00000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:40 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',he=none,\x00'/24]) 03:20:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 5: io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',he=none,\x00'/24]) 03:20:55 executing program 3: io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:20:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',he=none,\x00'/24]) 03:20:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:20:55 executing program 3: io_submit(0x0, 0x0, &(0x7f0000000400)) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 5: io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:20:55 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 3: io_submit(0x0, 0x0, &(0x7f0000000400)) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 1) 03:21:10 executing program 3: io_submit(0x0, 0x0, &(0x7f0000000400)) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2732.465025] FAULT_INJECTION: forcing a failure. [ 2732.465025] name failslab, interval 1, probability 0, space 0, times 1 [ 2732.467492] CPU: 0 PID: 13954 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2732.468923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.470652] Call Trace: [ 2732.471236] dump_stack+0x107/0x167 [ 2732.471993] should_fail.cold+0x5/0xa [ 2732.472791] ? alloc_inode+0x171/0x240 [ 2732.473623] should_failslab+0x5/0x20 [ 2732.474422] kmem_cache_alloc+0x5b/0x310 [ 2732.475300] alloc_inode+0x171/0x240 [ 2732.476082] new_inode_pseudo+0x14/0xe0 [ 2732.476914] create_pipe_files+0x4d/0x8c0 [ 2732.477798] ? rcu_read_lock_any_held+0x75/0xa0 [ 2732.478798] do_pipe2+0x96/0x1b0 [ 2732.479527] ? create_pipe_files+0x8c0/0x8c0 [ 2732.480446] ? ksys_write+0x1a9/0x260 [ 2732.481248] ? __ia32_sys_read+0xb0/0xb0 [ 2732.482117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2732.483232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2732.484318] __x64_sys_pipe+0x2f/0x40 [ 2732.485120] do_syscall_64+0x33/0x40 [ 2732.485910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2732.486996] RIP: 0033:0x7f659cb0cb19 [ 2732.487766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.491634] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2732.493219] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2732.494714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2732.496215] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.497683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2732.499187] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 03:21:10 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 03:21:10 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) [ 2732.549946] FAULT_INJECTION: forcing a failure. [ 2732.549946] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2732.552673] CPU: 0 PID: 13958 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 2732.554091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.555829] Call Trace: [ 2732.556379] dump_stack+0x107/0x167 [ 2732.557141] should_fail.cold+0x5/0xa [ 2732.557932] _copy_from_user+0x2e/0x1b0 [ 2732.558757] copy_clone_args_from_user+0x147/0x790 [ 2732.559792] ? lock_acquire+0x197/0x470 [ 2732.560605] ? sighand_ctor+0x40/0x40 [ 2732.561395] ? get_pid_task+0xea/0x250 [ 2732.562191] ? lock_downgrade+0x6d0/0x6d0 [ 2732.563088] __do_sys_clone3+0x9d/0x320 [ 2732.563892] ? __do_sys_clone+0x110/0x110 [ 2732.564740] ? lock_downgrade+0x6d0/0x6d0 [ 2732.565585] ? proc_fail_nth_write+0x94/0x220 [ 2732.566503] ? proc_task_getattr+0x1f0/0x1f0 [ 2732.567442] ? rcu_read_lock_any_held+0x75/0xa0 [ 2732.568384] ? vfs_write+0x354/0xb10 [ 2732.569148] ? ksys_write+0x1a9/0x260 [ 2732.569936] ? __ia32_sys_read+0xb0/0xb0 [ 2732.570774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2732.571880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2732.572933] ? trace_hardirqs_on+0x5b/0x180 [ 2732.573814] do_syscall_64+0x33/0x40 [ 2732.574579] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2732.575663] RIP: 0033:0x7f38d27a8b19 [ 2732.576428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.580224] RSP: 002b:00007f38cfd1e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2732.581785] RAX: ffffffffffffffda RBX: 00007f38d28bbf60 RCX: 00007f38d27a8b19 [ 2732.583286] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2732.584731] RBP: 00007f38cfd1e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.586196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2732.587689] R13: 00007ffc53e2f57f R14: 00007f38cfd1e300 R15: 0000000000022000 [ 2732.599961] FAULT_INJECTION: forcing a failure. [ 2732.599961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2732.601576] CPU: 1 PID: 13961 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 2732.602365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.603324] Call Trace: [ 2732.603630] dump_stack+0x107/0x167 [ 2732.604061] should_fail.cold+0x5/0xa [ 2732.604524] _copy_from_user+0x2e/0x1b0 [ 2732.604992] copy_clone_args_from_user+0x147/0x790 [ 2732.605573] ? lock_acquire+0x197/0x470 [ 2732.606045] ? sighand_ctor+0x40/0x40 [ 2732.606501] ? get_pid_task+0xea/0x250 [ 2732.606970] ? lock_downgrade+0x6d0/0x6d0 [ 2732.607471] __do_sys_clone3+0x9d/0x320 [ 2732.607939] ? __do_sys_clone+0x110/0x110 [ 2732.608426] ? lock_downgrade+0x6d0/0x6d0 [ 2732.608915] ? proc_fail_nth_write+0x94/0x220 [ 2732.609443] ? proc_task_getattr+0x1f0/0x1f0 [ 2732.609977] ? rcu_read_lock_any_held+0x75/0xa0 [ 2732.610520] ? vfs_write+0x354/0xb10 [ 2732.610984] ? ksys_write+0x1a9/0x260 [ 2732.611417] ? __ia32_sys_read+0xb0/0xb0 [ 2732.611893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2732.612511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2732.613104] ? trace_hardirqs_on+0x5b/0x180 [ 2732.613606] do_syscall_64+0x33/0x40 [ 2732.614041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2732.614640] RIP: 0033:0x7f818aa1cb19 [ 2732.615092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.617211] RSP: 002b:00007f8187f92188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2732.618110] RAX: ffffffffffffffda RBX: 00007f818ab2ff60 RCX: 00007f818aa1cb19 [ 2732.618954] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2732.619789] RBP: 00007f8187f921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.620614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2732.621446] R13: 00007fffc8e81fef R14: 00007f8187f92300 R15: 0000000000022000 03:21:10 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) [ 2732.655583] FAULT_INJECTION: forcing a failure. [ 2732.655583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2732.657260] CPU: 1 PID: 13963 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 2732.658050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.659005] Call Trace: [ 2732.659311] dump_stack+0x107/0x167 [ 2732.659726] should_fail.cold+0x5/0xa [ 2732.660165] _copy_from_user+0x2e/0x1b0 [ 2732.660618] copy_clone_args_from_user+0x147/0x790 [ 2732.661180] ? lock_acquire+0x197/0x470 [ 2732.661629] ? sighand_ctor+0x40/0x40 [ 2732.662065] ? get_pid_task+0xea/0x250 [ 2732.662508] ? lock_downgrade+0x6d0/0x6d0 [ 2732.662995] __do_sys_clone3+0x9d/0x320 [ 2732.663456] ? __do_sys_clone+0x110/0x110 [ 2732.663925] ? lock_downgrade+0x6d0/0x6d0 [ 2732.664398] ? proc_fail_nth_write+0x94/0x220 [ 2732.664911] ? proc_task_getattr+0x1f0/0x1f0 [ 2732.665414] ? rcu_read_lock_any_held+0x75/0xa0 [ 2732.665947] ? vfs_write+0x354/0xb10 [ 2732.666386] ? ksys_write+0x1a9/0x260 [ 2732.666828] ? __ia32_sys_read+0xb0/0xb0 [ 2732.667289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2732.667883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2732.668466] ? trace_hardirqs_on+0x5b/0x180 [ 2732.668955] do_syscall_64+0x33/0x40 [ 2732.669377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2732.669960] RIP: 0033:0x7fba10704b19 [ 2732.670385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.672494] RSP: 002b:00007fba0dc7a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2732.673357] RAX: ffffffffffffffda RBX: 00007fba10817f60 RCX: 00007fba10704b19 [ 2732.674165] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2732.674982] RBP: 00007fba0dc7a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.675790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2732.676608] R13: 00007fffa504844f R14: 00007fba0dc7a300 R15: 0000000000022000 03:21:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 2) [ 2732.730105] FAULT_INJECTION: forcing a failure. [ 2732.730105] name failslab, interval 1, probability 0, space 0, times 0 [ 2732.732662] CPU: 0 PID: 13966 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2732.734100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.735822] Call Trace: [ 2732.736374] dump_stack+0x107/0x167 [ 2732.737138] should_fail.cold+0x5/0xa [ 2732.737941] ? create_object.isra.0+0x3a/0xa20 [ 2732.738927] should_failslab+0x5/0x20 [ 2732.739725] kmem_cache_alloc+0x5b/0x310 [ 2732.740582] create_object.isra.0+0x3a/0xa20 [ 2732.741498] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2732.742555] kmem_cache_alloc+0x159/0x310 [ 2732.743455] alloc_inode+0x171/0x240 [ 2732.744232] new_inode_pseudo+0x14/0xe0 [ 2732.745058] create_pipe_files+0x4d/0x8c0 [ 2732.745921] ? rcu_read_lock_any_held+0x75/0xa0 [ 2732.746909] do_pipe2+0x96/0x1b0 [ 2732.747612] ? create_pipe_files+0x8c0/0x8c0 [ 2732.748569] ? ksys_write+0x1a9/0x260 [ 2732.749361] ? __ia32_sys_read+0xb0/0xb0 [ 2732.750212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2732.751345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2732.752446] __x64_sys_pipe+0x2f/0x40 [ 2732.753234] do_syscall_64+0x33/0x40 [ 2732.754019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2732.755142] RIP: 0033:0x7f659cb0cb19 [ 2732.755926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.759837] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2732.761407] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2732.762905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2732.764394] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.765859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2732.767365] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 03:21:10 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[0x0]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 3) [ 2732.840738] FAULT_INJECTION: forcing a failure. [ 2732.840738] name failslab, interval 1, probability 0, space 0, times 0 [ 2732.842139] CPU: 1 PID: 13971 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2732.842954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.843911] Call Trace: [ 2732.844218] dump_stack+0x107/0x167 [ 2732.844638] should_fail.cold+0x5/0xa [ 2732.845098] ? security_inode_alloc+0x34/0x160 [ 2732.845645] should_failslab+0x5/0x20 [ 2732.846099] kmem_cache_alloc+0x5b/0x310 [ 2732.846597] security_inode_alloc+0x34/0x160 [ 2732.847125] inode_init_always+0xa4e/0xd10 [ 2732.847632] alloc_inode+0x84/0x240 [ 2732.848066] new_inode_pseudo+0x14/0xe0 [ 2732.848545] create_pipe_files+0x4d/0x8c0 [ 2732.849041] ? rcu_read_lock_any_held+0x75/0xa0 [ 2732.849599] do_pipe2+0x96/0x1b0 [ 2732.850006] ? create_pipe_files+0x8c0/0x8c0 [ 2732.850527] ? ksys_write+0x1a9/0x260 [ 2732.850988] ? __ia32_sys_read+0xb0/0xb0 [ 2732.851482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2732.852101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2732.852715] __x64_sys_pipe+0x2f/0x40 [ 2732.853167] do_syscall_64+0x33/0x40 [ 2732.853615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2732.854216] RIP: 0033:0x7f659cb0cb19 [ 2732.854663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.856794] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2732.857692] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2732.858527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2732.859365] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.860200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2732.861028] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 03:21:11 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 03:21:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) (fail_nth: 1) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:21:11 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[0x0]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 4) [ 2733.041685] FAULT_INJECTION: forcing a failure. [ 2733.041685] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.043196] CPU: 1 PID: 13976 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2733.043978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2733.044945] Call Trace: [ 2733.045252] dump_stack+0x107/0x167 [ 2733.045671] should_fail.cold+0x5/0xa [ 2733.046120] ? create_object.isra.0+0x3a/0xa20 [ 2733.046658] should_failslab+0x5/0x20 [ 2733.047107] kmem_cache_alloc+0x5b/0x310 [ 2733.047578] create_object.isra.0+0x3a/0xa20 [ 2733.048094] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2733.048693] kmem_cache_alloc+0x159/0x310 [ 2733.049188] security_inode_alloc+0x34/0x160 [ 2733.049702] inode_init_always+0xa4e/0xd10 [ 2733.050197] alloc_inode+0x84/0x240 [ 2733.050627] new_inode_pseudo+0x14/0xe0 [ 2733.051098] create_pipe_files+0x4d/0x8c0 [ 2733.051585] ? rcu_read_lock_any_held+0x75/0xa0 [ 2733.052131] do_pipe2+0x96/0x1b0 [ 2733.052533] ? create_pipe_files+0x8c0/0x8c0 [ 2733.053052] ? ksys_write+0x1a9/0x260 [ 2733.053497] ? __ia32_sys_read+0xb0/0xb0 [ 2733.053981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2733.054597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2733.055208] __x64_sys_pipe+0x2f/0x40 [ 2733.055648] do_syscall_64+0x33/0x40 [ 2733.056086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2733.056682] RIP: 0033:0x7f659cb0cb19 [ 2733.057114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2733.059231] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2733.060101] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2733.060910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2733.061715] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.062519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2733.063335] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 03:21:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 1) [ 2733.097056] FAULT_INJECTION: forcing a failure. [ 2733.097056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2733.101621] CPU: 0 PID: 13973 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2733.103089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2733.104792] Call Trace: [ 2733.105342] dump_stack+0x107/0x167 [ 2733.106090] should_fail.cold+0x5/0xa [ 2733.106924] _copy_from_user+0x2e/0x1b0 [ 2733.107753] copy_clone_args_from_user+0x147/0x790 [ 2733.108776] ? lock_acquire+0x197/0x470 [ 2733.109583] ? sighand_ctor+0x40/0x40 [ 2733.110376] ? get_pid_task+0xea/0x250 [ 2733.111197] ? lock_downgrade+0x6d0/0x6d0 [ 2733.112059] __do_sys_clone3+0x9d/0x320 [ 2733.112663] FAULT_INJECTION: forcing a failure. [ 2733.112663] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.112902] ? __do_sys_clone+0x110/0x110 [ 2733.115062] ? lock_downgrade+0x6d0/0x6d0 [ 2733.115918] ? proc_fail_nth_write+0x94/0x220 [ 2733.116838] ? proc_task_getattr+0x1f0/0x1f0 [ 2733.117760] ? rcu_read_lock_any_held+0x75/0xa0 [ 2733.118720] ? vfs_write+0x354/0xb10 [ 2733.119513] ? ksys_write+0x1a9/0x260 [ 2733.120300] ? __ia32_sys_read+0xb0/0xb0 [ 2733.121166] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2733.122251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2733.123333] ? trace_hardirqs_on+0x5b/0x180 [ 2733.124236] do_syscall_64+0x33/0x40 [ 2733.125007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2733.126056] RIP: 0033:0x7fc070febb19 [ 