+0x10/0x10 [ 2031.045193] ? setup_mq_sysctls+0x5d/0x240 [ 2031.045238] ? __asan_memcpy+0x3d/0x60 [ 2031.045278] setup_mq_sysctls+0x145/0x240 [ 2031.045325] copy_ipcs+0x3e5/0x570 [ 2031.045371] create_new_namespaces+0x210/0xab0 [ 2031.045399] ? security_capable+0x2f/0x90 [ 2031.045440] copy_namespaces+0x45c/0x580 [ 2031.045474] copy_process+0x26d4/0x7410 [ 2031.045506] ? __pfx_perf_trace_lock+0x10/0x10 [ 2031.045537] ? perf_tp_event+0x807/0xe70 [ 2031.045598] ? __pfx_copy_process+0x10/0x10 [ 2031.045630] ? __might_fault+0xe0/0x190 [ 2031.045671] ? _copy_from_user+0x5b/0xd0 [ 2031.045717] kernel_clone+0xea/0x7f0 [ 2031.045756] ? __pfx_kernel_clone+0x10/0x10 [ 2031.045808] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2031.045837] ? ksys_write+0x121/0x240 [ 2031.045867] ? lock_is_held_type+0x9e/0x120 [ 2031.045905] __do_sys_clone3+0x1f5/0x280 [ 2031.045935] ? __pfx___do_sys_clone3+0x10/0x10 [ 2031.045961] ? perf_trace_lock+0x337/0x5d0 [ 2031.046044] ? __pfx_perf_trace_lock+0x10/0x10 [ 2031.046078] ? __might_fault+0x138/0x190 [ 2031.046113] ? __might_fault+0xe0/0x190 [ 2031.046140] ? find_held_lock+0x2b/0x80 [ 2031.046167] ? syscall_trace_enter+0x1cf/0x240 [ 2031.046200] ? lock_release+0xc8/0x290 [ 2031.046258] do_syscall_64+0xbf/0x390 [ 2031.046300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.046329] RIP: 0033:0x7ff6d12e7b19 [ 2031.046351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2031.046377] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2031.046403] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 2031.046421] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 2031.046437] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2031.046454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2031.046469] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 2031.046542] [ 2031.090140] sysctl could not get directory: /fs -12 [ 2031.098378] FAULT_INJECTION: forcing a failure. [ 2031.098378] name failslab, interval 1, probability 0, space 0, times 0 [ 2031.100403] CPU: 0 UID: 0 PID: 44657 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2031.100438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2031.100453] Call Trace: [ 2031.100463] [ 2031.100475] dump_stack_lvl+0xfa/0x120 [ 2031.100513] should_fail_ex+0x4d7/0x5e0 [ 2031.100561] should_failslab+0xc2/0x120 [ 2031.100599] __kmalloc_noprof+0xcd/0x680 [ 2031.100637] ? __create_object+0x59/0x80 [ 2031.100682] ? __register_sysctl_table+0xb5/0x16a0 [ 2031.100730] __register_sysctl_table+0xb5/0x16a0 [ 2031.100754] ? kasan_save_track+0x14/0x30 [ 2031.100788] ? __kasan_kmalloc+0x7f/0x90 [ 2031.100840] ? __pfx___register_sysctl_table+0x10/0x10 [ 2031.100864] ? setup_ipc_sysctls+0x5d/0x2c0 [ 2031.100909] ? __asan_memcpy+0x3d/0x60 [ 2031.100955] setup_ipc_sysctls+0x16d/0x2c0 [ 2031.101002] copy_ipcs+0x406/0x570 [ 2031.101056] create_new_namespaces+0x210/0xab0 [ 2031.101088] ? security_capable+0x2f/0x90 [ 2031.101144] copy_namespaces+0x45c/0x580 [ 2031.101185] copy_process+0x26d4/0x7410 [ 2031.101221] ? __pfx_perf_trace_lock+0x10/0x10 [ 2031.101256] ? perf_tp_event+0x807/0xe70 [ 2031.101328] ? __pfx_copy_process+0x10/0x10 [ 2031.101365] ? __might_fault+0xe0/0x190 [ 2031.101414] ? _copy_from_user+0x5b/0xd0 [ 2031.101468] kernel_clone+0xea/0x7f0 [ 2031.101513] ? __pfx_kernel_clone+0x10/0x10 [ 2031.101574] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2031.101608] ? ksys_write+0x121/0x240 [ 2031.101641] ? lock_is_held_type+0x9e/0x120 [ 2031.101685] __do_sys_clone3+0x1f5/0x280 [ 2031.101721] ? __pfx___do_sys_clone3+0x10/0x10 [ 2031.101751] ? perf_trace_lock+0x337/0x5d0 [ 2031.101849] ? __pfx_perf_trace_lock+0x10/0x10 [ 2031.101889] ? __might_fault+0x138/0x190 [ 2031.101929] ? __might_fault+0xe0/0x190 [ 2031.101961] ? find_held_lock+0x2b/0x80 [ 2031.101992] ? syscall_trace_enter+0x1cf/0x240 [ 2031.102029] ? lock_release+0xc8/0x290 [ 2031.102097] do_syscall_64+0xbf/0x390 [ 2031.102137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2031.102164] RIP: 0033:0x7fc56dfaeb19 [ 2031.102187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2031.102212] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2031.102236] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 2031.102254] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 2031.102270] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2031.102286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2031.102302] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 2031.102374] 01:12:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x6200}, 0x58) 01:12:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x700}, 0x58) 01:12:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804103, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xfb671f36f1afaee1, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:47 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004ec0), 0x200, 0x0) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004f00)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r4, &(0x7f0000004f40)=""/79, 0x4f, 0x4c) r6 = clone3(&(0x7f0000005380)={0x800, &(0x7f0000005200), &(0x7f0000005240), &(0x7f0000005280), {0x2b}, &(0x7f00000052c0)=""/5, 0x5, &(0x7f0000005300)=""/16, &(0x7f0000005340)=[r2, r2, r1, r2, r1, r1, r1], 0x7, {r3}}, 0x58) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000005400)=0x0) r8 = fork() ptrace(0x10, r8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000005440)={0x0}, &(0x7f0000005480)=0xc) r10 = fork() ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000005640)={&(0x7f00000055c0)=""/96, 0x60}) ptrace(0x10, r10) r11 = openat$cgroup_ro(r3, &(0x7f0000005500)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) clone3(&(0x7f0000005540)={0x1000000, &(0x7f0000004fc0), &(0x7f0000005000), &(0x7f0000005040), {0x16}, &(0x7f0000005080)=""/78, 0x4e, &(0x7f0000005100)=""/223, &(0x7f00000054c0)=[0x0, r6, r7, r8, r9, r2, r10, 0xffffffffffffffff, r2], 0x9, {r11}}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f0000005680), 0x600001, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000380)=""/243, 0xf3}], 0x3, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000000600)=""/58, 0x3a}, {&(0x7f0000000640)=""/9, 0x9}, {&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000007c0)=""/59, 0x3b}], 0x7}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f0000001940)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000002b40)=[{&(0x7f0000001a80)=""/61, 0x3d}, {&(0x7f0000001ac0)=""/103, 0x67}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x3, &(0x7f0000002b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000003180)=[{&(0x7f0000002d00)=""/198, 0xc6}, {&(0x7f0000002e00)=""/162, 0xa2}, {&(0x7f0000002ec0)=""/208, 0xd0}, {&(0x7f0000002fc0)=""/48, 0x30}, {&(0x7f0000003000)=""/167, 0xa7}, {&(0x7f00000030c0)=""/175, 0xaf}], 0x6, &(0x7f0000003200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f0000003480)=[{&(0x7f00000032c0)=""/196, 0xc4}, {&(0x7f00000033c0)=""/171, 0xab}], 0x2, &(0x7f00000034c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000003580)=@abs, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000003600)=""/230, 0xe6}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/129, 0x81}, {&(0x7f00000047c0)=""/138, 0x8a}, {&(0x7f0000004880)=""/143, 0x8f}, {&(0x7f0000004940)=""/97, 0x61}, {&(0x7f00000049c0)=""/195, 0xc3}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/166, 0xa6}], 0x9, &(0x7f0000004c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x7, 0x40000000, &(0x7f0000004e80)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3f, 0x0, 0x1, 0x80, 0x0, 0x7ff, 0x8203, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x2241, 0x1, 0xfff, 0x0, 0x47ef259c, 0x3, 0x2, 0x0, 0x4, 0x0, 0x8001}, r12, 0xffffffffffffffff, r0, 0x0) fchmod(r0, 0x80) 01:12:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 76) 01:12:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xf00}, 0x58) 01:12:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x8004}, 0x58) 01:12:47 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:12:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804104, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 82) 01:12:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804105, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xf05}, 0x58) 01:12:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x8, 0x1, 0x3f, 0x0, 0x81, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x86}, 0x4100, 0x6, 0x3, 0x4, 0x10000, 0x1100000, 0x1, 0x0, 0xfff, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x2) 01:12:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xac02}, 0x58) 01:12:59 executing program 4: r0 = getpgid(0x0) sched_getattr(r0, &(0x7f0000000300)={0x38}, 0x38, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x800000000}, 0x0, 0x0, 0x0, 0x0, 0x67d98e4, 0x0, 0x1, 0x0, 0xfffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0xc}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x26000) dup2(r1, r2) setpgid(r0, r0) 01:12:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 77) 01:12:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xf89}, 0x58) 01:12:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804106, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 83) 01:12:59 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) [ 2055.968507] FAULT_INJECTION: forcing a failure. [ 2055.968507] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.969464] CPU: 1 UID: 0 PID: 45209 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2055.969481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.969488] Call Trace: [ 2055.969493] [ 2055.969498] dump_stack_lvl+0xfa/0x120 [ 2055.969517] should_fail_ex+0x4d7/0x5e0 [ 2055.969535] should_failslab+0xc2/0x120 [ 2055.969552] __kmalloc_noprof+0xcd/0x680 [ 2055.969570] ? __register_sysctl_table+0xd3e/0x16a0 [ 2055.969583] ? lock_release+0xc8/0x290 [ 2055.969599] ? __register_sysctl_table+0xd4f/0x16a0 [ 2055.969614] __register_sysctl_table+0xd4f/0x16a0 [ 2055.969630] ? __pfx___register_sysctl_table+0x10/0x10 [ 2055.969641] ? setup_ipc_sysctls+0x5d/0x2c0 [ 2055.969658] ? __asan_memcpy+0x3d/0x60 [ 2055.969674] setup_ipc_sysctls+0x16d/0x2c0 [ 2055.969690] copy_ipcs+0x406/0x570 [ 2055.969710] create_new_namespaces+0x210/0xab0 [ 2055.969723] ? security_capable+0x2f/0x90 [ 2055.969739] copy_namespaces+0x45c/0x580 [ 2055.969752] copy_process+0x26d4/0x7410 [ 2055.969768] ? __pfx_perf_trace_lock+0x10/0x10 [ 2055.969793] ? __pfx_copy_process+0x10/0x10 [ 2055.969808] ? __might_fault+0xe0/0x190 [ 2055.969824] ? _copy_from_user+0x5b/0xd0 [ 2055.969842] kernel_clone+0xea/0x7f0 [ 2055.969856] ? get_pid_task+0xfd/0x250 [ 2055.969871] ? __pfx_kernel_clone+0x10/0x10 [ 2055.969884] ? perf_trace_lock+0xb5/0x5d0 [ 2055.969905] ? find_held_lock+0x2b/0x80 [ 2055.969917] ? ksys_write+0x121/0x240 [ 2055.969932] ? lock_is_held_type+0x9e/0x120 [ 2055.969948] __do_sys_clone3+0x1f5/0x280 [ 2055.969963] ? __pfx___do_sys_clone3+0x10/0x10 [ 2055.969978] ? perf_trace_lock+0xb5/0x5d0 [ 2055.970001] ? lock_acquire+0x15e/0x2f0 [ 2055.970018] ? __pfx_perf_trace_lock+0x10/0x10 [ 2055.970034] ? __might_fault+0x138/0x190 [ 2055.970046] ? lock_release+0xc8/0x290 [ 2055.970062] ? __might_fault+0xe0/0x190 [ 2055.970074] ? find_held_lock+0x2b/0x80 [ 2055.970086] ? syscall_trace_enter+0x1cf/0x240 [ 2055.970107] ? lock_release+0xc8/0x290 [ 2055.970128] do_syscall_64+0xbf/0x390 [ 2055.970143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.970155] RIP: 0033:0x7fc56dfaeb19 [ 2055.970165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.970178] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2055.970189] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 2055.970198] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 2055.970205] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2055.970213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2055.970220] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 2055.970237] [ 2055.991711] sysctl could not get directory: /kernel -12 [ 2055.993895] FAULT_INJECTION: forcing a failure. [ 