2733.126830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2733.130609] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2733.132191] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2733.133675] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2733.135188] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.136639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2733.138100] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2733.139618] CPU: 1 PID: 13981 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2733.140421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2733.141370] Call Trace: [ 2733.141682] dump_stack+0x107/0x167 [ 2733.142107] should_fail.cold+0x5/0xa [ 2733.142555] should_failslab+0x5/0x20 [ 2733.143006] __kmalloc_track_caller+0x79/0x370 [ 2733.143526] ? strndup_user+0x74/0xe0 [ 2733.143968] memdup_user+0x22/0xd0 03:21:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 5) [ 2733.144379] strndup_user+0x74/0xe0 [ 2733.144902] __x64_sys_mount+0x133/0x300 [ 2733.145445] ? copy_mnt_ns+0xa00/0xa00 [ 2733.145900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2733.146501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2733.147116] do_syscall_64+0x33/0x40 [ 2733.147544] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2733.148146] RIP: 0033:0x7f3eebf31b19 [ 2733.148570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2733.150717] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2733.151619] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2733.152439] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2733.153271] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2733.154112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2733.154951] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2733.176884] FAULT_INJECTION: forcing a failure. [ 2733.176884] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.179867] CPU: 0 PID: 13979 Comm: syz-executor.4 Not tainted 5.10.237 #1 [ 2733.181376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2733.183206] Call Trace: [ 2733.183781] dump_stack+0x107/0x167 [ 2733.184578] should_fail.cold+0x5/0xa [ 2733.185404] ? iovec_from_user+0x36c/0x400 [ 2733.186328] should_failslab+0x5/0x20 [ 2733.187180] __kmalloc+0x72/0x390 [ 2733.187937] iovec_from_user+0x36c/0x400 [ 2733.188819] ? lock_acquire+0x197/0x470 [ 2733.189685] __import_iovec+0x67/0x590 [ 2733.190524] ? lock_release+0x680/0x680 [ 2733.191412] ? SOFTIRQ_verbose+0x10/0x10 [ 2733.192296] import_iovec+0x83/0xb0 [ 2733.193090] vfs_readv+0xbb/0x160 [ 2733.193843] ? vfs_iter_read+0xa0/0xa0 [ 2733.194687] ? __fdget_pos+0xf1/0x190 [ 2733.195535] ? lock_downgrade+0x6d0/0x6d0 [ 2733.196428] ? mutex_lock_io_nested+0xf30/0xf30 [ 2733.197434] ? ksys_write+0x12d/0x260 [ 2733.198266] ? __fget_files+0x2f8/0x520 [ 2733.199158] do_readv+0x139/0x300 [ 2733.199909] ? vfs_readv+0x160/0x160 [ 2733.200716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2733.201846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2733.202983] do_syscall_64+0x33/0x40 [ 2733.203795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2733.204899] RIP: 0033:0x7fd8f2d48b19 [ 2733.205697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2733.209687] RSP: 002b:00007fd8f02be188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2733.211346] RAX: ffffffffffffffda RBX: 00007fd8f2e5bf60 RCX: 00007fd8f2d48b19 [ 2733.212885] RDX: 0000000000000017 RSI: 0000000020001600 RDI: 0000000000000004 [ 2733.214428] RBP: 00007fd8f02be1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.215993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2733.217531] R13: 00007ffcf39de8af R14: 00007fd8f02be300 R15: 0000000000022000 03:21:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 2) [ 2733.228759] FAULT_INJECTION: forcing a failure. [ 2733.228759] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.230114] CPU: 1 PID: 14035 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2733.230937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2733.231922] Call Trace: [ 2733.232238] dump_stack+0x107/0x167 [ 2733.232667] should_fail.cold+0x5/0xa [ 2733.233118] ? alloc_pipe_info+0x10a/0x590 [ 2733.233621] should_failslab+0x5/0x20 [ 2733.234065] kmem_cache_alloc_trace+0x55/0x320 [ 2733.234608] alloc_pipe_info+0x10a/0x590 [ 2733.235090] create_pipe_files+0x8d/0x8c0 [ 2733.235578] ? rcu_read_lock_any_held+0x75/0xa0 [ 2733.236119] do_pipe2+0x96/0x1b0 [ 2733.236520] ? create_pipe_files+0x8c0/0x8c0 [ 2733.237033] ? ksys_write+0x1a9/0x260 [ 2733.237481] ? __ia32_sys_read+0xb0/0xb0 [ 2733.237956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2733.238567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2733.239176] __x64_sys_pipe+0x2f/0x40 [ 2733.239620] do_syscall_64+0x33/0x40 [ 2733.240060] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2733.240658] RIP: 0033:0x7f659cb0cb19 [ 2733.241092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2733.243256] RSP: 002b:00007f659a061188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2733.244142] RAX: ffffffffffffffda RBX: 00007f659cc20020 RCX: 00007f659cb0cb19 [ 2733.244970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2733.245800] RBP: 00007f659a0611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.246632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2733.247470] R13: 00007ffca22bb52f R14: 00007f659a061300 R15: 0000000000022000 [ 2733.284018] FAULT_INJECTION: forcing a failure. [ 2733.284018] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.286474] CPU: 0 PID: 14037 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2733.288024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2733.289830] Call Trace: [ 2733.290416] dump_stack+0x107/0x167 [ 2733.291243] should_fail.cold+0x5/0xa [ 2733.292078] ? create_object.isra.0+0x3a/0xa20 [ 2733.293076] should_failslab+0x5/0x20 [ 2733.293909] kmem_cache_alloc+0x5b/0x310 [ 2733.294824] create_object.isra.0+0x3a/0xa20 [ 2733.295794] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2733.296916] __kmalloc_track_caller+0x177/0x370 [ 2733.297928] ? strndup_user+0x74/0xe0 [ 2733.298775] memdup_user+0x22/0xd0 [ 2733.299579] strndup_user+0x74/0xe0 [ 2733.300384] __x64_sys_mount+0x133/0x300 [ 2733.301280] ? copy_mnt_ns+0xa00/0xa00 [ 2733.302140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2733.303314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2733.304450] do_syscall_64+0x33/0x40 [ 2733.305268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2733.306386] RIP: 0033:0x7f3eebf31b19 [ 2733.307221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2733.311241] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2733.312909] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2733.314479] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2733.316074] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2733.317645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2733.319239] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:21:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 03:21:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 6) 03:21:26 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 03:21:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 3) 03:21:26 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 03:21:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:21:26 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[0x0]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:26 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) [ 2748.215460] FAULT_INJECTION: forcing a failure. [ 2748.215460] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.217901] CPU: 0 PID: 14095 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2748.219391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.221156] Call Trace: [ 2748.221723] dump_stack+0x107/0x167 [ 2748.222507] should_fail.cold+0x5/0xa [ 2748.223332] ? create_object.isra.0+0x3a/0xa20 [ 2748.224318] should_failslab+0x5/0x20 [ 2748.225125] kmem_cache_alloc+0x5b/0x310 [ 2748.226001] create_object.isra.0+0x3a/0xa20 [ 2748.226931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2748.228030] kmem_cache_alloc_trace+0x151/0x320 [ 2748.229035] alloc_pipe_info+0x10a/0x590 [ 2748.229911] create_pipe_files+0x8d/0x8c0 [ 2748.230791] ? rcu_read_lock_any_held+0x75/0xa0 [ 2748.231798] do_pipe2+0x96/0x1b0 [ 2748.232527] ? create_pipe_files+0x8c0/0x8c0 [ 2748.233460] ? ksys_write+0x1a9/0x260 [ 2748.234271] ? __ia32_sys_read+0xb0/0xb0 [ 2748.235161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.236286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.237390] __x64_sys_pipe+0x2f/0x40 [ 2748.238210] do_syscall_64+0x33/0x40 [ 2748.239016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.239598] FAULT_INJECTION: forcing a failure. [ 2748.239598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2748.240101] RIP: 0033:0x7f659cb0cb19 [ 2748.240125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.246935] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2748.248572] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2748.250082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2748.251604] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.253112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.254629] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2748.256252] CPU: 1 PID: 14104 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2748.257540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.259085] Call Trace: [ 2748.259591] dump_stack+0x107/0x167 [ 2748.260275] should_fail.cold+0x5/0xa [ 2748.260997] _copy_from_user+0x2e/0x1b0 [ 2748.261740] memdup_user+0x65/0xd0 [ 2748.262402] strndup_user+0x74/0xe0 [ 2748.263090] __x64_sys_mount+0x133/0x300 [ 2748.263852] ? copy_mnt_ns+0xa00/0xa00 [ 2748.264595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.265580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.266542] do_syscall_64+0x33/0x40 [ 2748.267244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.268198] RIP: 0033:0x7f3eebf31b19 [ 2748.268900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.271504] FAULT_INJECTION: forcing a failure. [ 2748.271504] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.272306] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2748.272328] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2748.272339] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2748.272350] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2748.272360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.272371] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2748.280982] FAULT_INJECTION: forcing a failure. [ 2748.280982] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.281561] CPU: 0 PID: 14094 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 2748.288116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.289868] Call Trace: [ 2748.290427] dump_stack+0x107/0x167 [ 2748.291203] should_fail.cold+0x5/0xa [ 2748.292014] ? copy_process+0x3285/0x7800 [ 2748.292891] should_failslab+0x5/0x20 [ 2748.293696] kmem_cache_alloc_node+0x55/0x330 [ 2748.294641] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.295760] copy_process+0x3285/0x7800 [ 2748.296617] ? mark_lock+0xf5/0x2df0 [ 2748.297412] ? lock_acquire+0x197/0x470 [ 2748.298247] ? find_held_lock+0x2c/0x110 [ 2748.299127] ? __cleanup_sighand+0xb0/0xb0 [ 2748.300048] ? _copy_from_user+0xfb/0x1b0 [ 2748.300934] kernel_clone+0xe7/0x980 [ 2748.301721] ? lock_acquire+0x197/0x470 [ 2748.302560] ? create_io_thread+0xf0/0xf0 [ 2748.303466] __do_sys_clone3+0x1e5/0x320 [ 2748.304324] ? __do_sys_clone+0x110/0x110 [ 2748.305197] ? lock_downgrade+0x6d0/0x6d0 [ 2748.306092] ? rcu_read_lock_any_held+0x75/0xa0 [ 2748.307090] ? vfs_write+0x354/0xb10 [ 2748.307884] ? ksys_write+0x1a9/0x260 [ 2748.308688] ? __ia32_sys_read+0xb0/0xb0 [ 2748.309554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.310670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.311771] ? trace_hardirqs_on+0x5b/0x180 [ 2748.312689] do_syscall_64+0x33/0x40 [ 2748.313481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.314567] RIP: 0033:0x7fba10704b19 [ 2748.315359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.319278] RSP: 002b:00007fba0dc7a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2748.320885] RAX: ffffffffffffffda RBX: 00007fba10817f60 RCX: 00007fba10704b19 [ 2748.322397] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2748.323920] RBP: 00007fba0dc7a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.325425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.326935] R13: 00007fffa504844f R14: 00007fba0dc7a300 R15: 0000000000022000 [ 2748.328486] CPU: 1 PID: 14105 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 2748.329817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.331424] Call Trace: [ 2748.331930] dump_stack+0x107/0x167 [ 2748.332632] should_fail.cold+0x5/0xa [ 2748.333363] ? copy_process+0x3285/0x7800 [ 2748.334164] should_failslab+0x5/0x20 [ 2748.334892] kmem_cache_alloc_node+0x55/0x330 [ 2748.335121] FAULT_INJECTION: forcing a failure. [ 2748.335121] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.335747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.335769] copy_process+0x3285/0x7800 [ 2748.335788] ? mark_lock+0xf5/0x2df0 [ 2748.335813] ? lock_acquire+0x197/0x470 [ 2748.341301] ? find_held_lock+0x2c/0x110 [ 2748.342089] ? __cleanup_sighand+0xb0/0xb0 [ 2748.342909] ? _copy_from_user+0xfb/0x1b0 [ 2748.343715] kernel_clone+0xe7/0x980 [ 2748.344428] ? lock_acquire+0x197/0x470 [ 2748.345184] ? create_io_thread+0xf0/0xf0 [ 2748.345998] __do_sys_clone3+0x1e5/0x320 [ 2748.346769] ? __do_sys_clone+0x110/0x110 [ 2748.347564] ? lock_downgrade+0x6d0/0x6d0 [ 2748.348377] ? rcu_read_lock_any_held+0x75/0xa0 [ 2748.349259] ? vfs_write+0x354/0xb10 [ 2748.349971] ? ksys_write+0x1a9/0x260 [ 2748.350695] ? __ia32_sys_read+0xb0/0xb0 [ 2748.351478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.352475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.353473] ? trace_hardirqs_on+0x5b/0x180 [ 2748.354299] do_syscall_64+0x33/0x40 [ 2748.355025] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.356012] RIP: 0033:0x7f38d27a8b19 [ 2748.356727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.360283] RSP: 002b:00007f38cfd1e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2748.361744] RAX: ffffffffffffffda RBX: 00007f38d28bbf60 RCX: 00007f38d27a8b19 [ 2748.363124] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2748.364494] RBP: 00007f38cfd1e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.365863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.367247] R13: 00007ffc53e2f57f R14: 00007f38cfd1e300 R15: 0000000000022000 [ 2748.368647] CPU: 0 PID: 14102 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2748.370169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.371978] Call Trace: [ 2748.372545] dump_stack+0x107/0x167 [ 2748.373348] should_fail.cold+0x5/0xa [ 2748.373634] FAULT_INJECTION: forcing a failure. [ 2748.373634] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.374181] ? copy_process+0x3285/0x7800 [ 2748.374203] should_failslab+0x5/0x20 [ 2748.374222] kmem_cache_alloc_node+0x55/0x330 [ 2748.374241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.374264] copy_process+0x3285/0x7800 [ 2748.374284] ? mark_lock+0xf5/0x2df0 [ 2748.374310] ? lock_acquire+0x197/0x470 [ 2748.374327] ? find_held_lock+0x2c/0x110 [ 2748.374361] ? __cleanup_sighand+0xb0/0xb0 [ 2748.384530] ? _copy_from_user+0xfb/0x1b0 [ 2748.385442] kernel_clone+0xe7/0x980 [ 2748.386257] ? lock_acquire+0x197/0x470 [ 2748.387123] ? create_io_thread+0xf0/0xf0 [ 