2055.993895] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.995000] CPU: 1 UID: 0 PID: 45208 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2055.995016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.995023] Call Trace: [ 2055.995027] [ 2055.995032] dump_stack_lvl+0xfa/0x120 [ 2055.995049] should_fail_ex+0x4d7/0x5e0 [ 2055.995069] should_failslab+0xc2/0x120 [ 2055.995086] __kmalloc_noprof+0xcd/0x680 [ 2055.995108] ? __register_sysctl_table+0xd3e/0x16a0 [ 2055.995121] ? lock_release+0xc8/0x290 [ 2055.995136] ? __register_sysctl_table+0xd4f/0x16a0 [ 2055.995158] __register_sysctl_table+0xd4f/0x16a0 [ 2055.995183] ? __pfx___register_sysctl_table+0x10/0x10 [ 2055.995195] ? setup_mq_sysctls+0x5d/0x240 [ 2055.995219] ? __asan_memcpy+0x3d/0x60 [ 2055.995240] setup_mq_sysctls+0x145/0x240 [ 2055.995266] copy_ipcs+0x3e5/0x570 [ 2055.995291] create_new_namespaces+0x210/0xab0 [ 2055.995305] ? security_capable+0x2f/0x90 [ 2055.995327] copy_namespaces+0x45c/0x580 [ 2055.995345] copy_process+0x26d4/0x7410 [ 2055.995361] ? __pfx_perf_trace_lock+0x10/0x10 [ 2055.995377] ? perf_tp_event+0x807/0xe70 [ 2055.995411] ? __pfx_copy_process+0x10/0x10 [ 2055.995429] ? __might_fault+0xe0/0x190 [ 2055.995451] ? _copy_from_user+0x5b/0xd0 [ 2055.995475] kernel_clone+0xea/0x7f0 [ 2055.995496] ? __pfx_kernel_clone+0x10/0x10 [ 2055.995524] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2055.995540] ? ksys_write+0x121/0x240 [ 2055.995555] ? lock_is_held_type+0x9e/0x120 [ 2055.995575] __do_sys_clone3+0x1f5/0x280 [ 2055.995591] ? __pfx___do_sys_clone3+0x10/0x10 [ 2055.995605] ? perf_trace_lock+0x337/0x5d0 [ 2055.995650] ? __pfx_perf_trace_lock+0x10/0x10 [ 2055.995669] ? __might_fault+0x138/0x190 [ 2055.995687] ? __might_fault+0xe0/0x190 [ 2055.995702] ? find_held_lock+0x2b/0x80 [ 2055.995716] ? syscall_trace_enter+0x1cf/0x240 [ 2055.995732] ? lock_release+0xc8/0x290 [ 2055.995763] do_syscall_64+0xbf/0x390 [ 2055.995781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.995793] RIP: 0033:0x7ff6d12e7b19 [ 2055.995803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.995814] RSP: 002b:00007ff6ce85d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2055.995826] RAX: ffffffffffffffda RBX: 00007ff6d13faf60 RCX: 00007ff6d12e7b19 [ 2055.995834] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 2055.995841] RBP: 00007ff6ce85d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2055.995849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2055.995856] R13: 00007ffc9072a53f R14: 00007ff6ce85d300 R15: 0000000000022000 [ 2055.995890] [ 2056.015594] sysctl could not get directory: /fs/mqueue -12 01:12:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xec03}, 0x58) 01:12:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 78) 01:12:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 84) 01:12:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804107, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:12:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xfba}, 0x58) 01:13:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff03}, 0x58) [ 2056.193663] FAULT_INJECTION: forcing a failure. [ 2056.193663] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.195833] CPU: 1 UID: 0 PID: 45288 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2056.195851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2056.195859] Call Trace: [ 2056.195863] [ 2056.195868] dump_stack_lvl+0xfa/0x120 [ 2056.195888] should_fail_ex+0x4d7/0x5e0 [ 2056.195906] should_failslab+0xc2/0x120 [ 2056.195922] __kmalloc_noprof+0xcd/0x680 [ 2056.195940] ? __create_object+0x59/0x80 [ 2056.195959] ? __register_sysctl_table+0xb5/0x16a0 [ 2056.195976] __register_sysctl_table+0xb5/0x16a0 [ 2056.195987] ? kasan_save_track+0x14/0x30 [ 2056.196002] ? __kasan_kmalloc+0x7f/0x90 [ 2056.196019] ? __pfx___register_sysctl_table+0x10/0x10 [ 2056.196030] ? setup_ipc_sysctls+0x5d/0x2c0 [ 2056.196047] ? __asan_memcpy+0x3d/0x60 [ 2056.196063] setup_ipc_sysctls+0x16d/0x2c0 [ 2056.196079] copy_ipcs+0x406/0x570 [ 2056.196103] create_new_namespaces+0x210/0xab0 [ 2056.196117] ? security_capable+0x2f/0x90 [ 2056.196133] copy_namespaces+0x45c/0x580 [ 2056.196146] copy_process+0x26d4/0x7410 [ 2056.196162] ? __pfx_perf_trace_lock+0x10/0x10 [ 2056.196188] ? __pfx_copy_process+0x10/0x10 [ 2056.196202] ? __might_fault+0xe0/0x190 [ 2056.196218] ? _copy_from_user+0x5b/0xd0 [ 2056.196235] kernel_clone+0xea/0x7f0 [ 2056.196248] ? get_pid_task+0xfd/0x250 [ 2056.196264] ? __pfx_kernel_clone+0x10/0x10 [ 2056.196277] ? perf_trace_lock+0xb5/0x5d0 [ 2056.196298] ? find_held_lock+0x2b/0x80 [ 2056.196310] ? ksys_write+0x121/0x240 [ 2056.196325] ? lock_is_held_type+0x9e/0x120 [ 2056.196340] __do_sys_clone3+0x1f5/0x280 [ 2056.196355] ? __pfx___do_sys_clone3+0x10/0x10 [ 2056.196369] ? perf_trace_lock+0xb5/0x5d0 [ 2056.196393] ? lock_acquire+0x15e/0x2f0 [ 2056.196410] ? __pfx_perf_trace_lock+0x10/0x10 [ 2056.196426] ? __might_fault+0x138/0x190 [ 2056.196438] ? lock_release+0xc8/0x290 [ 2056.196455] ? __might_fault+0xe0/0x190 [ 2056.196467] ? find_held_lock+0x2b/0x80 [ 2056.196479] ? syscall_trace_enter+0x1cf/0x240 [ 2056.196495] ? lock_release+0xc8/0x290 [ 2056.196516] do_syscall_64+0xbf/0x390 [ 2056.196531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.196543] RIP: 0033:0x7fc56dfaeb19 [ 2056.196562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2056.196574] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2056.196586] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 2056.196595] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 2056.196602] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2056.196610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2056.196617] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 2056.196634] 01:13:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0xff0f}, 0x58) 01:13:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x20200}, 0x58) 01:13:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804110, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:13:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x1058}, 0x58) 01:13:10 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r3}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x1000}, {r0, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x1ff, 0x7b7, 0x5, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x105000, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000400)="4557d271b7f300398020f2d4b4bcff9ee568c01f643db9499b4794fd9cb8832111272d88cd7ddb54801f3834333a30364d36606d9b7cc52822c2ef647decd0ad10641dd08090311a757a55", 0x4b, 0x7f, 0x0, 0x3, r5}]) 01:13:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x3ffff}, 0x58) 01:13:10 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x5) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:13:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 79) 01:13:10 executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000000000006000000000000000100000000000000", @ANYRES32, @ANYBLOB="07000000060000000000000000200000000000000000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x5048}, 0x4a90, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8515}, 0x0, 0xfffffffffff7ffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x10bf81, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup2(r3, r4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) syz_io_uring_submit(r6, 0x0, 0xfffffffffffffffe, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) io_submit(0x0, 0xa, &(0x7f0000001a40)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000300)="74293302f9f3220da15f7fbc48cae4d5d3f5e6beefc8d01dcf6ed3e3d6161209d9c194ff3de75132000dbcad90abb7265b84", 0x32, 0x5, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000000380)="55ffbed32d0107655f3a0ddc973c5cdbe4ac54c232cf636a38dcebba44a78a9f89e35372", 0x24, 0x1, 0x0, 0x7}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000000400)="7b4df3ace280fe9c7b360d7d09381a70b7f32e2a27a74bfbafe824e7dff3983aa3fdcb2ac86a0f660b5f1e42600062752afcc79b2c59a43b23707f8a80913a8e7577c318ec0c34a6fb04c9016a89194dada91e81bd08107510e36edd17f4b95fe92e5156283c31e8b6334eb00e5432bb57cfc23c5a6380176c7cee3c91d7afff57946fe1d94fc620e2987ded3a29f7e6a90f6a2753e2f88f056b2895b3fffb2f675c5ddd303cb1004c893141d1241c98f9923d3671811c5b0978977e5288e65f9d61d4b5b573ddcda8c2a1966f94d26ef63fd9", 0xd3, 0x1ff, 0x0, 0x2, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x8000, r5, &(0x7f0000000540)="241bdffeb59afe7399fdcaf24472665e089ed91fdcd2c4cd498251d90bca54e188fdb2f7d5854ad3f7da543661717c1c00a0dc5266b27e8dece2b4dd887e5bdff78e7db3181aa5b022ddf13b708ef88179494c5782a513f1ff2d5a9159d8b207477c88023e2619882e6eb69eaa125639a24ae3ae003c3185656d294575771f8cdd8a076f4b5dfd1b44d653b27ed7d5621654788ccc9f81a8abc73e61336fcd27b504ac19f3017ce6bbd8953e39", 0xad, 0xff, 0x0, 0x2, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x3ff, r3, &(0x7f0000000640)="6e2fa5c007cb301bf7cc1e53cdcc9db0eed693c080773f939899b0fa", 0x1c, 0x400, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000700)="5ef345c3d185bd745e8f1455026d63150a3bec7417cca4d599528bcbfdc73cf93903a3b06c353ad89a92f223be3aabb229e572153817939d7d9dab90dda0160e776b4b9891c58b6ca676da94b7d951a29ba402393eb455dd330f1263d78e189078d8d327a3b0903fcbbc891bd45f222ed7fb12f2f69e4672562d6c1b7af061ebb5d28511759f5dd460e97b33f6", 0x8d, 0x9, 0x0, 0x1, r5}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000800)="7d2bd4354e0a90f26fee4f4e232e07a6a06fdb4db1055e74c71a2b78acbb1c0452eeca623f71121eed407578dc7af519c7c0a6943bf0709e050295ef9cd6f056", 0x40, 0x80, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000880)="a270a5e9db5f8b789c8125b2a1bd13cdcf669bf4", 0x14, 0x6, 0x0, 0x1, r5}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000900)="dc484721ee64b21e08d479cc9b6cab0f3160105f98a459804c10f14770c3dd44923f20908c8b07523bcbd9533390330f5c7dcec98013da9f21c9eca40f83f5e801c50a3a8324fca65bab5097bf3f4f546e37ee2d5b87d5f379a15ad8fbae9677f29231486e24ce60c7c69b5ab50c49d04cd860e80ae317fa3aa01b0b4dc6b20844649e7d3b1270c668ae5f8bba5750d34ecded9161f60c64a2f7eedb7b", 0x9d, 0x0, 0x0, 0x3, r5}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000a00)="5262819f896ef4e5191843b4204b26a55b72b7d283d92aa5725d9a8e6dac9ee5ece95d995cd9e7fa9522398cb5a80e3f32dba3448fd593f34e1010c607130e0242aa4621e5984e00f786718699c0a977a158986ad1afb2493cef3ea3bd29802020be52f3d199e55a43e30e24d2390a3b3f9dbd8d85011139b8b148f2955a6dac4f6f4c837553c369649d4c3e1553d0ce39c3eeab79d88035d641f2edf99c671a446f3bd72a332187338336c4380fa38e0f48ab83a6c9a2d07eaa0438de684935c053e43fa10b58b2c2e809e7d08aa4e03385fc38fd6892a4afb2ab6a2ddcd4bf2051c5cb7b7de6ddc163284469b2ce7d0a459cab3c7bb864689168afea29edd00025588689ca3ea6f9871b0b519ab55972badfcdaae31697ddc90d0802c7dd5758247d0a8ec6a98b1b193cd3b6b4fedaf772431e0ad30fa07719e71ef45002cd33207d99e6a41ff172eb3518e7d39af6b6dba8c161e325aa39ccdea57624f8ad14bc01d2a2e174029f745aae48b8afea337f0de9c397b993c53220a399b3767523ff076e3e7a5d8e089dac1a88b83014306616aacf6a029f52c8c86abed81790e2caa698bb638a915e3d883f611c7d86a229f7510f6344490d795aa47322d9c75a31d58472ed8c7999f6527c859f76d1bb953eefba884386f97d1aa26aba5db13bf4c69c333ba9340646ee2f94e19732a1904e2d9ebf5a1d39df517dc0c098db9445f829c984705c3472225adb85438d2b5310ff2ec2addddbb6df4578d88d43acd73ac1e5ca86743263415681132bfd284aa514f9da4b0d46717e55bea7d88a7c52492fd026ad06e0f5cbb3e93750e963cd395a67635c22e01ced63f20718ec59387b313056c83fc27c81fef09dca5420cb8e85abcc87e75f3a02c85be79d9cd4911969c3ab914fb5ffbfd64ba7f3a951c7449743d26dac9f1963b42e96bb72be7688fc421d6af925c44e622a674fb9e87a3477476eacc6819de14669e23c9e45f51dc9eaf5bd882c1c9d2dde7d5e186518be5b858326452ae2e9e7d7f34cc5400819b3427ef2a82345bb30f53a8896752aa04074b3718076f834e7ccfbfbdba1dd677861bf478da170a38a8c644fa72440c89ff36b55ef0639ab00c324bb03e11093b10a87746fc5e59db0d01db8c0c9a90f3729786f3527ddce6f3256d34b4eed162092e0b80d716fb5e7078c24e3cf19fe86ab898a169749a4b6ddd708500ebc53c325a50956aafc273ffea7608aa73905251546eda608d08583c5cdf422789dd61d4b5558a2009b0db97c59c1950f17b0243dd34b08689d1db3264e7526cacf602b3b63c4e097d4314b88c88d714e6638eadf68c8a4c50369c58623156475ea4cd659bb704c3bdc4c29fe19cd701d52dee160a48883bb4dbf37e154f382186c86fdd5e3122fe2d7fd72a007077c2c57b2e91e441e4570ecaf7a080cca6a611bc25ca3fe45cfbeff3896044a819e05992e77dca5085507fc1416ad662ba9d9fac43a8c80e4efe659b631a039f577991fff4d3a4e0d6eece088076a2ecff4b590454372d3ad767c160d6350ca8874dc9c1ab4e0ecfdf2ecc3ec75a79f68b928c842c70a1ce5bf89b9a3803c206433a41ebb8285d282e50c8941a0178cea0d62e2faebf09bbb1f0a4a260797f1ca1c6d1eb2cff797629e137ef1cb6054e43ee85947804aebd92bfd345107eb7737d8f3042ac88f9886a4fc85382352a0b5e6a9c9986840a8a88b2147025962517835300370f8a3e0a3d0873ea4a7109bb5a10237bca28cf1f33e837a230bded4fe444a5d03cacf438fb148468c2b095b7ac6f3b453f507893d4309be4edae258c5b3e595930aca50c5c76d9f45a17941e8c7932262196d9a2e3571a52af2940c7e90c298554abeb3c50fd1d0418d24ecfe3580b3d341cb2cf731b3a8107e42f3c5451e55d0baf7e454246eb1fed95e4ba5295143157c74277a9f628f4e79d9f7478cf9f1683632600becf934ba66a4f824464338cfc609fa4248cbaa3912bed04db4b67219246460d1e2fdd9b9595d6a3c190a843f44afafa5d40dc866f9588538b358e6dff20ad5017174a2ea2edef3c8469547c74f6d99ef30a024c437cab22b5d1fafefadaf2d4eb05ba7cbc7275674f0d30621bc4dfb83a36c95f72000d230c5b8b25bfa75d8f95bdca02e4a5953fbc813ab883f2e93232686799214f496cdc92c2c9e335ecf2d03477284d5fdf8bc3b9d326cecc63b9d00a3b9c843ba46b2061a7203c2bef51de98331dc0b47878f97fd49952b2dd0e2a8e6cf42e1952c682b8c329cf286e972671d6223198a0c5e2660e1b274b93cb31223a7480223e0eaabc280bbf2217d7c829c76a6fbe005a02086be2bf5b6174ff245af655aa0996fbd664385091417682f2853b2a4418dc40244fbb58cf812d64df80a3c0924e5de19b625391f30ada19197fa3e0e99c13e607c9baeea0ef0958b2a1822274f43276d6550c94c22ef7efbb9e2c5dcc3b5c08d3f1a9ae0496b4d58fb82ae62b9f273e10f85d61854b09a96215e615775e411181eff33a6e54f04f7902da71ac1912ceecc3d7318d8b4381facbe9de4b5a97d7792c594dfdb065b4f4a4acce626762eec3f0e2b0fcd690c253f4761d9df70e7b43dd61590b3b134a164a73cbbe046cbd9f40113656ebd822bef72fa4c3d10f25cdfe028a37bc32d7b266b3c067150bf44bcf4eb7cc57e0321b16948c1440ba77ecd249a288c50b2ed28c6693a085e9663b9dc09e9a87c2621c2863d8a469fcfef71398551360c481bd739d1f49806d3e35815b6ac704c3645fff7e49a55ca0f305ccba1ae46ab4d0421e5741805e04d3851e5d1e14a1adc8ebfe57fc61f73896ba53516d34764374aa5f3f483ac116a7600583ffe401a4d4a31b4dc0bccf60b7e664ec985c8f985a75f8857badcad9869fffdf13d7ce6c0799a7a5c860e8ad7c136938de0b1c8e5d84470f56797e0069c268272440d29b7b7f61512f33d9a6701f360cb790b500c78ba366862ac10359f6799d08b68ad0d104193f1960edb0edf847c4142f991e408a48187efe20ad91f887e138673a9c775eeaa403afe2e8b5d7628e1b2b8637fa7db7aad0307f612c2f1d1e7581eaa39351e05d2b1c197f594ac4e0836b98b240df00568d3b6afca5b220d2b0b3ba873667efb525c00f62d34c40a896fe9245f5aec47fa077a4075d2b018bec32bc22ee97bc7e1541da501d4f77ddb87f8990c223e253f1f608f31efaf2b3f2bebaf93609e579836117113ae72b5e53710176846556dbe01f0aa0fc1a3a06dfa336a8b1ca29d96f07b1b0e1504aee7002e1172eb91bca2acc935f73d11ffe0afd030c39fba094db91d576e45b7c162bcaf5a82b23aa477cbe6b07c7687c9791f29a5e72ed61b8edd46bd29549f9a40b5da6da59d3ee9adb3273acada1cf7941af631b190c642653c985f826ce41d5def8ccef811bfbb9067b02c1bcb6ca138af1bc488beee3c548d74eeab4f9807619a0a524b9edc5bc0b2f78d70e995c0b476f43cb6147feb51a5e3a80ba93c4ab1a7cf692499d1ba02c4adbf3ae928b0874feeed4510c335083e1322be43f64a414a13ddb056b0e501e9b3b409bab1006684031ebacfa87baf86be2f7fa229347d753734cb6b9a704b303ce4546cc429625584475c673d390813cbffdb6c8d444eb3a6806eac0217b69bd1c95360fbd68f311a0a9f31d01083c12052a19c7228d32713077a6992af8dfaca87ce6f9ef6c0a2d6fda5b46617b043c1f12fe3c4514f4119ae4d46b62ed56a8bdf27295291d8bc9c9ae63f189b6fbb3dfffb006ea9d745e2db0af601bca9fd1d9ffca9ee57616a184486ef27d1aecd01172e0e2b371a43ff283d42f5569e009daa8e12e96992ca4817628d31cef1ce8e066cf466d702ad08d8445b9507da33b0bdc7942750d1255196df124412f500f3391db1120a6340b26d94218b71390f3526e4b014dea35ff44d13cf5b8296c381a948b509b937200f282baad4104e6636888ba1b05440b81eab9a4966eccc4c27691819774e984b7ae3a149ae3741825340d18b844b077976d46ae973e36cd441d29e4bded65d88cb272cdd571030e451524150c7b154bed7a76819c12be59e6bde364125832ed1b93e44fa212418a0eed0b2d283314c83aca4cbefe44c1e50869af52bd73a9106cd0e8678fcbb4738f1343d0dff4e59a776a67ac5ff4e75c7558ce5b36a501311c49bf6c0939e9d947e7e8eb5d8a45744e8e757135e8334e5bec7fe2dad291f6c37edb5a176de81190958e089ecfbf1f9dfb9690b9dfb4373933329acb1853f5ef349a89fcdd479a52d0e0489534ab97e043a2c835de0feadfee0757db77679adb140ebf02a1c358e51f193de75bd302b5cc63cab9525b6320e4132c7ec61fc102243456c0468b17a0c615341caff9d8638c0f4657eb77655a51283c8d6c5961b57262b1ace75cd20884a8d4f4b455a61a785f6d5590796ee13d0f46a8444278cf2a31202890d5b2283c04afb6a87d9b21816a582342a38e3a0c93c4017d2e5f2041a50cd079ae8ef19d9fbf002676cac116d4056897f7d678a92d1af36d3766caff0100d758c49404f23fb83aa2af3ea0e6a4f5cd743e25e86ad61520628e670f3352d0e4233eebfc5e5f051be85e5bc071e2cce3ce69abf1905584e33c341d4d4e9af6ac847f9601290dc180413ef58a27a38cf717ca27bbd5b1d2fc06e8eb9a7417d21d9fce19c588cf25ee74940c1c514cd1cbe1cebc394bee6fab5776b3804a122d2b2705967efd6d65a18bd864da60256897ef969a4b32913654b2d3f50f3cde180d6b8c6ab7b8ac397a779248b686bf5879c65394ecad0ff960982656a8ad330cbe6a86dcc779e72a5bfc5fd46378ced79ef5659838c9cdac24902d35395ba5f54ba75ad8c237255c08b1e4c5bc76e04c4b1746f29c2b824d9c65fef37d33d4b9866b963ceb9cce298618a914e131809d1385b2bb51e86652007d8fbad2853647181efe4d12e3980e58452ab9214bf25125b6084745aba11c88b508cb3cb8e96288a831e8bf45613589d8c6bb77b4fafafb93d0f4eedf74446681724b4f3983acc6e0e1121f94c11f5d417b276a0ff55dba50ee19f6357ba9f8806b678ae7bb643fb4035f41c7547d2f5a7714af26dadc0cef6e3ed9a198387df571b7a974fa1245df89e97b3b8b266b005ac438b20503f60d566c58bf1077a0e2026d6cb535b20a3d2f48a405dae74533aaec231c67fc6f19dda7c0ea9665e07bcd520897cf8f1e2a1d065e4dfdda4c1e7890c13891fde0b30cb529fa63b2b86213aa482f288d33a7f94f7734f07701e21c196bdca13a59ffda8779fae3767dd881784f1261a93df947dae756981cfa7e08b14c3ced5999bbad2859a6a7997b76a45afad658c2dac43509e4e55aa132ff7fc9d210ce41fa807eba91ec506492c14f91ba88b5d243c027d5e71e87bee715c02331e43f51110506c98cf5a9f181dba87a6acce0d980f93cda68453a879256dc3be97db4af22a96004ffa75c47b96377c4634a2d87507c757f67d7631879bcfb0bdf5d01f12a100745cf3d0e772d43ebe548508422a3b4171be527e50eec44fe1eceb9870193c8f958848275864ecbe72b264539931364b04ca53e4037f1c8e097c22e00577ea4c45848ff74529d200377dd9f409f697d2db46dc623ee3a5abaca20f787a253873ce5ec872e511f2848b4b6aed96f94d0dc91f161154f62cdacf4e11dea00ae93817094a4f2bcbd27b3320ce23228f0f4846f5f8f02b04b604c60c1db12a3ea11b6c1356732e71", 