2748.388043] __do_sys_clone3+0x1e5/0x320 [ 2748.388922] ? __do_sys_clone+0x110/0x110 [ 2748.389817] ? lock_downgrade+0x6d0/0x6d0 [ 2748.390736] ? rcu_read_lock_any_held+0x75/0xa0 [ 2748.391749] ? vfs_write+0x354/0xb10 [ 2748.392564] ? ksys_write+0x1a9/0x260 [ 2748.393390] ? __ia32_sys_read+0xb0/0xb0 [ 2748.394275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.395421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.396532] ? trace_hardirqs_on+0x5b/0x180 [ 2748.397468] do_syscall_64+0x33/0x40 [ 2748.398276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.399395] RIP: 0033:0x7fc070febb19 [ 2748.400198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.404204] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2748.405852] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2748.407410] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2748.408957] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.410506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.412062] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2748.413642] CPU: 1 PID: 14106 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 2748.415070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.416748] Call Trace: [ 2748.417282] dump_stack+0x107/0x167 [ 2748.418024] should_fail.cold+0x5/0xa [ 2748.418793] ? copy_process+0x3285/0x7800 [ 2748.419639] should_failslab+0x5/0x20 [ 2748.420410] kmem_cache_alloc_node+0x55/0x330 [ 2748.421312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.422375] copy_process+0x3285/0x7800 [ 2748.423184] ? mark_lock+0xf5/0x2df0 [ 2748.423940] ? lock_acquire+0x197/0x470 [ 2748.424739] ? find_held_lock+0x2c/0x110 [ 2748.425574] ? __cleanup_sighand+0xb0/0xb0 [ 2748.426440] ? _copy_from_user+0xfb/0x1b0 [ 2748.427289] kernel_clone+0xe7/0x980 [ 2748.428047] ? lock_acquire+0x197/0x470 [ 2748.428849] ? create_io_thread+0xf0/0xf0 [ 2748.429727] __do_sys_clone3+0x1e5/0x320 [ 2748.430544] ? __do_sys_clone+0x110/0x110 [ 2748.431392] ? lock_downgrade+0x6d0/0x6d0 [ 2748.432241] ? rcu_read_lock_any_held+0x75/0xa0 [ 2748.433191] ? vfs_write+0x354/0xb10 [ 2748.433949] ? ksys_write+0x1a9/0x260 [ 2748.434724] ? __ia32_sys_read+0xb0/0xb0 [ 2748.435554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.436608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.437648] ? trace_hardirqs_on+0x5b/0x180 [ 2748.438519] do_syscall_64+0x33/0x40 [ 2748.439281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.440316] RIP: 0033:0x7f818aa1cb19 [ 2748.441061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.444780] RSP: 002b:00007f8187f92188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2748.446312] RAX: ffffffffffffffda RBX: 00007f818ab2ff60 RCX: 00007f818aa1cb19 [ 2748.447751] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2748.449193] RBP: 00007f8187f921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.450630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.452065] R13: 00007fffc8e81fef R14: 00007f8187f92300 R15: 0000000000022000 03:21:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 4) 03:21:26 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0x45b}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:21:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 7) [ 2748.572478] FAULT_INJECTION: forcing a failure. [ 2748.572478] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.574944] CPU: 1 PID: 14211 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2748.576351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.578011] Call Trace: [ 2748.578544] dump_stack+0x107/0x167 [ 2748.579301] should_fail.cold+0x5/0xa [ 2748.580059] ? copy_mount_options+0x55/0x180 [ 2748.580947] should_failslab+0x5/0x20 [ 2748.581713] kmem_cache_alloc_trace+0x55/0x320 [ 2748.582633] ? _copy_from_user+0xfb/0x1b0 [ 2748.583502] copy_mount_options+0x55/0x180 [ 2748.584370] __x64_sys_mount+0x1a8/0x300 [ 2748.585192] ? copy_mnt_ns+0xa00/0xa00 [ 2748.585983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.587040] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.588080] do_syscall_64+0x33/0x40 [ 2748.588830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.589858] RIP: 0033:0x7f3eebf31b19 [ 2748.590603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.594297] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2748.595838] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2748.597270] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2748.598699] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2748.600122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.601552] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2748.611476] FAULT_INJECTION: forcing a failure. [ 2748.611476] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.613955] CPU: 0 PID: 14214 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2748.615442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.617197] Call Trace: [ 2748.617766] dump_stack+0x107/0x167 [ 2748.618548] should_fail.cold+0x5/0xa [ 2748.619376] ? alloc_pipe_info+0x1e5/0x590 [ 2748.620283] should_failslab+0x5/0x20 [ 2748.621095] __kmalloc+0x72/0x390 [ 2748.621835] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2748.622927] alloc_pipe_info+0x1e5/0x590 [ 2748.623816] create_pipe_files+0x8d/0x8c0 [ 2748.624702] ? rcu_read_lock_any_held+0x75/0xa0 [ 2748.625693] do_pipe2+0x96/0x1b0 [ 2748.626424] ? create_pipe_files+0x8c0/0x8c0 [ 2748.627366] ? ksys_write+0x1a9/0x260 [ 2748.628180] ? __ia32_sys_read+0xb0/0xb0 [ 2748.629056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.630175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.631290] __x64_sys_pipe+0x2f/0x40 [ 2748.632096] do_syscall_64+0x33/0x40 [ 2748.632890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.633978] RIP: 0033:0x7f659cb0cb19 [ 2748.634771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.638671] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2748.640301] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2748.641812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2748.643332] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.644842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.646352] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 03:21:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 5) [ 2748.690137] FAULT_INJECTION: forcing a failure. [ 2748.690137] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.692507] CPU: 1 PID: 14219 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2748.693875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.695513] Call Trace: [ 2748.696039] dump_stack+0x107/0x167 [ 2748.696759] should_fail.cold+0x5/0xa [ 2748.697528] ? create_object.isra.0+0x3a/0xa20 [ 2748.698434] should_failslab+0x5/0x20 [ 2748.699193] kmem_cache_alloc+0x5b/0x310 [ 2748.700006] create_object.isra.0+0x3a/0xa20 [ 2748.700888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2748.701895] kmem_cache_alloc_trace+0x151/0x320 [ 2748.702844] copy_mount_options+0x55/0x180 [ 2748.703705] __x64_sys_mount+0x1a8/0x300 [ 2748.704506] ? copy_mnt_ns+0xa00/0xa00 [ 2748.705286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.706320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.707369] do_syscall_64+0x33/0x40 [ 2748.708110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.709127] RIP: 0033:0x7f3eebf31b19 [ 2748.709866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.713504] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2748.715015] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2748.716424] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2748.717802] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2748.719193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.720587] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:21:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 8) [ 2748.814380] FAULT_INJECTION: forcing a failure. [ 2748.814380] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.817004] CPU: 0 PID: 14225 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2748.818493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.820271] Call Trace: [ 2748.820852] dump_stack+0x107/0x167 [ 2748.821644] should_fail.cold+0x5/0xa [ 2748.822476] ? create_object.isra.0+0x3a/0xa20 [ 2748.823478] should_failslab+0x5/0x20 [ 2748.824298] kmem_cache_alloc+0x5b/0x310 [ 2748.825166] ? create_object.isra.0+0x3ad/0xa20 [ 2748.826179] create_object.isra.0+0x3a/0xa20 [ 2748.827131] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2748.828230] __kmalloc_node+0x1ae/0x420 [ 2748.829098] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2748.830193] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2748.831261] ? trace_hardirqs_on+0x5b/0x180 [ 2748.832201] kmem_cache_alloc_trace+0x169/0x320 [ 2748.833220] alloc_pipe_info+0x10a/0x590 [ 2748.834113] create_pipe_files+0x8d/0x8c0 [ 2748.835014] ? rcu_read_lock_any_held+0x75/0xa0 [ 2748.836022] do_pipe2+0x96/0x1b0 [ 2748.836762] ? create_pipe_files+0x8c0/0x8c0 [ 2748.837698] ? ksys_write+0x1a9/0x260 [ 2748.838514] ? __ia32_sys_read+0xb0/0xb0 [ 2748.839404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.840535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.841633] __x64_sys_pipe+0x2f/0x40 [ 2748.842445] do_syscall_64+0x33/0x40 [ 2748.843249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2748.844347] RIP: 0033:0x7f659cb0cb19 [ 2748.845142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.849089] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2748.850724] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2748.852259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2748.853790] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.855326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.856847] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 03:21:27 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 9) [ 2749.024401] FAULT_INJECTION: forcing a failure. [ 2749.024401] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.026818] CPU: 0 PID: 14330 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2749.028277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.030010] Call Trace: [ 2749.030582] dump_stack+0x107/0x167 [ 2749.031362] should_fail.cold+0x5/0xa [ 2749.032171] ? __d_alloc+0x2a/0x990 [ 2749.032940] should_failslab+0x5/0x20 [ 2749.033746] kmem_cache_alloc+0x5b/0x310 [ 2749.034612] __d_alloc+0x2a/0x990 [ 2749.035354] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2749.036438] ? trace_hardirqs_on+0x5b/0x180 [ 2749.037359] d_alloc_pseudo+0x19/0x70 [ 2749.038166] alloc_file_pseudo+0xce/0x250 [ 2749.039057] ? alloc_file+0x5a0/0x5a0 [ 2749.039864] ? igrab+0xc0/0xc0 [ 2749.040555] ? alloc_pipe_info+0x442/0x590 [ 2749.041476] create_pipe_files+0x40e/0x8c0 [ 2749.042381] do_pipe2+0x96/0x1b0 [ 2749.043127] ? create_pipe_files+0x8c0/0x8c0 [ 2749.044050] ? ksys_write+0x1a9/0x260 [ 2749.044853] ? __ia32_sys_read+0xb0/0xb0 [ 2749.045725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2749.046827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2749.047924] __x64_sys_pipe+0x2f/0x40 [ 2749.048721] do_syscall_64+0x33/0x40 [ 2749.049512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.050582] RIP: 0033:0x7f659cb0cb19 [ 2749.051376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.055189] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2749.056767] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2749.058258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2749.059745] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.061220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2749.062701] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 03:21:27 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 03:21:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 10) 03:21:27 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 6) 03:21:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) [ 2749.214241] FAULT_INJECTION: forcing a failure. [ 2749.214241] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.216014] CPU: 1 PID: 14338 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2749.217066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.218367] Call Trace: [ 2749.218792] dump_stack+0x107/0x167 [ 2749.219363] should_fail.cold+0x5/0xa [ 2749.219943] ? create_object.isra.0+0x3a/0xa20 [ 2749.220654] should_failslab+0x5/0x20 [ 2749.221247] kmem_cache_alloc+0x5b/0x310 [ 2749.221872] create_object.isra.0+0x3a/0xa20 [ 2749.222527] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2749.223313] kmem_cache_alloc+0x159/0x310 [ 2749.223934] __d_alloc+0x2a/0x990 [ 2749.224475] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2749.225278] ? trace_hardirqs_on+0x5b/0x180 [ 2749.225963] d_alloc_pseudo+0x19/0x70 [ 2749.226549] alloc_file_pseudo+0xce/0x250 [ 2749.227164] ? alloc_file+0x5a0/0x5a0 [ 2749.227737] ? igrab+0xc0/0xc0 [ 2749.228229] ? alloc_pipe_info+0x442/0x590 [ 2749.228883] create_pipe_files+0x40e/0x8c0 [ 2749.229548] do_pipe2+0x96/0x1b0 [ 2749.230008] FAULT_INJECTION: forcing a failure. [ 2749.230008] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.231667] ? create_pipe_files+0x8c0/0x8c0 [ 2749.231680] ? ksys_write+0x1a9/0x260 [ 2749.231694] ? __ia32_sys_read+0xb0/0xb0 [ 2749.231711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2749.231726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2749.231741] __x64_sys_pipe+0x2f/0x40 [ 2749.231753] do_syscall_64+0x33/0x40 [ 2749.231766] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.231775] RIP: 0033:0x7f659cb0cb19 [ 2749.231787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.231802] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2749.241606] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2749.242662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2749.243729] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.244777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2749.245818] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2749.246896] CPU: 0 PID: 14337 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2749.248231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.249790] Call Trace: [ 2749.250293] dump_stack+0x107/0x167 [ 2749.250995] should_fail.cold+0x5/0xa [ 2749.251774] ? create_object.isra.0+0x3a/0xa20 [ 2749.251919] FAULT_INJECTION: forcing a failure. [ 2749.251919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2749.252632] should_failslab+0x5/0x20 [ 2749.252651] kmem_cache_alloc+0x5b/0x310 [ 2749.252675] create_object.isra.0+0x3a/0xa20 [ 2749.256620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2749.257573] kmem_cache_alloc_node+0x169/0x330 [ 2749.258435] copy_process+0x3285/0x7800 [ 2749.259195] ? mark_lock+0xf5/0x2df0 [ 2749.259892] ? lock_acquire+0x197/0x470 [ 2749.260627] ? find_held_lock+0x2c/0x110 [ 2749.261391] ? __cleanup_sighand+0xb0/0xb0 [ 2749.262184] ? _copy_from_user+0xfb/0x1b0 [ 2749.262961] kernel_clone+0xe7/0x980 [ 2749.263656] ? lock_acquire+0x197/0x470 [ 2749.264390] ? create_io_thread+0xf0/0xf0 [ 2749.265176] __do_sys_clone3+0x1e5/0x320 [ 2749.265927] ? __do_sys_clone+0x110/0x110 [ 2749.266709] ? lock_downgrade+0x6d0/0x6d0 [ 2749.267534] ? rcu_read_lock_any_held+0x75/0xa0 [ 2749.268401] ? vfs_write+0x354/0xb10 [ 2749.269099] ? ksys_write+0x1a9/0x260 [ 2749.269805] ? __ia32_sys_read+0xb0/0xb0 [ 2749.270559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2749.271539] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2749.272491] ? trace_hardirqs_on+0x5b/0x180 [ 2749.273289] do_syscall_64+0x33/0x40 [ 2749.273976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.274919] RIP: 0033:0x7fc070febb19 [ 