0x1000, 0x6, 0x0, 0x1}]) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r2, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2}, 0xa9b9) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') read(r8, &(0x7f0000000100)=""/92, 0x5c) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0xf9, 0x1, 0x9, 0x0, 0x9, 0x21220, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x4, @perf_config_ext={0xfff, 0x9}, 0x1300, 0x41a8, 0x9, 0x9, 0xfffffffffffff801, 0x9000, 0x389, 0x0, 0x100, 0x0, 0x8}, r1, 0xd, r2, 0x0) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) fgetxattr(r9, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f0000000080)=""/11, 0xb) getsockname$unix(r9, &(0x7f00000001c0)=@abs, &(0x7f0000000280)=0x6e) 01:13:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 85) 01:13:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x40000}, 0x58) [ 2067.212119] hrtimer: interrupt took 22182 ns 01:13:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804129, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 01:13:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x2000}, 0x58) 01:13:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0, 0x80000}, 0x58) 01:13:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) (fail_nth: 86) [ 2067.427983] FAULT_INJECTION: forcing a failure. [ 2067.427983] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.428966] CPU: 1 UID: 0 PID: 45776 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2067.428983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2067.428991] Call Trace: [ 2067.428996] [ 2067.429001] dump_stack_lvl+0xfa/0x120 [ 2067.429020] should_fail_ex+0x4d7/0x5e0 [ 2067.429038] should_failslab+0xc2/0x120 [ 2067.429055] __kmalloc_noprof+0xcd/0x680 [ 2067.429072] ? __register_sysctl_table+0xd3e/0x16a0 [ 2067.429085] ? lock_release+0xc8/0x290 [ 2067.429105] ? __register_sysctl_table+0xd4f/0x16a0 [ 2067.429120] __register_sysctl_table+0xd4f/0x16a0 [ 2067.429137] ? __pfx___register_sysctl_table+0x10/0x10 [ 2067.429148] ? setup_ipc_sysctls+0x5d/0x2c0 [ 2067.429165] ? __asan_memcpy+0x3d/0x60 [ 2067.429181] setup_ipc_sysctls+0x16d/0x2c0 [ 2067.429197] copy_ipcs+0x406/0x570 [ 2067.429216] create_new_namespaces+0x210/0xab0 [ 2067.429230] ? security_capable+0x2f/0x90 [ 2067.429245] copy_namespaces+0x45c/0x580 [ 2067.429259] copy_process+0x26d4/0x7410 [ 2067.429275] ? __pfx_perf_trace_lock+0x10/0x10 [ 2067.429300] ? __pfx_copy_process+0x10/0x10 [ 2067.429315] ? __might_fault+0xe0/0x190 [ 2067.429331] ? _copy_from_user+0x5b/0xd0 [ 2067.429348] kernel_clone+0xea/0x7f0 [ 2067.429362] ? get_pid_task+0xfd/0x250 [ 2067.429377] ? __pfx_kernel_clone+0x10/0x10 [ 2067.429391] ? perf_trace_lock+0xb5/0x5d0 [ 2067.429412] ? find_held_lock+0x2b/0x80 [ 2067.429424] ? ksys_write+0x121/0x240 [ 2067.429440] ? lock_is_held_type+0x9e/0x120 [ 2067.429455] __do_sys_clone3+0x1f5/0x280 [ 2067.429470] ? __pfx___do_sys_clone3+0x10/0x10 [ 2067.429485] ? perf_trace_lock+0xb5/0x5d0 [ 2067.429508] ? lock_acquire+0x15e/0x2f0 [ 2067.429525] ? __pfx_perf_trace_lock+0x10/0x10 [ 2067.429542] ? __might_fault+0x138/0x190 [ 2067.429554] ? lock_release+0xc8/0x290 [ 2067.429570] ? __might_fault+0xe0/0x190 [ 2067.429582] ? find_held_lock+0x2b/0x80 [ 2067.429594] ? syscall_trace_enter+0x1cf/0x240 [ 2067.429611] ? lock_release+0xc8/0x290 [ 2067.429631] do_syscall_64+0xbf/0x390 [ 2067.429647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.429660] RIP: 0033:0x7fc56dfaeb19 [ 2067.429670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2067.429682] RSP: 002b:00007fc56b524188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2067.429694] RAX: ffffffffffffffda RBX: 00007fc56e0c1f60 RCX: 00007fc56dfaeb19 [ 2067.429702] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 2067.429710] RBP: 00007fc56b5241d0 R08: 0000000000000000 R09: 0000000000000000 [ 2067.429717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2067.429724] R13: 00007ffcd46be17f R14: 00007fc56b524300 R15: 0000000000022000 [ 2067.429742] [ 2067.450143] sysctl could not get directory: /kernel -12 [ 2092.916980] watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.4:45562] [ 2092.917001] Modules linked in: [ 2092.917009] irq event stamp: 4554363 [ 2092.917015] hardirqs last enabled at (4554362): [] irqentry_exit+0x3b/0x90 [ 2092.917039] hardirqs last disabled at (4554363): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 2092.917064] softirqs last enabled at (4488180): [] handle_softirqs+0x50c/0x770 [ 2092.917083] softirqs last disabled at (4488183): [] __irq_exit_rcu+0xc4/0x100 [ 2092.917104] CPU: 0 UID: 0 PID: 45562 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2092.917120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2092.917129] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 2092.917162] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 48 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 1a fe ff ff [ 2092.917174] RSP: 0018:ffff88806ce082f0 EFLAGS: 00000246 [ 2092.917184] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a170f [ 2092.917192] RDX: ffff8880524c9b80 RSI: 0000000000000000 RDI: 0000000000000000 [ 2092.917201] RBP: 0000000000000000 R08: ffff88806ce313e8 R09: ffffe8ffffc19168 [ 2092.917209] R10: 0000000000000000 R11: 0000000000004485 R12: 0000000000000102 [ 2092.917217] R13: 000000000000002c R14: ffff88806ce313e8 R15: dffffc0000000000 [ 2092.917227] FS: 00007f2d343f5700(0000) GS:ffff8880e53f9000(0000) knlGS:0000000000000000 [ 2092.917240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2092.917248] CR2: 00007fff4d773ff8 CR3: 0000000054d89000 CR4: 0000000000350ef0 [ 2092.917257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2092.917264] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2092.917272] Call Trace: [ 2092.917278] [ 2092.917282] tracing_gen_ctx_irq_test+0x52/0x1f0 [ 2092.917307] perf_trace_buf_update+0x37/0x190 [ 