2749.275608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.279000] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2749.280412] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2749.281716] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2749.283027] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.284324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2749.285635] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2749.286963] CPU: 1 PID: 14333 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2749.287989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.289172] Call Trace: [ 2749.289551] dump_stack+0x107/0x167 [ 2749.290076] should_fail.cold+0x5/0xa [ 2749.290631] _copy_from_user+0x2e/0x1b0 [ 2749.291216] copy_mount_options+0x76/0x180 [ 2749.291824] __x64_sys_mount+0x1a8/0x300 [ 2749.292407] ? copy_mnt_ns+0xa00/0xa00 [ 2749.292976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2749.293724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2749.294465] do_syscall_64+0x33/0x40 [ 2749.295009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.295746] RIP: 0033:0x7f3eebf31b19 [ 2749.296283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.299283] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2749.300357] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2749.301376] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2749.302391] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2749.303404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2749.304414] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2749.307813] FAULT_INJECTION: forcing a failure. [ 2749.307813] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2749.310171] CPU: 0 PID: 14340 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 2749.311442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.312934] Call Trace: [ 2749.313410] dump_stack+0x107/0x167 [ 2749.314068] should_fail.cold+0x5/0xa [ 2749.314763] __alloc_pages_nodemask+0x182/0x600 [ 2749.315624] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2749.316727] ? kmem_cache_alloc_node+0x313/0x330 [ 2749.317601] alloc_pages_current+0x187/0x280 [ 2749.318412] allocate_slab+0x26f/0x380 [ 2749.319127] ___slab_alloc+0x470/0x700 [ 2749.319839] ? copy_process+0x3285/0x7800 [ 2749.320600] ? copy_process+0x3285/0x7800 [ 2749.321354] ? kmem_cache_alloc_node+0x313/0x330 [ 2749.322208] kmem_cache_alloc_node+0x313/0x330 [ 2749.323040] copy_process+0x3285/0x7800 [ 2749.323763] ? mark_lock+0xf5/0x2df0 [ 2749.324437] ? lock_acquire+0x197/0x470 [ 2749.325149] ? find_held_lock+0x2c/0x110 [ 2749.325897] ? __cleanup_sighand+0xb0/0xb0 [ 2749.326674] ? _copy_from_user+0xfb/0x1b0 [ 2749.327432] kernel_clone+0xe7/0x980 [ 2749.328102] ? lock_acquire+0x197/0x470 [ 2749.328823] ? create_io_thread+0xf0/0xf0 [ 2749.329593] __do_sys_clone3+0x1e5/0x320 [ 2749.330327] ? __do_sys_clone+0x110/0x110 [ 2749.331077] ? lock_downgrade+0x6d0/0x6d0 [ 2749.331837] ? rcu_read_lock_any_held+0x75/0xa0 [ 2749.332674] ? vfs_write+0x354/0xb10 [ 2749.333346] ? ksys_write+0x1a9/0x260 [ 2749.334035] ? __ia32_sys_read+0xb0/0xb0 [ 2749.334770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2749.335714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2749.336639] ? trace_hardirqs_on+0x5b/0x180 [ 2749.337414] do_syscall_64+0x33/0x40 [ 2749.338080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.339002] RIP: 0033:0x7f818aa1cb19 [ 2749.339664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.342938] RSP: 002b:00007f8187f92188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2749.344298] RAX: ffffffffffffffda RBX: 00007f818ab2ff60 RCX: 00007f818aa1cb19 [ 2749.345573] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2749.346836] RBP: 00007f8187f921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.348125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2749.349388] R13: 00007fffc8e81fef R14: 00007f8187f92300 R15: 0000000000022000 [ 2764.802055] FAULT_INJECTION: forcing a failure. [ 2764.802055] name failslab, interval 1, probability 0, space 0, times 0 [ 2764.803658] CPU: 1 PID: 14352 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2764.804553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.805634] Call Trace: [ 2764.805990] dump_stack+0x107/0x167 [ 2764.806464] should_fail.cold+0x5/0xa [ 2764.806969] ? __alloc_file+0x21/0x320 [ 2764.807484] should_failslab+0x5/0x20 [ 2764.807973] kmem_cache_alloc+0x5b/0x310 03:21:42 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:42 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 03:21:42 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 03:21:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0x200014bf}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:21:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 11) 03:21:42 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) [ 2764.808516] __alloc_file+0x21/0x320 03:21:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 7) 03:21:42 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) [ 2764.809160] alloc_empty_file+0x6d/0x170 [ 2764.809839] alloc_file+0x5e/0x5a0 [ 2764.810310] alloc_file_pseudo+0x16a/0x250 [ 2764.810858] ? alloc_file+0x5a0/0x5a0 [ 2764.811378] ? igrab+0xc0/0xc0 [ 2764.811805] ? alloc_pipe_info+0x442/0x590 [ 2764.812369] create_pipe_files+0x40e/0x8c0 [ 2764.812917] do_pipe2+0x96/0x1b0 [ 2764.813364] ? create_pipe_files+0x8c0/0x8c0 [ 2764.813936] ? ksys_write+0x1a9/0x260 [ 2764.814429] ? __ia32_sys_read+0xb0/0xb0 [ 2764.814956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.815649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2764.816348] __x64_sys_pipe+0x2f/0x40 [ 2764.816852] do_syscall_64+0x33/0x40 [ 2764.817352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2764.818027] RIP: 0033:0x7f659cb0cb19 [ 2764.818518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2764.820958] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2764.821977] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2764.822926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2764.823863] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.824802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2764.825729] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2764.829548] FAULT_INJECTION: forcing a failure. [ 2764.829548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2764.831079] FAULT_INJECTION: forcing a failure. [ 2764.831079] name failslab, interval 1, probability 0, space 0, times 0 [ 2764.831103] CPU: 0 PID: 14355 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 2764.831113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.831119] Call Trace: [ 2764.831167] dump_stack+0x107/0x167 [ 2764.831189] should_fail.cold+0x5/0xa [ 2764.831211] ? create_object.isra.0+0x3a/0xa20 [ 2764.831234] should_failslab+0x5/0x20 [ 2764.831257] kmem_cache_alloc+0x5b/0x310 [ 2764.840572] create_object.isra.0+0x3a/0xa20 [ 2764.841487] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2764.842551] kmem_cache_alloc_node+0x169/0x330 [ 2764.843547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.844661] copy_process+0x3285/0x7800 [ 2764.845498] ? mark_lock+0xf5/0x2df0 [ 2764.846278] ? lock_acquire+0x197/0x470 [ 2764.847097] ? find_held_lock+0x2c/0x110 [ 2764.848001] ? __cleanup_sighand+0xb0/0xb0 [ 2764.848901] ? _copy_from_user+0xfb/0x1b0 [ 2764.849784] kernel_clone+0xe7/0x980 [ 2764.850567] ? lock_acquire+0x197/0x470 [ 2764.851436] ? create_io_thread+0xf0/0xf0 [ 2764.852412] __do_sys_clone3+0x1e5/0x320 [ 2764.853272] ? __do_sys_clone+0x110/0x110 [ 2764.854137] ? lock_downgrade+0x6d0/0x6d0 [ 2764.855034] ? rcu_read_lock_any_held+0x75/0xa0 [ 2764.856040] ? vfs_write+0x354/0xb10 [ 2764.856826] ? ksys_write+0x1a9/0x260 [ 2764.857622] ? __ia32_sys_read+0xb0/0xb0 [ 2764.858482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.859619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2764.860718] ? trace_hardirqs_on+0x5b/0x180 [ 2764.861634] do_syscall_64+0x33/0x40 [ 2764.862425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2764.863521] RIP: 0033:0x7fba10704b19 [ 2764.864305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2764.868158] RSP: 002b:00007fba0dc7a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2764.869753] RAX: ffffffffffffffda RBX: 00007fba10817f60 RCX: 00007fba10704b19 [ 2764.871282] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2764.872779] RBP: 00007fba0dc7a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.874272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2764.875782] R13: 00007fffa504844f R14: 00007fba0dc7a300 R15: 0000000000022000 [ 2764.877300] CPU: 1 PID: 14348 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2764.878184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.879261] Call Trace: [ 2764.879595] dump_stack+0x107/0x167 [ 2764.880075] should_fail.cold+0x5/0xa [ 2764.880561] __alloc_pages_nodemask+0x182/0x600 [ 2764.881159] ? lock_downgrade+0x6d0/0x6d0 [ 2764.881699] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2764.882467] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2764.883132] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2764.883749] copy_process+0x618/0x7800 [ 2764.884251] ? mark_lock+0xf5/0x2df0 [ 2764.884723] ? lock_acquire+0x197/0x470 [ 2764.885230] ? find_held_lock+0x2c/0x110 [ 2764.885757] ? __cleanup_sighand+0xb0/0xb0 [ 2764.886319] ? _copy_from_user+0xfb/0x1b0 [ 2764.886850] kernel_clone+0xe7/0x980 [ 2764.887322] ? lock_acquire+0x197/0x470 [ 2764.887836] ? create_io_thread+0xf0/0xf0 [ 2764.888380] __do_sys_clone3+0x1e5/0x320 [ 2764.888897] ? __do_sys_clone+0x110/0x110 [ 2764.889424] ? lock_downgrade+0x6d0/0x6d0 [ 2764.889982] ? rcu_read_lock_any_held+0x75/0xa0 [ 2764.890564] ? vfs_write+0x354/0xb10 [ 2764.891046] ? ksys_write+0x1a9/0x260 [ 2764.891539] ? __ia32_sys_read+0xb0/0xb0 [ 2764.892062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.892075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2764.892085] ? trace_hardirqs_on+0x5b/0x180 [ 2764.892098] do_syscall_64+0x33/0x40 [ 2764.892109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2764.892116] RIP: 0033:0x7fc070febb19 [ 2764.892126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:21:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 12) 03:21:43 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) [ 2764.892132] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 03:21:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 8) [ 2764.892143] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2764.892150] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2764.892156] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.892162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2764.892169] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2764.900703] FAULT_INJECTION: forcing a failure. [ 2764.900703] name failslab, interval 1, probability 0, space 0, times 0 [ 2764.900732] CPU: 0 PID: 14358 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2764.900748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.900758] Call Trace: [ 2764.900788] dump_stack+0x107/0x167 [ 2764.900829] should_fail.cold+0x5/0xa [ 2764.900862] ? getname_flags.part.0+0x50/0x4f0 [ 2764.900886] should_failslab+0x5/0x20 [ 2764.900905] kmem_cache_alloc+0x5b/0x310 [ 2764.900940] getname_flags.part.0+0x50/0x4f0 [ 2764.900960] ? _copy_from_user+0xfb/0x1b0 [ 2764.900988] user_path_at_empty+0xa1/0x100 [ 2764.901017] __x64_sys_mount+0x1e9/0x300 [ 2764.901038] ? copy_mnt_ns+0xa00/0xa00 [ 2764.901067] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.901089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2764.901118] do_syscall_64+0x33/0x40 [ 2764.901147] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2764.901161] RIP: 0033:0x7f3eebf31b19 [ 2764.901178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2764.901190] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2764.901212] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2764.901224] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2764.901236] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2764.901247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2764.901259] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2764.913511] FAULT_INJECTION: forcing a failure. [ 2764.913511] name failslab, interval 1, probability 0, space 0, times 0 [ 2764.913524] CPU: 1 PID: 14360 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 2764.913534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.913537] Call Trace: [ 2764.913549] dump_stack+0x107/0x167 [ 2764.913562] should_fail.cold+0x5/0xa [ 2764.913575] ? create_object.isra.0+0x3a/0xa20 [ 2764.913594] should_failslab+0x5/0x20 [ 2764.913614] kmem_cache_alloc+0x5b/0x310 [ 2764.913642] create_object.isra.0+0x3a/0xa20 [ 2764.913660] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2764.913678] FAULT_INJECTION: forcing a failure. [ 2764.913678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2764.913691] kmem_cache_alloc_node+0x169/0x330 [ 2764.913706] copy_process+0x3285/0x7800 [ 2764.913719] ? mark_lock+0xf5/0x2df0 [ 2764.913735] ? lock_acquire+0x197/0x470 [ 2764.913745] ? find_held_lock+0x2c/0x110 [ 2764.913766] ? __cleanup_sighand+0xb0/0xb0 [ 2764.913786] ? _copy_from_user+0xfb/0x1b0 [ 2764.913802] kernel_clone+0xe7/0x980 [ 2764.913814] ? lock_acquire+0x197/0x470 [ 2764.913824] ? create_io_thread+0xf0/0xf0 [ 2764.913850] __do_sys_clone3+0x1e5/0x320 [ 2764.913861] ? __do_sys_clone+0x110/0x110 [ 2764.913872] ? lock_downgrade+0x6d0/0x6d0 [ 2764.913894] ? rcu_read_lock_any_held+0x75/0xa0 [ 2764.913904] ? vfs_write+0x354/0xb10 [ 2764.913920] ? ksys_write+0x1a9/0x260 [ 2764.913932] ? __ia32_sys_read+0xb0/0xb0 [ 2764.913946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.913957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2764.913966] ? trace_hardirqs_on+0x5b/0x180 [ 2764.913979] do_syscall_64+0x33/0x40 [ 2764.913990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2764.913998] RIP: 0033:0x7f38d27a8b19 [ 2764.914007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2764.914013] RSP: 002b:00007f38cfd1e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2764.914026] RAX: ffffffffffffffda RBX: 00007f38d28bbf60 RCX: 00007f38d27a8b19 [ 2764.914032] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2764.914039] RBP: 00007f38cfd1e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.914045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2764.914051] R13: 00007ffc53e2f57f R14: 00007f38cfd1e300 R15: 0000000000022000 [ 2764.914083] CPU: 0 PID: 14354 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 2764.914095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.914101] Call Trace: [ 2764.914124] dump_stack+0x107/0x167 [ 2764.914157] should_fail.cold+0x5/0xa [ 2764.914181] __alloc_pages_nodemask+0x182/0x600 [ 2764.914198] ? lock_downgrade+0x6d0/0x6d0 [ 2764.914220] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2764.914240] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2764.914267] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2764.914291] copy_process+0x618/0x7800 [ 2764.914311] ? mark_lock+0xf5/0x2df0 [ 2764.914336] ? lock_acquire+0x197/0x470 [ 2764.914353] ? find_held_lock+0x2c/0x110 [ 2764.914386] ? __cleanup_sighand+0xb0/0xb0 [ 2764.914418] ? _copy_from_user+0xfb/0x1b0 [ 2764.914444] kernel_clone+0xe7/0x980 [ 2764.914463] ? lock_acquire+0x197/0x470 [ 2764.914481] ? create_io_thread+0xf0/0xf0 [ 2764.914523] __do_sys_clone3+0x1e5/0x320 [ 2764.914540] ? __do_sys_clone+0x110/0x110 [ 2764.914557] ? lock_downgrade+0x6d0/0x6d0 [ 2764.914592] ? rcu_read_lock_any_held+0x75/0xa0 [ 2764.914609] ? vfs_write+0x354/0xb10 [ 