2092.917332] perf_tp_event+0x107/0xe70 [ 2092.917364] ? __pfx_perf_tp_event+0x10/0x10 [ 2092.917382] ? ktime_get+0x16d/0x270 [ 2092.917400] ? hrtimer_forward+0x1d0/0x270 [ 2092.917424] ? perf_swevent_hrtimer+0x1f1/0x370 [ 2092.917444] ? __pfx_perf_swevent_hrtimer+0x10/0x10 [ 2092.917456] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2092.917477] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2092.917509] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2092.917522] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2092.917552] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2092.917572] perf_trace_run_bpf_submit+0xef/0x180 [ 2092.917599] perf_trace_lock+0x337/0x5d0 [ 2092.917630] ? __pfx_perf_trace_lock+0x10/0x10 [ 2092.917657] ? lock_acquire+0x15e/0x2f0 [ 2092.917676] ? unwind_next_frame+0xb9/0x2540 [ 2092.917692] ? unwind_next_frame+0x3b2/0x2540 [ 2092.917709] lock_release+0x1ab/0x290 [ 2092.917736] unwind_next_frame+0x3b7/0x2540 [ 2092.917747] ? arch_stack_walk+0x62/0xf0 [ 2092.917766] ? get_stack_info_noinstr+0x16/0xf0 [ 2092.917792] __unwind_start+0x517/0x7c0 [ 2092.917808] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2092.917834] arch_stack_walk+0x62/0xf0 [ 2092.917861] ? stack_trace_save+0x8e/0xc0 [ 2092.917888] stack_trace_save+0x8e/0xc0 [ 2092.917908] ? __pfx_stack_trace_save+0x10/0x10 [ 2092.917938] ? kasan_save_stack+0x34/0x50 [ 2092.917955] ? kasan_save_stack+0x24/0x50 [ 2092.917972] kasan_save_stack+0x24/0x50 [ 2092.917988] ? kfree_skbmem+0x18a/0x1f0 [ 2092.918004] ? consume_skb+0xdd/0x160 [ 2092.918015] ? mac80211_hwsim_tx_frame+0x1f6/0x2a0 [ 2092.918037] ? mac80211_hwsim_beacon_tx+0x53f/0x940 [ 2092.918056] ? __iterate_interfaces+0x2e0/0x650 [ 2092.918070] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 2092.918084] ? mac80211_hwsim_beacon+0x105/0x1b0 [ 2092.918100] ? __hrtimer_run_queues+0x1ee/0xac0 [ 2092.918114] ? hrtimer_run_softirq+0x14c/0x310 [ 2092.918127] ? handle_softirqs+0x1b1/0x770 [ 2092.918139] ? __irq_exit_rcu+0xc4/0x100 [ 2092.918152] ? irq_exit_rcu+0x9/0x20 [ 2092.918164] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 2092.918184] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2092.918198] ? strlen+0x6d/0xa0 [ 2092.918212] ? perf_trace_lock+0xb5/0x5d0 [ 2092.918228] ? lock_release+0x1ab/0x290 [ 2092.918244] ? unwind_next_frame+0x3b7/0x2540 [ 2092.918255] ? arch_stack_walk+0x86/0xf0 [ 2092.918267] ? stack_trace_save+0x8e/0xc0 [ 2092.918284] ? set_track_prepare+0x35/0x70 [ 2092.918302] ? __alloc_object+0xf0/0x2c0 [ 2092.918319] ? __create_object+0x1d/0x80 [ 2092.918337] ? kmem_cache_alloc_noprof+0x42f/0x690 [ 2092.918357] ? __proc_create+0x306/0x920 [ 2092.918369] ? proc_create_reg+0xb6/0x180 [ 2092.918382] ? proc_create_net_single+0x87/0x180 [ 2092.918394] ? ipv6_proc_init_net+0xa3/0x1f0 [ 2092.918408] ? ops_init+0x1e1/0x650 [ 2092.918419] ? setup_net+0xfd/0x310 [ 2092.918429] ? copy_net_ns+0x2fb/0x690 [ 2092.918440] ? create_new_namespaces+0x3f6/0xab0 [ 2092.918453] ? copy_namespaces+0x45c/0x580 [ 2092.918465] ? copy_process+0x26d4/0x7410 [ 2092.918480] ? kernel_clone+0xea/0x7f0 [ 2092.918494] ? __do_sys_clone3+0x1f5/0x280 [ 2092.918509] ? do_syscall_64+0xbf/0x390 [ 2092.918522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2092.918539] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2092.918558] ? __virt_addr_valid+0x2e8/0x5d0 [ 2092.918574] ? lock_release+0xc8/0x290 [ 2092.918603] ? mark_held_locks+0x49/0x80 [ 2092.918629] kasan_save_track+0x14/0x30 [ 2092.918646] kasan_save_free_info+0x3a/0x60 [ 2092.918661] __kasan_slab_free+0x43/0x70 [ 2092.918682] kmem_cache_free+0x2a4/0x540 [ 2092.918696] ? kfree_skbmem+0x18a/0x1f0 [ 2092.918723] kfree_skbmem+0x18a/0x1f0 [ 2092.918741] consume_skb+0xdd/0x160 [ 2092.918756] mac80211_hwsim_tx_frame+0x1f6/0x2a0 [ 2092.918785] mac80211_hwsim_beacon_tx+0x53f/0x940 [ 2092.918826] __iterate_interfaces+0x2e0/0x650 [ 2092.918842] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2092.918870] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2092.918892] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 2092.918914] mac80211_hwsim_beacon+0x105/0x1b0 [ 2092.918930] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2092.918951] __hrtimer_run_queues+0x1ee/0xac0 [ 2092.918986] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2092.919000] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 2092.919037] hrtimer_run_softirq+0x14c/0x310 [ 2092.919060] handle_softirqs+0x1b1/0x770 [ 2092.919088] __irq_exit_rcu+0xc4/0x100 [ 2092.919103] irq_exit_rcu+0x9/0x20 [ 2092.919116] sysvec_apic_timer_interrupt+0x70/0x80 [ 2092.919137] [ 2092.919141] [ 2092.919148] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2092.919162] RIP: 0010:strlen+0x6d/0xa0 [ 2092.919175] Code: 48 83 c0 01 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 27 80 38 00 75 de 48 83 c4 08 48 29 e8 5b <5d> e9 5d 64 0a 00 48 83 c4 08 31 c0 5b 5d e9 50 64 0a 00 e8 8b 11 [ 2092.919187] RSP: 0018:ffff888054b272b0 EFLAGS: 00000202 [ 2092.919196] RAX: 000000000000000d RBX: 1ffff1100a964e5e RCX: 0000000000000005 [ 2092.919204] RDX: 0000000000000006 RSI: ffffffff85e1dca0 RDI: ffffffff84e95400 [ 2092.919212] RBP: ffffffff84e95400 R08: ffffffff86aade16 R09: ffff888054b274a0 [ 2092.919221] R10: 000000000003c76e R11: 0000000000026196 R12: ffffffff85d24840 [ 2092.919229] R13: ffffffff85e1dcb8 R14: ffff888054b27370 R15: ffff888054b27460 [ 2092.919265] perf_trace_lock+0xb5/0x5d0 [ 2092.919293] ? __pfx_perf_trace_lock+0x10/0x10 [ 2092.919328] ? unwind_next_frame+0x3b2/0x2540 [ 2092.919344] lock_release+0x1ab/0x290 [ 2092.919371] unwind_next_frame+0x3b7/0x2540 [ 2092.919382] ? set_track_prepare+0x35/0x70 [ 2092.919406] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2092.919431] arch_stack_walk+0x86/0xf0 [ 2092.919458] ? __alloc_object+0xf0/0x2c0 [ 2092.919486] stack_trace_save+0x8e/0xc0 [ 2092.919506] ? __pfx_stack_trace_save+0x10/0x10 [ 2092.919536] ? kasan_save_track+0x14/0x30 [ 2092.919555] set_track_prepare+0x35/0x70 [ 2092.919574] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 