2764.914634] ? ksys_write+0x1a9/0x260 [ 2764.914653] ? __ia32_sys_read+0xb0/0xb0 [ 2764.914676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.914694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2764.914708] ? trace_hardirqs_on+0x5b/0x180 [ 2764.914728] do_syscall_64+0x33/0x40 [ 2764.914746] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2764.914758] RIP: 0033:0x7f818aa1cb19 [ 2764.914773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2764.914783] RSP: 002b:00007f8187f92188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2764.914802] RAX: ffffffffffffffda RBX: 00007f818ab2ff60 RCX: 00007f818aa1cb19 [ 2764.914812] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2764.914822] RBP: 00007f8187f921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.914832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2764.914842] R13: 00007fffc8e81fef R14: 00007f8187f92300 R15: 0000000000022000 [ 2765.012948] FAULT_INJECTION: forcing a failure. [ 2765.012948] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.012963] CPU: 1 PID: 14374 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2765.012969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.012972] Call Trace: [ 2765.012988] dump_stack+0x107/0x167 [ 2765.013000] should_fail.cold+0x5/0xa [ 2765.013014] ? create_object.isra.0+0x3a/0xa20 [ 2765.013027] should_failslab+0x5/0x20 [ 2765.013038] kmem_cache_alloc+0x5b/0x310 [ 2765.013052] create_object.isra.0+0x3a/0xa20 [ 2765.013060] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2765.013074] kmem_cache_alloc+0x159/0x310 [ 2765.013088] __alloc_file+0x21/0x320 [ 2765.013098] alloc_empty_file+0x6d/0x170 [ 2765.013109] alloc_file+0x5e/0x5a0 [ 2765.013121] alloc_file_pseudo+0x16a/0x250 [ 2765.013136] ? alloc_file+0x5a0/0x5a0 [ 2765.013146] ? igrab+0xc0/0xc0 [ 2765.013161] ? alloc_pipe_info+0x442/0x590 [ 2765.013181] create_pipe_files+0x40e/0x8c0 [ 2765.056003] FAULT_INJECTION: forcing a failure. [ 2765.056003] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.056697] do_pipe2+0x96/0x1b0 [ 2765.056708] ? create_pipe_files+0x8c0/0x8c0 [ 2765.056718] ? ksys_write+0x1a9/0x260 [ 2765.056729] ? __ia32_sys_read+0xb0/0xb0 [ 2765.056751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.098456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.099055] __x64_sys_pipe+0x2f/0x40 [ 2765.099508] do_syscall_64+0x33/0x40 [ 2765.099942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.100533] RIP: 0033:0x7f659cb0cb19 [ 2765.100965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.103086] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2765.103977] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2765.104802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2765.105627] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.106453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2765.107282] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2765.108135] CPU: 0 PID: 14401 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2765.109626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.111389] Call Trace: [ 2765.111966] dump_stack+0x107/0x167 [ 2765.112753] should_fail.cold+0x5/0xa [ 2765.113575] ? create_object.isra.0+0x3a/0xa20 [ 2765.114558] should_failslab+0x5/0x20 [ 2765.114955] FAULT_INJECTION: forcing a failure. [ 2765.114955] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.115377] kmem_cache_alloc+0x5b/0x310 [ 2765.115414] create_object.isra.0+0x3a/0xa20 [ 2765.115434] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2765.119569] kmem_cache_alloc+0x159/0x310 [ 2765.120473] getname_flags.part.0+0x50/0x4f0 [ 2765.121428] ? _copy_from_user+0xfb/0x1b0 [ 2765.122328] user_path_at_empty+0xa1/0x100 [ 2765.123244] __x64_sys_mount+0x1e9/0x300 [ 2765.124122] ? copy_mnt_ns+0xa00/0xa00 [ 2765.124983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.126114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.127251] do_syscall_64+0x33/0x40 [ 2765.128062] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.129156] RIP: 0033:0x7f3eebf31b19 [ 2765.129949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.133864] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2765.135526] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2765.137045] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2765.138557] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2765.140113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2765.141646] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2765.143266] CPU: 1 PID: 14370 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 2765.144066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.145013] Call Trace: [ 2765.145316] dump_stack+0x107/0x167 [ 2765.145734] should_fail.cold+0x5/0xa [ 2765.146168] ? create_object.isra.0+0x3a/0xa20 03:21:43 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) [ 2765.146693] should_failslab+0x5/0x20 [ 2765.147350] kmem_cache_alloc+0x5b/0x310 [ 2765.147816] create_object.isra.0+0x3a/0xa20 [ 2765.148315] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2765.148896] kmem_cache_alloc_node+0x169/0x330 [ 2765.149435] copy_process+0x3285/0x7800 [ 2765.149888] ? mark_lock+0xf5/0x2df0 [ 2765.150319] ? lock_acquire+0x197/0x470 [ 2765.150773] ? find_held_lock+0x2c/0x110 [ 2765.151252] ? __cleanup_sighand+0xb0/0xb0 [ 2765.151748] ? _copy_from_user+0xfb/0x1b0 [ 2765.152225] kernel_clone+0xe7/0x980 [ 2765.152652] ? lock_acquire+0x197/0x470 [ 2765.153109] ? create_io_thread+0xf0/0xf0 [ 2765.153603] __do_sys_clone3+0x1e5/0x320 [ 2765.154065] ? __do_sys_clone+0x110/0x110 [ 2765.154536] ? lock_downgrade+0x6d0/0x6d0 [ 2765.155019] ? rcu_read_lock_any_held+0x75/0xa0 [ 2765.155554] ? vfs_write+0x354/0xb10 [ 2765.155984] ? ksys_write+0x1a9/0x260 [ 2765.156415] ? __ia32_sys_read+0xb0/0xb0 [ 2765.156885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.157482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.158072] ? trace_hardirqs_on+0x5b/0x180 [ 2765.158564] do_syscall_64+0x33/0x40 [ 2765.158989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.159585] RIP: 0033:0x7fba10704b19 [ 2765.160008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.162094] RSP: 002b:00007fba0dc7a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2765.162966] RAX: ffffffffffffffda RBX: 00007fba10817f60 RCX: 00007fba10704b19 [ 2765.163793] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2765.164603] RBP: 00007fba0dc7a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.165419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2765.166230] R13: 00007fffa504844f R14: 00007fba0dc7a300 R15: 0000000000022000 [ 2765.238526] FAULT_INJECTION: forcing a failure. [ 2765.238526] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2765.241358] CPU: 0 PID: 14472 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 2765.242827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.244606] Call Trace: [ 2765.245168] dump_stack+0x107/0x167 [ 2765.245944] should_fail.cold+0x5/0xa [ 2765.246755] __alloc_pages_nodemask+0x182/0x600 [ 2765.247778] ? lock_downgrade+0x6d0/0x6d0 [ 2765.248659] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2765.249947] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2765.251051] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2765.252063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.253181] copy_process+0x618/0x7800 [ 2765.254003] ? mark_lock+0xf5/0x2df0 [ 2765.254799] ? lock_acquire+0x197/0x470 [ 2765.255671] ? find_held_lock+0x2c/0x110 [ 2765.256558] ? __cleanup_sighand+0xb0/0xb0 [ 2765.257477] ? _copy_from_user+0xfb/0x1b0 [ 2765.258368] kernel_clone+0xe7/0x980 [ 2765.259183] ? lock_acquire+0x197/0x470 [ 2765.260042] ? create_io_thread+0xf0/0xf0 [ 2765.260942] __do_sys_clone3+0x1e5/0x320 [ 2765.261805] ? __do_sys_clone+0x110/0x110 [ 2765.262679] ? lock_downgrade+0x6d0/0x6d0 [ 2765.263593] ? rcu_read_lock_any_held+0x75/0xa0 [ 2765.264580] ? vfs_write+0x354/0xb10 [ 2765.265382] ? ksys_write+0x1a9/0x260 [ 2765.266195] ? __ia32_sys_read+0xb0/0xb0 [ 2765.267065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.268190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.269297] ? trace_hardirqs_on+0x5b/0x180 [ 2765.270210] do_syscall_64+0x33/0x40 [ 2765.270995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.272117] RIP: 0033:0x7f38d27a8b19 [ 2765.272909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.276867] RSP: 002b:00007f38cfd1e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2765.278488] RAX: ffffffffffffffda RBX: 00007f38d28bbf60 RCX: 00007f38d27a8b19 [ 2765.280028] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2765.281552] RBP: 00007f38cfd1e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.283062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2765.284579] R13: 00007ffc53e2f57f R14: 00007f38cfd1e300 R15: 0000000000022000 03:21:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 9) [ 2765.326633] FAULT_INJECTION: forcing a failure. [ 2765.326633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2765.328070] CPU: 1 PID: 14476 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2765.328867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.329819] Call Trace: [ 2765.330130] dump_stack+0x107/0x167 [ 2765.330560] should_fail.cold+0x5/0xa [ 2765.331012] strncpy_from_user+0x34/0x470 [ 2765.331507] getname_flags.part.0+0x95/0x4f0 [ 2765.332021] ? _copy_from_user+0xfb/0x1b0 [ 2765.332502] user_path_at_empty+0xa1/0x100 [ 2765.333004] __x64_sys_mount+0x1e9/0x300 [ 2765.333475] ? copy_mnt_ns+0xa00/0xa00 [ 2765.333939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.334551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2765.335161] do_syscall_64+0x33/0x40 [ 2765.335600] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.336196] RIP: 0033:0x7f3eebf31b19 [ 2765.336630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.338754] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2765.339644] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2765.340468] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2765.341294] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2765.342120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2765.342948] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:21:57 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) 03:21:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) [ 2779.304979] FAULT_INJECTION: forcing a failure. [ 2779.304979] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.306306] CPU: 0 PID: 14491 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2779.307089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.308049] Call Trace: [ 2779.308370] dump_stack+0x107/0x167 [ 2779.308797] should_fail.cold+0x5/0xa [ 2779.309245] ? security_file_alloc+0x34/0x170 [ 2779.309768] should_failslab+0x5/0x20 [ 2779.310216] kmem_cache_alloc+0x5b/0x310 [ 2779.310696] security_file_alloc+0x34/0x170 [ 2779.310921] FAULT_INJECTION: forcing a failure. [ 2779.310921] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.311188] __alloc_file+0xb7/0x320 [ 2779.311203] alloc_empty_file+0x6d/0x170 [ 2779.311217] alloc_file+0x5e/0x5a0 [ 2779.311233] alloc_file_pseudo+0x16a/0x250 [ 2779.311245] ? alloc_file+0x5a0/0x5a0 [ 2779.311257] ? igrab+0xc0/0xc0 [ 2779.311276] ? alloc_pipe_info+0x442/0x590 [ 2779.311304] create_pipe_files+0x40e/0x8c0 [ 2779.311334] do_pipe2+0x96/0x1b0 [ 2779.317123] ? create_pipe_files+0x8c0/0x8c0 [ 2779.317629] ? ksys_write+0x1a9/0x260 [ 2779.318064] ? __ia32_sys_read+0xb0/0xb0 [ 2779.318537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2779.319145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2779.319763] __x64_sys_pipe+0x2f/0x40 [ 2779.320199] do_syscall_64+0x33/0x40 [ 2779.320628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2779.321214] RIP: 0033:0x7f659cb0cb19 [ 2779.321639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.323755] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2779.324627] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2779.325443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2779.326257] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.327071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2779.327903] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2779.328751] CPU: 1 PID: 14488 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 2779.329946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.331343] Call Trace: [ 2779.331790] dump_stack+0x107/0x167 [ 2779.332414] should_fail.cold+0x5/0xa [ 2779.333063] ? prepare_creds+0x25/0x5e0 [ 2779.333747] should_failslab+0x5/0x20 [ 2779.334402] kmem_cache_alloc+0x5b/0x310 [ 2779.335087] ? lock_downgrade+0x6d0/0x6d0 [ 2779.335791] prepare_creds+0x25/0x5e0 [ 2779.336438] copy_creds+0x72/0x580 [ 2779.337048] copy_process+0xfdc/0x7800 [ 2779.337712] ? mark_lock+0xf5/0x2df0 [ 2779.338384] ? lock_acquire+0x197/0x470 [ 2779.339049] ? find_held_lock+0x2c/0x110 [ 2779.339769] ? __cleanup_sighand+0xb0/0xb0 [ 2779.340511] ? _copy_from_user+0xfb/0x1b0 03:21:57 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0x7ffff000}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 2779.341290] kernel_clone+0xe7/0x980 03:21:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 10) 03:21:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 13) 03:21:57 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) 03:21:57 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2779.342041] ? lock_acquire+0x197/0x470 [ 2779.342779] ? create_io_thread+0xf0/0xf0 [ 2779.343648] __do_sys_clone3+0x1e5/0x320 [ 2779.344360] ? __do_sys_clone+0x110/0x110 [ 2779.344374] ? lock_downgrade+0x6d0/0x6d0 [ 2779.344403] ? rcu_read_lock_any_held+0x75/0xa0 [ 2779.344417] ? vfs_write+0x354/0xb10 [ 2779.344437] ? ksys_write+0x1a9/0x260 [ 2779.344452] ? __ia32_sys_read+0xb0/0xb0 [ 2779.344470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2779.344486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2779.344498] ? trace_hardirqs_on+0x5b/0x180 [ 2779.344514] do_syscall_64+0x33/0x40 [ 2779.344529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2779.344539] RIP: 0033:0x7f818aa1cb19 [ 2779.344553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.344560] RSP: 002b:00007f8187f92188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2779.344576] RAX: ffffffffffffffda RBX: 00007f818ab2ff60 RCX: 00007f818aa1cb19 [ 2779.344584] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2779.344592] RBP: 00007f8187f921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.344600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2779.344608] R13: 00007fffc8e81fef R14: 00007f8187f92300 R15: 0000000000022000 [ 2779.368526] FAULT_INJECTION: forcing a failure. [ 2779.368526] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.370647] CPU: 1 PID: 14494 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2779.371852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.373267] Call Trace: [ 2779.373727] dump_stack+0x107/0x167 [ 2779.374367] should_fail.cold+0x5/0xa [ 2779.375012] ? prepare_creds+0x25/0x5e0 [ 2779.375700] should_failslab+0x5/0x20 [ 2779.376351] kmem_cache_alloc+0x5b/0x310 [ 2779.377046] ? lock_downgrade+0x6d0/0x6d0 [ 2779.377768] prepare_creds+0x25/0x5e0 [ 2779.378417] copy_creds+0x72/0x580 [ 2779.379022] copy_process+0xfdc/0x7800 [ 2779.379703] ? mark_lock+0xf5/0x2df0 [ 2779.380328] ? lock_acquire+0x197/0x470 [ 2779.381005] ? find_held_lock+0x2c/0x110 [ 2779.381714] ? __cleanup_sighand+0xb0/0xb0 [ 2779.382441] ? _copy_from_user+0xfb/0x1b0 [ 2779.383151] kernel_clone+0xe7/0x980 [ 2779.383803] ? lock_acquire+0x197/0x470 [ 2779.384455] ? create_io_thread+0xf0/0xf0 [ 2779.385167] __do_sys_clone3+0x1e5/0x320 [ 2779.385869] ? __do_sys_clone+0x110/0x110 [ 2779.386589] ? lock_downgrade+0x6d0/0x6d0 [ 2779.387317] ? rcu_read_lock_any_held+0x75/0xa0 [ 2779.388124] ? vfs_write+0x354/0xb10 [ 2779.388761] ? ksys_write+0x1a9/0x260 [ 2779.389420] ? __ia32_sys_read+0xb0/0xb0 [ 2779.390122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2779.390996] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2779.391884] ? trace_hardirqs_on+0x5b/0x180 [ 2779.392622] do_syscall_64+0x33/0x40 [ 2779.393256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2779.394135] RIP: 0033:0x7fc070febb19 [ 2779.394767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.397949] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2779.399251] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2779.400483] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2779.401708] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.402929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2779.404168] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2779.407979] FAULT_INJECTION: forcing a failure. [ 2779.407979] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.409939] CPU: 1 PID: 14497 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2779.411140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.412556] Call Trace: [ 2779.413017] dump_stack+0x107/0x167 [ 2779.413668] should_fail.cold+0x5/0xa [ 2779.414331] ? alloc_fs_context+0x57/0x840 [ 2779.415067] should_failslab+0x5/0x20 [ 2779.415723] kmem_cache_alloc_trace+0x55/0x320 [ 2779.416545] alloc_fs_context+0x57/0x840 [ 2779.416576] path_mount+0xaa3/0x2120 [ 2779.416602] ? strncpy_from_user+0x9e/0x470 [ 2779.416622] ? finish_automount+0xa90/0xa90 [ 2779.416642] ? getname_flags.part.0+0x1dd/0x4f0 [ 2779.416667] ? _copy_from_user+0xfb/0x1b0 [ 2779.416706] __x64_sys_mount+0x282/0x300 [ 2779.416724] ? copy_mnt_ns+0xa00/0xa00 [ 2779.416749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2779.423094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2779.424022] do_syscall_64+0x33/0x40 [ 2779.424678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2779.425552] RIP: 0033:0x7f3eebf31b19 [ 2779.426204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.429390] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2779.430730] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2779.431977] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 03:21:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 14) [ 2779.433235] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2779.434640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2779.435877] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2779.438406] FAULT_INJECTION: forcing a failure. [ 2779.438406] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.440477] CPU: 1 PID: 14518 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2779.441688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.443121] Call Trace: [ 2779.443581] dump_stack+0x107/0x167 [ 2779.444221] should_fail.cold+0x5/0xa [ 2779.444891] ? create_object.isra.0+0x3a/0xa20 [ 2779.445703] should_failslab+0x5/0x20 [ 2779.446370] kmem_cache_alloc+0x5b/0x310 [ 2779.447086] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2779.448066] create_object.isra.0+0x3a/0xa20 [ 2779.448835] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2779.449730] kmem_cache_alloc+0x159/0x310 [ 2779.450464] security_file_alloc+0x34/0x170 [ 2779.451209] __alloc_file+0xb7/0x320 [ 2779.451842] alloc_empty_file+0x6d/0x170 [ 2779.452564] alloc_file+0x5e/0x5a0 [ 2779.453201] alloc_file_pseudo+0x16a/0x250 [ 2779.453943] ? alloc_file+0x5a0/0x5a0 [ 2779.454591] ? igrab+0xc0/0xc0 [ 2779.455165] ? alloc_pipe_info+0x442/0x590 [ 2779.455922] create_pipe_files+0x40e/0x8c0 [ 2779.456687] do_pipe2+0x96/0x1b0 [ 2779.457269] ? create_pipe_files+0x8c0/0x8c0 [ 2779.458046] ? ksys_write+0x1a9/0x260 [ 2779.458727] ? __ia32_sys_read+0xb0/0xb0 [ 2779.459435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2779.460354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2779.461260] __x64_sys_pipe+0x2f/0x40 [ 2779.461928] do_syscall_64+0x33/0x40 [ 2779.462591] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2779.463507] RIP: 0033:0x7f659cb0cb19 [ 2779.464153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.467356] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2779.468674] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2779.469933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2779.471172] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.472430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2779.473682] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2779.485699] FAULT_INJECTION: forcing a failure. [ 2779.485699] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.488132] CPU: 0 PID: 14487 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 2779.488923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.489862] Call Trace: [ 2779.490176] dump_stack+0x107/0x167 [ 2779.490596] should_fail.cold+0x5/0xa [ 2779.491039] ? prepare_creds+0x25/0x5e0 [ 2779.491532] should_failslab+0x5/0x20 [ 2779.491972] kmem_cache_alloc+0x5b/0x310 [ 2779.492450] ? lock_downgrade+0x6d0/0x6d0 [ 2779.492921] prepare_creds+0x25/0x5e0 [ 2779.493353] copy_creds+0x72/0x580 [ 2779.493761] copy_process+0xfdc/0x7800 [ 2779.494202] ? mark_lock+0xf5/0x2df0 [ 2779.494627] ? lock_acquire+0x197/0x470 [ 2779.495076] ? find_held_lock+0x2c/0x110 [ 2779.495570] ? __cleanup_sighand+0xb0/0xb0 [ 2779.496059] ? _copy_from_user+0xfb/0x1b0 [ 2779.496554] kernel_clone+0xe7/0x980 [ 2779.496978] ? lock_acquire+0x197/0x470 [ 2779.497436] ? create_io_thread+0xf0/0xf0 [ 2779.497917] __do_sys_clone3+0x1e5/0x320 [ 2779.498377] ? __do_sys_clone+0x110/0x110 [ 2779.498847] ? lock_downgrade+0x6d0/0x6d0 [ 2779.499348] ? rcu_read_lock_any_held+0x75/0xa0 [ 2779.499885] ? vfs_write+0x354/0xb10 [ 2779.500317] ? ksys_write+0x1a9/0x260 [ 2779.500751] ? __ia32_sys_read+0xb0/0xb0 [ 2779.501211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2779.501805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2779.502403] ? trace_hardirqs_on+0x5b/0x180 [ 2779.502892] do_syscall_64+0x33/0x40 [ 2779.503326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2779.503919] RIP: 0033:0x7f38d27a8b19 [ 2779.504339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.506442] RSP: 002b:00007f38cfd1e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2779.507321] RAX: ffffffffffffffda RBX: 00007f38d28bbf60 RCX: 00007f38d27a8b19 [ 2779.508145] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2779.508950] RBP: 00007f38cfd1e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.509759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2779.510569] R13: 00007ffc53e2f57f R14: 00007f38cfd1e300 R15: 0000000000022000 03:21:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 11) 03:21:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 15) [ 2779.558528] FAULT_INJECTION: forcing a failure. [ 2779.558528] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.560653] CPU: 1 PID: 14603 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2779.561872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.563326] Call Trace: [ 2779.563806] dump_stack+0x107/0x167 [ 2779.564447] should_fail.cold+0x5/0xa [ 2779.565118] ? __alloc_file+0x21/0x320 [ 2779.565807] should_failslab+0x5/0x20 [ 2779.566490] kmem_cache_alloc+0x5b/0x310 [ 2779.567199] ? alloc_file+0x3cc/0x5a0 [ 2779.567885] __alloc_file+0x21/0x320 [ 2779.568549] alloc_empty_file+0x6d/0x170 [ 2779.569268] alloc_file+0x5e/0x5a0 [ 2779.569904] alloc_file_clone+0x22/0xc0 [ 2779.570607] create_pipe_files+0x499/0x8c0 [ 2779.571373] do_pipe2+0x96/0x1b0 [ 2779.571987] ? create_pipe_files+0x8c0/0x8c0 [ 2779.572782] ? ksys_write+0x1a9/0x260 [ 2779.573466] ? __ia32_sys_read+0xb0/0xb0 [ 2779.574210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2779.575139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2779.576066] __x64_sys_pipe+0x2f/0x40 [ 2779.576744] do_syscall_64+0x33/0x40 [ 2779.577405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2779.578318] RIP: 0033:0x7f659cb0cb19 [ 2779.578974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.582246] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2779.583587] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2779.584861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2779.586106] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.587357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2779.588614] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2779.630130] FAULT_INJECTION: forcing a failure. [ 2779.630130] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.631570] CPU: 0 PID: 14607 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2779.632370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.633328] Call Trace: [ 2779.633639] dump_stack+0x107/0x167 [ 2779.634062] should_fail.cold+0x5/0xa [ 2779.634504] ? create_object.isra.0+0x3a/0xa20 [ 2779.635036] should_failslab+0x5/0x20 [ 2779.635492] kmem_cache_alloc+0x5b/0x310 [ 2779.635971] create_object.isra.0+0x3a/0xa20 [ 2779.636479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2779.637081] kmem_cache_alloc_trace+0x151/0x320 [ 2779.637622] alloc_fs_context+0x57/0x840 [ 2779.638098] path_mount+0xaa3/0x2120 [ 2779.638534] ? strncpy_from_user+0x9e/0x470 [ 2779.639037] ? finish_automount+0xa90/0xa90 [ 2779.639564] ? getname_flags.part.0+0x1dd/0x4f0 [ 2779.640113] ? _copy_from_user+0xfb/0x1b0 [ 2779.640598] __x64_sys_mount+0x282/0x300 [ 2779.641064] ? copy_mnt_ns+0xa00/0xa00 [ 2779.641528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2779.642136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2779.642737] do_syscall_64+0x33/0x40 [ 2779.643169] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2779.643775] RIP: 0033:0x7f3eebf31b19 [ 2779.644207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.646310] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2779.647184] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2779.648015] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2779.648849] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2779.649684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2779.650515] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:22:10 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) 03:22:10 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) 03:22:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 16) [ 2792.281468] FAULT_INJECTION: forcing a failure. [ 2792.281468] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.283923] CPU: 0 PID: 14616 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2792.285386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.287144] Call Trace: [ 2792.287738] dump_stack+0x107/0x167 [ 2792.288626] should_fail.cold+0x5/0xa [ 2792.289450] ? create_object.isra.0+0x3a/0xa20 [ 2792.290419] should_failslab+0x5/0x20 [ 2792.291233] kmem_cache_alloc+0x5b/0x310 [ 2792.292114] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2792.293284] create_object.isra.0+0x3a/0xa20 [ 2792.294196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 03:22:10 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40180004, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:10 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:10 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) 03:22:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 12) [ 2792.295328] kmem_cache_alloc+0x159/0x310 [ 2792.296301] security_file_alloc+0x34/0x170 [ 2792.297237] __alloc_file+0xb7/0x320 [ 2792.297771] FAULT_INJECTION: forcing a failure. [ 2792.297771] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.298019] alloc_empty_file+0x6d/0x170 [ 2792.300188] alloc_file+0x5e/0x5a0 [ 2792.300955] alloc_file_pseudo+0x16a/0x250 [ 2792.301856] ? alloc_file+0x5a0/0x5a0 [ 2792.302658] ? igrab+0xc0/0xc0 [ 2792.303368] ? alloc_pipe_info+0x442/0x590 [ 2792.304306] create_pipe_files+0x40e/0x8c0 [ 2792.305224] do_pipe2+0x96/0x1b0 [ 2792.305963] ? create_pipe_files+0x8c0/0x8c0 [ 2792.306888] ? ksys_write+0x1a9/0x260 [ 2792.307722] ? __ia32_sys_read+0xb0/0xb0 [ 2792.308600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.309727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.310844] __x64_sys_pipe+0x2f/0x40 [ 2792.311701] do_syscall_64+0x33/0x40 [ 2792.312513] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.313596] RIP: 0033:0x7f659cb0cb19 [ 2792.314381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.318261] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2792.319892] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2792.321378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2792.322867] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.324379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2792.325862] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2792.327394] CPU: 1 PID: 14615 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2792.328213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.329157] Call Trace: 03:22:10 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x2) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 2792.329462] dump_stack+0x107/0x167 [ 2792.329962] should_fail.cold+0x5/0xa [ 2792.330407] ? create_object.isra.0+0x3a/0xa20 [ 2792.331025] should_failslab+0x5/0x20 [ 2792.331524] kmem_cache_alloc+0x5b/0x310 [ 2792.331992] create_object.isra.0+0x3a/0xa20 [ 2792.332497] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2792.333075] kmem_cache_alloc+0x159/0x310 [ 2792.333553] prepare_creds+0x25/0x5e0 [ 2792.333988] copy_creds+0x72/0x580 [ 2792.334398] copy_process+0xfdc/0x7800 [ 2792.334845] ? mark_lock+0xf5/0x2df0 [ 2792.335269] ? lock_acquire+0x197/0x470 [ 2792.335728] ? find_held_lock+0x2c/0x110 [ 2792.336200] ? __cleanup_sighand+0xb0/0xb0 [ 2792.336698] ? _copy_from_user+0xfb/0x1b0 [ 2792.337174] kernel_clone+0xe7/0x980 [ 2792.337608] ? lock_acquire+0x197/0x470 [ 2792.338072] ? create_io_thread+0xf0/0xf0 [ 2792.338557] __do_sys_clone3+0x1e5/0x320 [ 2792.339021] ? __do_sys_clone+0x110/0x110 [ 2792.339500] ? lock_downgrade+0x6d0/0x6d0 [ 2792.339975] ? rcu_read_lock_any_held+0x75/0xa0 [ 2792.340498] ? vfs_write+0x354/0xb10 [ 2792.340926] ? ksys_write+0x1a9/0x260 [ 2792.341357] ? __ia32_sys_read+0xb0/0xb0 [ 2792.341818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.342417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.343004] ? trace_hardirqs_on+0x5b/0x180 [ 2792.343498] do_syscall_64+0x33/0x40 [ 2792.343927] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.344508] RIP: 0033:0x7fc070febb19 [ 2792.345023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.347195] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2792.348059] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2792.348858] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2792.349663] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.350698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2792.351508] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2792.357575] FAULT_INJECTION: forcing a failure. [ 2792.357575] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.358933] CPU: 1 PID: 14626 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2792.359733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.360680] Call Trace: [ 2792.360988] dump_stack+0x107/0x167 [ 2792.361416] should_fail.cold+0x5/0xa [ 2792.361857] ? legacy_init_fs_context+0x44/0xe0 [ 2792.362396] should_failslab+0x5/0x20 [ 2792.362839] kmem_cache_alloc_trace+0x55/0x320 [ 2792.363365] ? lockdep_init_map_type+0x2c7/0x780 [ 2792.363924] legacy_init_fs_context+0x44/0xe0 [ 2792.364442] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2792.365013] alloc_fs_context+0x4fd/0x840 [ 2792.365502] path_mount+0xaa3/0x2120 [ 2792.365940] ? strncpy_from_user+0x9e/0x470 [ 2792.366438] ? finish_automount+0xa90/0xa90 [ 2792.366936] ? getname_flags.part.0+0x1dd/0x4f0 [ 2792.367481] ? _copy_from_user+0xfb/0x1b0 [ 2792.367968] __x64_sys_mount+0x282/0x300 [ 2792.368435] ? copy_mnt_ns+0xa00/0xa00 [ 2792.368887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.369487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.370082] do_syscall_64+0x33/0x40 [ 2792.370509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.371099] RIP: 0033:0x7f3eebf31b19 [ 2792.371535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.373617] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2792.374480] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2792.375293] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2792.376118] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2792.376944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2792.377778] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2792.398043] FAULT_INJECTION: forcing a failure. [ 2792.398043] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.399413] CPU: 1 PID: 14625 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 2792.400209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.401175] Call Trace: [ 2792.401492] dump_stack+0x107/0x167 [ 2792.401910] should_fail.cold+0x5/0xa [ 2792.402342] ? create_object.isra.0+0x3a/0xa20 [ 2792.402864] should_failslab+0x5/0x20 [ 2792.403299] kmem_cache_alloc+0x5b/0x310 [ 2792.403772] create_object.isra.0+0x3a/0xa20 [ 2792.404269] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2792.404850] kmem_cache_alloc+0x159/0x310 [ 2792.405326] prepare_creds+0x25/0x5e0 [ 2792.405762] copy_creds+0x72/0x580 [ 2792.406169] copy_process+0xfdc/0x7800 [ 2792.406612] ? mark_lock+0xf5/0x2df0 [ 2792.407038] ? lock_acquire+0x197/0x470 [ 2792.407503] ? find_held_lock+0x2c/0x110 [ 2792.407974] ? __cleanup_sighand+0xb0/0xb0 [ 2792.408463] ? _copy_from_user+0xfb/0x1b0 [ 2792.408936] kernel_clone+0xe7/0x980 [ 2792.409359] ? lock_acquire+0x197/0x470 [ 2792.409824] ? create_io_thread+0xf0/0xf0 [ 2792.410317] __do_sys_clone3+0x1e5/0x320 [ 2792.410801] ? __do_sys_clone+0x110/0x110 [ 2792.411282] ? lock_downgrade+0x6d0/0x6d0 [ 2792.411774] ? rcu_read_lock_any_held+0x75/0xa0 [ 2792.412305] ? vfs_write+0x354/0xb10 [ 2792.412732] ? ksys_write+0x1a9/0x260 [ 2792.413167] ? __ia32_sys_read+0xb0/0xb0 [ 2792.413633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.414235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.414830] ? trace_hardirqs_on+0x5b/0x180 [ 2792.415322] do_syscall_64+0x33/0x40 [ 2792.415752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.416338] RIP: 0033:0x7f38d27a8b19 [ 2792.416765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.418872] RSP: 002b:00007f38cfd1e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2792.419760] RAX: ffffffffffffffda RBX: 00007f38d28bbf60 RCX: 00007f38d27a8b19 [ 2792.420570] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2792.421383] RBP: 00007f38cfd1e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.422200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2792.423015] R13: 00007ffc53e2f57f R14: 00007f38cfd1e300 R15: 0000000000022000 03:22:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 17) [ 2792.442693] FAULT_INJECTION: forcing a failure. [ 2792.442693] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.445399] CPU: 0 PID: 14620 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 2792.446857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.448616] Call Trace: [ 2792.449175] dump_stack+0x107/0x167 [ 2792.449941] should_fail.cold+0x5/0xa [ 2792.450741] ? create_object.isra.0+0x3a/0xa20 [ 2792.451733] should_failslab+0x5/0x20 [ 2792.452531] kmem_cache_alloc+0x5b/0x310 [ 2792.453391] create_object.isra.0+0x3a/0xa20 [ 2792.454312] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2792.455381] kmem_cache_alloc+0x159/0x310 [ 2792.456290] prepare_creds+0x25/0x5e0 [ 2792.457088] copy_creds+0x72/0x580 [ 2792.457848] copy_process+0xfdc/0x7800 [ 2792.458667] ? mark_lock+0xf5/0x2df0 [ 2792.459483] ? lock_acquire+0x197/0x470 [ 2792.460336] ? find_held_lock+0x2c/0x110 [ 2792.461202] ? __cleanup_sighand+0xb0/0xb0 [ 2792.462116] ? _copy_from_user+0xfb/0x1b0 [ 2792.462993] kernel_clone+0xe7/0x980 [ 2792.463802] ? lock_acquire+0x197/0x470 [ 2792.464629] ? create_io_thread+0xf0/0xf0 [ 2792.465529] __do_sys_clone3+0x1e5/0x320 [ 2792.466380] ? __do_sys_clone+0x110/0x110 [ 2792.467257] ? lock_downgrade+0x6d0/0x6d0 [ 2792.468284] ? rcu_read_lock_any_held+0x75/0xa0 [ 2792.469273] ? vfs_write+0x354/0xb10 [ 2792.470074] ? ksys_write+0x1a9/0x260 [ 2792.470882] ? __ia32_sys_read+0xb0/0xb0 [ 2792.471792] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.472908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.474000] ? trace_hardirqs_on+0x5b/0x180 [ 2792.474914] do_syscall_64+0x33/0x40 [ 2792.475732] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.476823] RIP: 0033:0x7f818aa1cb19 [ 2792.477612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.481535] RSP: 002b:00007f8187f92188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2792.483154] RAX: ffffffffffffffda RBX: 00007f818ab2ff60 RCX: 00007f818aa1cb19 [ 2792.484706] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2792.486205] RBP: 00007f8187f921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.487743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2792.489258] R13: 00007fffc8e81fef R14: 00007f8187f92300 R15: 0000000000022000 03:22:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 13) [ 2792.501536] FAULT_INJECTION: forcing a failure. [ 2792.501536] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.502909] CPU: 1 PID: 14633 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2792.503716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.504653] Call Trace: [ 2792.504961] dump_stack+0x107/0x167 [ 2792.505385] should_fail.cold+0x5/0xa [ 2792.505835] ? create_object.isra.0+0x3a/0xa20 [ 2792.506378] should_failslab+0x5/0x20 [ 2792.506826] kmem_cache_alloc+0x5b/0x310 [ 2792.507307] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2792.507971] create_object.isra.0+0x3a/0xa20 [ 2792.508488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2792.509086] kmem_cache_alloc+0x159/0x310 [ 2792.509585] security_file_alloc+0x34/0x170 [ 2792.510097] __alloc_file+0xb7/0x320 [ 2792.510539] alloc_empty_file+0x6d/0x170 [ 2792.511019] alloc_file+0x5e/0x5a0 [ 2792.511455] alloc_file_pseudo+0x16a/0x250 [ 2792.511958] ? alloc_file+0x5a0/0x5a0 [ 2792.512414] ? igrab+0xc0/0xc0 [ 2792.512810] ? alloc_pipe_info+0x442/0x590 [ 2792.513315] create_pipe_files+0x40e/0x8c0 [ 2792.513821] do_pipe2+0x96/0x1b0 [ 2792.514229] ? create_pipe_files+0x8c0/0x8c0 [ 2792.514756] ? ksys_write+0x1a9/0x260 [ 2792.515211] ? __ia32_sys_read+0xb0/0xb0 [ 2792.515703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.516319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.516919] __x64_sys_pipe+0x2f/0x40 [ 2792.517289] FAULT_INJECTION: forcing a failure. [ 2792.517289] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.517360] do_syscall_64+0x33/0x40 [ 2792.517385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.520733] RIP: 0033:0x7f659cb0cb19 [ 2792.521174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.523299] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2792.524200] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2792.525031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2792.525854] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2792.526679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2792.527511] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2792.528367] CPU: 0 PID: 14635 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2792.529830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2792.531604] Call Trace: [ 2792.532162] dump_stack+0x107/0x167 [ 2792.532946] should_fail.cold+0x5/0xa [ 2792.533756] ? create_object.isra.0+0x3a/0xa20 [ 2792.534720] should_failslab+0x5/0x20 [ 2792.535552] kmem_cache_alloc+0x5b/0x310 [ 2792.536428] create_object.isra.0+0x3a/0xa20 [ 2792.537354] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2792.538443] kmem_cache_alloc_trace+0x151/0x320 [ 2792.539424] ? lockdep_init_map_type+0x2c7/0x780 [ 2792.540484] legacy_init_fs_context+0x44/0xe0 [ 2792.541426] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2792.542472] alloc_fs_context+0x4fd/0x840 [ 2792.543387] path_mount+0xaa3/0x2120 [ 2792.544215] ? strncpy_from_user+0x9e/0x470 [ 2792.545129] ? finish_automount+0xa90/0xa90 [ 2792.546050] ? getname_flags.part.0+0x1dd/0x4f0 [ 2792.547045] ? _copy_from_user+0xfb/0x1b0 [ 2792.547967] __x64_sys_mount+0x282/0x300 [ 2792.548829] ? copy_mnt_ns+0xa00/0xa00 [ 2792.549658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2792.550770] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2792.551896] do_syscall_64+0x33/0x40 [ 2792.552687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2792.553763] RIP: 0033:0x7f3eebf31b19 [ 2792.554547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2792.558424] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2792.560050] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2792.561547] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2792.563059] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2792.564595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2792.566116] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:22:10 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:10 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 18) 03:22:25 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 03:22:25 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40180004, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:25 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 03:22:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x3) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:22:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 14) 03:22:25 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182302, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:25 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2807.009753] FAULT_INJECTION: forcing a failure. [ 2807.009753] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.012204] CPU: 0 PID: 14756 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2807.013678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.015464] Call Trace: [ 2807.016058] dump_stack+0x107/0x167 [ 2807.016857] should_fail.cold+0x5/0xa [ 2807.017686] ? create_object.isra.0+0x3a/0xa20 [ 2807.018680] should_failslab+0x5/0x20 [ 2807.019507] kmem_cache_alloc+0x5b/0x310 [ 2807.020408] create_object.isra.0+0x3a/0xa20 [ 2807.021357] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2807.022469] kmem_cache_alloc+0x159/0x310 [ 2807.023369] ? alloc_file+0x3cc/0x5a0 [ 2807.024214] __alloc_file+0x21/0x320 [ 2807.025021] alloc_empty_file+0x6d/0x170 [ 2807.025907] alloc_file+0x5e/0x5a0 [ 2807.026692] alloc_file_clone+0x22/0xc0 [ 2807.027560] create_pipe_files+0x499/0x8c0 [ 2807.028500] do_pipe2+0x96/0x1b0 [ 2807.029239] ? create_pipe_files+0x8c0/0x8c0 [ 2807.030191] ? ksys_write+0x1a9/0x260 [ 2807.031021] ? __ia32_sys_read+0xb0/0xb0 [ 2807.031928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.033068] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.034190] __x64_sys_pipe+0x2f/0x40 [ 2807.035011] do_syscall_64+0x33/0x40 [ 2807.035828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.036938] RIP: 0033:0x7f659cb0cb19 [ 2807.037736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.041725] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2807.043380] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 03:22:25 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2807.044924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2807.046576] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.048103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.049625] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2807.072568] FAULT_INJECTION: forcing a failure. [ 2807.072568] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.074272] CPU: 1 PID: 14760 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2807.075207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.076329] Call Trace: [ 2807.076692] dump_stack+0x107/0x167 [ 2807.077198] should_fail.cold+0x5/0xa [ 2807.077709] ? v9fs_mount+0x5a/0x8f0 [ 2807.078205] should_failslab+0x5/0x20 [ 2807.078719] kmem_cache_alloc_trace+0x55/0x320 [ 2807.079331] ? v9fs_write_inode+0x60/0x60 [ 2807.079908] v9fs_mount+0x5a/0x8f0 [ 2807.080385] ? v9fs_write_inode+0x60/0x60 [ 2807.080948] legacy_get_tree+0x105/0x220 [ 2807.081510] vfs_get_tree+0x8e/0x300 [ 2807.082010] path_mount+0x1429/0x2120 [ 2807.082530] ? strncpy_from_user+0x9e/0x470 [ 2807.083109] ? finish_automount+0xa90/0xa90 [ 2807.083718] ? getname_flags.part.0+0x1dd/0x4f0 [ 2807.084342] ? _copy_from_user+0xfb/0x1b0 [ 2807.084899] __x64_sys_mount+0x282/0x300 [ 2807.085438] ? copy_mnt_ns+0xa00/0xa00 [ 2807.085963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.086656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.087351] do_syscall_64+0x33/0x40 [ 2807.087872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.088560] RIP: 0033:0x7f3eebf31b19 [ 2807.089051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.091486] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2807.092535] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2807.093472] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2807.094419] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2807.095373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.096319] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2807.104672] FAULT_INJECTION: forcing a failure. [ 2807.104672] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.106244] CPU: 1 PID: 14761 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2807.107151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.108241] Call Trace: [ 2807.108595] dump_stack+0x107/0x167 [ 2807.109075] should_fail.cold+0x5/0xa [ 2807.109586] ? security_prepare_creds+0x112/0x190 [ 2807.110217] should_failslab+0x5/0x20 [ 2807.110710] __kmalloc+0x72/0x390 [ 2807.111175] security_prepare_creds+0x112/0x190 [ 2807.111802] prepare_creds+0x452/0x5e0 [ 2807.112315] copy_creds+0x72/0x580 [ 2807.112789] copy_process+0xfdc/0x7800 [ 2807.113305] ? mark_lock+0xf5/0x2df0 [ 2807.113806] ? lock_acquire+0x197/0x470 [ 2807.114329] ? find_held_lock+0x2c/0x110 [ 2807.114877] ? __cleanup_sighand+0xb0/0xb0 [ 2807.115442] ? _copy_from_user+0xfb/0x1b0 [ 2807.116008] kernel_clone+0xe7/0x980 [ 2807.116505] ? lock_acquire+0x197/0x470 [ 2807.117029] ? create_io_thread+0xf0/0xf0 [ 2807.117590] __do_sys_clone3+0x1e5/0x320 [ 2807.118123] ? __do_sys_clone+0x110/0x110 [ 2807.118666] ? lock_downgrade+0x6d0/0x6d0 [ 2807.119214] ? rcu_read_lock_any_held+0x75/0xa0 [ 2807.119839] ? vfs_write+0x354/0xb10 [ 2807.120326] ? ksys_write+0x1a9/0x260 [ 2807.120825] ? __ia32_sys_read+0xb0/0xb0 [ 2807.121363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.122049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.122726] ? trace_hardirqs_on+0x5b/0x180 [ 2807.123304] do_syscall_64+0x33/0x40 [ 2807.123792] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.124472] RIP: 0033:0x7fc070febb19 [ 