2092.919590] ? kmem_cache_alloc_noprof+0x270/0x690 [ 2092.919614] ? lockdep_init_map_type+0x4b/0x240 [ 2092.919643] __alloc_object+0xf0/0x2c0 [ 2092.919664] __create_object+0x1d/0x80 [ 2092.919690] kmem_cache_alloc_noprof+0x42f/0x690 [ 2092.919710] ? __proc_create+0xa7/0x920 [ 2092.919735] ? __proc_create+0x306/0x920 [ 2092.919747] __proc_create+0x306/0x920 [ 2092.919764] ? __pfx___proc_create+0x10/0x10 [ 2092.919785] ? _raw_write_unlock+0x1e/0x40 [ 2092.919797] ? proc_register+0x608/0x980 [ 2092.919820] proc_create_reg+0xb6/0x180 [ 2092.919836] ? __pfx_snmp6_seq_show+0x10/0x10 [ 2092.919854] proc_create_net_single+0x87/0x180 [ 2092.919869] ? __pfx_proc_create_net_single+0x10/0x10 [ 2092.919884] ? ndisc_net_init+0x193/0x230 [ 2092.919907] ? __pfx_ndisc_net_init+0x10/0x10 [ 2092.919933] ? __pfx_ipv6_proc_init_net+0x10/0x10 [ 2092.919949] ipv6_proc_init_net+0xa3/0x1f0 [ 2092.919967] ops_init+0x1e1/0x650 [ 2092.919989] setup_net+0xfd/0x310 [ 2092.920001] ? lockdep_init_map_type+0x4b/0x240 [ 2092.920021] ? __pfx_setup_net+0x10/0x10 [ 2092.920040] ? debug_mutex_init+0x37/0x70 [ 2092.920062] copy_net_ns+0x2fb/0x690 [ 2092.920083] create_new_namespaces+0x3f6/0xab0 [ 2092.920110] copy_namespaces+0x45c/0x580 [ 2092.920130] copy_process+0x26d4/0x7410 [ 2092.920147] ? __pfx_perf_trace_lock+0x10/0x10 [ 2092.920164] ? perf_tp_event+0x807/0xe70 [ 2092.920198] ? __pfx_copy_process+0x10/0x10 [ 2092.920216] ? __might_fault+0xe0/0x190 [ 2092.920240] ? _copy_from_user+0x5b/0xd0 [ 2092.920268] kernel_clone+0xea/0x7f0 [ 2092.920290] ? __pfx_kernel_clone+0x10/0x10 [ 2092.920319] ? perf_trace_run_bpf_submit+0xef/0x180 [ 2092.920335] ? __pfx_futex_wake+0x10/0x10 [ 2092.920368] __do_sys_clone3+0x1f5/0x280 [ 2092.920386] ? __pfx___do_sys_clone3+0x10/0x10 [ 2092.920401] ? perf_trace_lock+0x337/0x5d0 [ 2092.920448] ? __pfx_perf_trace_lock+0x10/0x10 [ 2092.920468] ? __might_fault+0x138/0x190 [ 2092.920488] ? __might_fault+0xe0/0x190 [ 2092.920503] ? find_held_lock+0x2b/0x80 [ 2092.920518] ? syscall_trace_enter+0x1cf/0x240 [ 2092.920537] ? lock_release+0xc8/0x290 [ 2092.920569] do_syscall_64+0xbf/0x390 [ 2092.920588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2092.920601] RIP: 0033:0x7f2d36e7fb19 [ 2092.920613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2092.920625] RSP: 002b:00007f2d343f5188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2092.920637] RAX: ffffffffffffffda RBX: 00007f2d36f92f60 RCX: 00007f2d36e7fb19 [ 2092.920645] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 2092.920653] RBP: 00007f2d36ed9f6d R08: 0000000000000000 R09: 0000000000000000 [ 2092.920661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2092.920669] R13: 00007ffdd14ad0cf R14: 00007f2d343f5300 R15: 0000000000022000 [ 2092.920704] [ 2092.920709] Sending NMI from CPU 0 to CPUs 1: [ 2093.005340] NMI backtrace for cpu 1 [ 2093.005375] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 2093.005413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2093.005428] RIP: 0010:pv_native_safe_halt+0x1e/0x30 [ 2093.005464] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 59 e6 20 00 0f 1f 44 00 00 fb f4 ed 8b 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 [ 2093.005489] RSP: 0018:ffff8880096efe58 EFLAGS: 00000206 [ 2093.005511] RAX: 0000000000663deb RBX: 0000000000000001 RCX: ffffffff84c4ac97 [ 2093.005527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff814cbdd0 [ 2093.005543] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffed100d9e630a [ 2093.005558] R10: ffff88806cf31853 R11: 0000000000000001 R12: ffffffff86645d50 [ 2093.005573] R13: 1ffff110012ddfd2 R14: 0000000000000000 R15: 0000000000000000 [ 2093.005591] FS: 0000000000000000(0000) GS:ffff8880e54f9000(0000) knlGS:0000000000000000 [ 2093.005613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2093.005629] CR2: 000055fdb782f618 CR3: 000000000e381000 CR4: 0000000000350ef0 [ 2093.005645] Call Trace: [ 2093.005656] [ 2093.005665] default_idle+0xe/0x20 [ 2093.005693] default_idle_call+0x6c/0xb0 [ 2093.005719] do_idle+0x340/0x490 [ 2093.005758] ? __pfx_do_idle+0x10/0x10 [ 2093.005792] ? trace_sched_exit_tp+0x26/0x100 [ 2093.005821] cpu_startup_entry+0x4f/0x60 [ 2093.005855] start_secondary+0x1bd/0x210 [ 2093.005882] common_startup_64+0x13e/0x148 [ 2093.005924] VM DIAGNOSIS: 01:13:37 Registers: info registers vcpu 0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff829038a5 RDI=ffffffff88908560 RBP=ffffffff88908520 RSP=ffff88806ce07b60 R8 =0000000000000000 R9 =ffffed1001735046 R10=000000000000005d R11=0000000000000001 R12=000000000000005d R13=0000000000000010 R14=ffffffff88908520 R15=ffffffff82903890 RIP=ffffffff829038fd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2d343f5700 00000000 00000000 GS =0000 ffff8880e53f9000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff4d773ff8 CR3=0000000054d89000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=3e4c6f9c0609fb637e23de862db47454 XMM01=1cd1676a08cb73002d18edc2909d31e9 XMM02=1e21724d050db938656b312561e1c9e0 XMM03=849247e93206d6f7da1567c5e78b0cc0 XMM04=0000000000000000000000005aeb8889 XMM05=0000000000000000d9ca121a58bdf523 XMM06=000000000000000000000000d9ca121a XMM07=d9ca121a58bdf5235aeb88894abdece6 XMM08=2e00000006000000780000002c000000 XMM09=00000000000000000000000000000000 XMM10=06f6cc6755aa81b09611a013baf24e39 XMM11=b65f38dd3c0c71f68ef7d0c35b4c6684 XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=00000000000000000000000000002440 XMM15=00000000000000000000000000000040 info registers vcpu 1 RAX=0000000000663561 RBX=0000000000000001 RCX=ffffffff84c4ac97 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814cbdd0 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86645d50 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c4998e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e54f9000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fdb782f618 CR3=000000000e381000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000418903bf40000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000