2807.124966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.127362] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2807.128361] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2807.129298] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2807.130239] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.131177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2807.132123] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2807.137334] FAULT_INJECTION: forcing a failure. [ 2807.137334] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.138862] CPU: 1 PID: 14764 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 2807.139775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.140853] Call Trace: [ 2807.141193] dump_stack+0x107/0x167 [ 2807.141667] should_fail.cold+0x5/0xa [ 2807.142161] ? security_prepare_creds+0x112/0x190 [ 2807.142795] should_failslab+0x5/0x20 [ 2807.143282] __kmalloc+0x72/0x390 [ 2807.143735] security_prepare_creds+0x112/0x190 [ 2807.144342] prepare_creds+0x452/0x5e0 [ 2807.144840] copy_creds+0x72/0x580 [ 2807.145313] copy_process+0xfdc/0x7800 [ 2807.145831] ? mark_lock+0xf5/0x2df0 [ 2807.146314] ? lock_acquire+0x197/0x470 [ 2807.146836] ? find_held_lock+0x2c/0x110 [ 2807.147367] ? __cleanup_sighand+0xb0/0xb0 [ 2807.147932] ? _copy_from_user+0xfb/0x1b0 [ 2807.148472] kernel_clone+0xe7/0x980 [ 2807.148968] ? lock_acquire+0x197/0x470 [ 2807.149486] ? create_io_thread+0xf0/0xf0 [ 2807.150039] __do_sys_clone3+0x1e5/0x320 [ 2807.150577] ? __do_sys_clone+0x110/0x110 [ 2807.151106] ? lock_downgrade+0x6d0/0x6d0 [ 2807.151652] ? rcu_read_lock_any_held+0x75/0xa0 [ 2807.152253] ? vfs_write+0x354/0xb10 [ 2807.152745] ? ksys_write+0x1a9/0x260 [ 2807.153233] ? __ia32_sys_read+0xb0/0xb0 [ 2807.153758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.154441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.155100] ? trace_hardirqs_on+0x5b/0x180 [ 2807.155667] do_syscall_64+0x33/0x40 [ 2807.156152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.156813] RIP: 0033:0x7f818aa1cb19 [ 2807.157285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.159660] RSP: 002b:00007f8187f92188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2807.160634] RAX: ffffffffffffffda RBX: 00007f818ab2ff60 RCX: 00007f818aa1cb19 [ 2807.161556] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2807.162468] RBP: 00007f8187f921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.163381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2807.164307] R13: 00007fffc8e81fef R14: 00007f8187f92300 R15: 0000000000022000 03:22:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 19) 03:22:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 15) [ 2807.213575] FAULT_INJECTION: forcing a failure. [ 2807.213575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2807.215120] CPU: 1 PID: 14769 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2807.215984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.217012] Call Trace: [ 2807.217343] dump_stack+0x107/0x167 [ 2807.217797] should_fail.cold+0x5/0xa [ 2807.218273] _copy_to_user+0x2e/0x180 [ 2807.218761] do_pipe2+0x12c/0x1b0 [ 2807.219196] ? create_pipe_files+0x8c0/0x8c0 [ 2807.219757] ? ksys_write+0x1a9/0x260 [ 2807.220229] ? __ia32_sys_read+0xb0/0xb0 [ 2807.220749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.221408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.222056] __x64_sys_pipe+0x2f/0x40 [ 2807.222531] do_syscall_64+0x33/0x40 [ 2807.222995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.223667] RIP: 0033:0x7f659cb0cb19 [ 2807.224137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.226418] RSP: 002b:00007f659a082188 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 2807.227361] RAX: ffffffffffffffda RBX: 00007f659cc1ff60 RCX: 00007f659cb0cb19 [ 2807.228249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2807.229139] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.230026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.230909] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 [ 2807.273085] FAULT_INJECTION: forcing a failure. [ 2807.273085] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.275647] CPU: 0 PID: 14809 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2807.277121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.278885] Call Trace: [ 2807.279457] dump_stack+0x107/0x167 [ 2807.280249] should_fail.cold+0x5/0xa [ 2807.281080] ? create_object.isra.0+0x3a/0xa20 [ 2807.282062] should_failslab+0x5/0x20 [ 2807.282874] kmem_cache_alloc+0x5b/0x310 [ 2807.283753] ? cred_has_capability.isra.0+0x152/0x2b0 [ 2807.284865] create_object.isra.0+0x3a/0xa20 [ 2807.285806] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2807.286899] kmem_cache_alloc_trace+0x151/0x320 [ 2807.287911] ? v9fs_write_inode+0x60/0x60 [ 2807.288792] v9fs_mount+0x5a/0x8f0 [ 2807.289560] ? v9fs_write_inode+0x60/0x60 [ 2807.290448] legacy_get_tree+0x105/0x220 [ 2807.291329] vfs_get_tree+0x8e/0x300 [ 2807.292130] path_mount+0x1429/0x2120 [ 2807.292966] ? strncpy_from_user+0x9e/0x470 [ 2807.293888] ? finish_automount+0xa90/0xa90 [ 2807.294821] ? getname_flags.part.0+0x1dd/0x4f0 [ 2807.295824] ? _copy_from_user+0xfb/0x1b0 [ 2807.296726] __x64_sys_mount+0x282/0x300 [ 2807.297591] ? copy_mnt_ns+0xa00/0xa00 [ 2807.298433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.299558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.300674] do_syscall_64+0x33/0x40 [ 2807.301473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.302568] RIP: 0033:0x7f3eebf31b19 [ 2807.303366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.307288] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2807.308909] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2807.310421] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2807.311938] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2807.313442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.314947] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:22:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) (fail_nth: 20) 03:22:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x4) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 2807.348628] FAULT_INJECTION: forcing a failure. [ 2807.348628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2807.350150] CPU: 1 PID: 14875 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 2807.350969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.351963] Call Trace: [ 2807.352288] dump_stack+0x107/0x167 [ 2807.352730] should_fail.cold+0x5/0xa [ 2807.353205] _copy_to_user+0x2e/0x180 [ 2807.353671] simple_read_from_buffer+0xcc/0x160 [ 2807.354246] proc_fail_nth_read+0x198/0x230 [ 2807.354776] ? proc_sessionid_read+0x230/0x230 [ 2807.355336] ? security_file_permission+0xb1/0xe0 [ 2807.355937] ? proc_sessionid_read+0x230/0x230 [ 2807.356487] vfs_read+0x228/0x620 [ 2807.356916] ksys_read+0x12d/0x260 [ 2807.357345] ? vfs_write+0xb10/0xb10 [ 2807.357808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.358449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.359077] do_syscall_64+0x33/0x40 [ 2807.359537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2807.360160] RIP: 0033:0x7f659cabf69c [ 2807.360618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2807.362820] RSP: 002b:00007f659a082170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2807.363747] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f659cabf69c [ 2807.364597] RDX: 000000000000000f RSI: 00007f659a0821e0 RDI: 0000000000000004 [ 2807.365434] RBP: 00007f659a0821d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.366269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.367103] R13: 00007ffca22bb52f R14: 00007f659a082300 R15: 0000000000022000 03:22:25 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) 03:22:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r0, 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x7, 0x81, 0x38, 0x38, 0x0, 0xcc4, 0x4000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x7fffffff}, 0x1094, 0x2, 0x9, 0x3, 0x8, 0x2, 0x5, 0x0, 0x80000001, 0x0, 0x5}, 0x0, 0xd, r0, 0x8) 03:22:25 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec7", 0x4c, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:38 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) 03:22:38 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x5) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:22:38 executing program 1: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x4a, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044844) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0xa9, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x1540}, 0x4340, 0x4, 0x5, 0x1, 0x7, 0x8, 0x7, 0x0, 0x80000001, 0x0, 0x2b}, r1, 0x9, r0, 0x0) 03:22:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) 03:22:38 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182303, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 16) 03:22:38 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182302, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:38 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec7", 0x4c, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2820.180412] FAULT_INJECTION: forcing a failure. [ 2820.180412] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.183070] CPU: 1 PID: 15000 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2820.184559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2820.186319] Call Trace: [ 2820.186885] dump_stack+0x107/0x167 [ 2820.187674] should_fail.cold+0x5/0xa [ 2820.188491] ? create_object.isra.0+0x3a/0xa20 [ 2820.189464] should_failslab+0x5/0x20 [ 2820.190271] kmem_cache_alloc+0x5b/0x310 [ 2820.191138] create_object.isra.0+0x3a/0xa20 [ 2820.192071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 03:22:38 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec7", 0x4c, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2820.193150] __kmalloc+0x16e/0x390 [ 2820.194030] security_prepare_creds+0x112/0x190 [ 2820.195007] prepare_creds+0x452/0x5e0 [ 2820.195833] copy_creds+0x72/0x580 [ 2820.196582] copy_process+0xfdc/0x7800 [ 2820.197403] ? mark_lock+0xf5/0x2df0 [ 2820.198191] ? lock_acquire+0x197/0x470 [ 2820.199031] ? find_held_lock+0x2c/0x110 [ 2820.199898] ? __cleanup_sighand+0xb0/0xb0 [ 2820.200793] ? _copy_from_user+0xfb/0x1b0 [ 2820.201673] kernel_clone+0xe7/0x980 [ 2820.202460] ? lock_acquire+0x197/0x470 [ 2820.203296] ? create_io_thread+0xf0/0xf0 [ 2820.204196] __do_sys_clone3+0x1e5/0x320 [ 2820.205043] ? __do_sys_clone+0x110/0x110 [ 2820.205912] ? lock_downgrade+0x6d0/0x6d0 [ 2820.206800] ? rcu_read_lock_any_held+0x75/0xa0 [ 2820.207790] ? vfs_write+0x354/0xb10 [ 2820.208579] ? ksys_write+0x1a9/0x260 [ 2820.209382] ? __ia32_sys_read+0xb0/0xb0 [ 2820.210238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2820.211340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2820.212427] ? trace_hardirqs_on+0x5b/0x180 [ 2820.213342] do_syscall_64+0x33/0x40 [ 2820.214119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2820.215201] RIP: 0033:0x7fc070febb19 [ 2820.215993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2820.219876] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2820.221473] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2820.222963] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2820.224488] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2820.225985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2820.227502] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2820.235292] FAULT_INJECTION: forcing a failure. [ 2820.235292] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.237317] FAULT_INJECTION: forcing a failure. [ 2820.237317] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.237684] CPU: 1 PID: 15009 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2820.240467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2820.242229] Call Trace: [ 2820.242790] dump_stack+0x107/0x167 [ 2820.243567] should_fail.cold+0x5/0xa [ 2820.244398] should_failslab+0x5/0x20 [ 2820.245212] __kmalloc_track_caller+0x79/0x370 [ 2820.246175] ? v9fs_session_init+0xa7/0x1680 [ 2820.247102] ? kernel_text_address+0xf2/0x120 [ 2820.248082] kstrdup+0x36/0x70 [ 2820.248773] v9fs_session_init+0xa7/0x1680 [ 2820.249678] ? lock_release+0x680/0x680 [ 2820.250525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2820.251641] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2820.252789] ? trace_hardirqs_on+0x5b/0x180 [ 2820.253713] ? v9fs_show_options+0x690/0x690 [ 2820.254672] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2820.255772] ? kasan_unpoison_shadow+0x33/0x50 [ 2820.256739] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2820.257819] v9fs_mount+0x79/0x8f0 [ 2820.258590] ? v9fs_write_inode+0x60/0x60 [ 2820.259471] legacy_get_tree+0x105/0x220 [ 2820.260352] vfs_get_tree+0x8e/0x300 [ 2820.261142] path_mount+0x1429/0x2120 [ 2820.261965] ? strncpy_from_user+0x9e/0x470 [ 2820.262880] ? finish_automount+0xa90/0xa90 [ 2820.263807] ? getname_flags.part.0+0x1dd/0x4f0 [ 2820.264792] ? _copy_from_user+0xfb/0x1b0 [ 2820.265690] __x64_sys_mount+0x282/0x300 [ 2820.266560] ? copy_mnt_ns+0xa00/0xa00 [ 2820.267404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2820.268515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2820.269617] do_syscall_64+0x33/0x40 [ 2820.270403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2820.271478] RIP: 0033:0x7f3eebf31b19 [ 2820.272268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2820.276145] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2820.277758] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2820.279273] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2820.280785] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2820.282308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2820.283818] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2820.285373] CPU: 0 PID: 14999 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 2820.286196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2820.287204] Call Trace: [ 2820.287531] dump_stack+0x107/0x167 [ 2820.287992] should_fail.cold+0x5/0xa [ 2820.288462] ? create_object.isra.0+0x3a/0xa20 [ 2820.289015] should_failslab+0x5/0x20 [ 2820.289476] kmem_cache_alloc+0x5b/0x310 [ 2820.289961] create_object.isra.0+0x3a/0xa20 [ 2820.290481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2820.291091] __kmalloc+0x16e/0x390 [ 2820.291524] security_prepare_creds+0x112/0x190 [ 2820.292101] prepare_creds+0x452/0x5e0 [ 2820.292564] copy_creds+0x72/0x580 [ 2820.292993] copy_process+0xfdc/0x7800 [ 2820.293468] ? mark_lock+0xf5/0x2df0 [ 2820.293917] ? lock_acquire+0x197/0x470 [ 2820.294394] ? find_held_lock+0x2c/0x110 [ 2820.294887] ? __cleanup_sighand+0xb0/0xb0 [ 2820.295436] ? _copy_from_user+0xfb/0x1b0 [ 2820.295952] kernel_clone+0xe7/0x980 [ 2820.296399] ? lock_acquire+0x197/0x470 [ 2820.296880] ? create_io_thread+0xf0/0xf0 [ 2820.297386] __do_sys_clone3+0x1e5/0x320 [ 2820.297867] ? __do_sys_clone+0x110/0x110 [ 2820.298354] ? lock_downgrade+0x6d0/0x6d0 [ 2820.298854] ? rcu_read_lock_any_held+0x75/0xa0 [ 2820.299409] ? vfs_write+0x354/0xb10 [ 2820.299867] ? ksys_write+0x1a9/0x260 [ 2820.300318] ? __ia32_sys_read+0xb0/0xb0 [ 2820.300811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2820.301436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2820.302043] ? trace_hardirqs_on+0x5b/0x180 [ 2820.302570] do_syscall_64+0x33/0x40 [ 2820.303013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2820.303622] RIP: 0033:0x7f818aa1cb19 [ 2820.304076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2820.306258] RSP: 002b:00007f8187f92188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2820.307164] RAX: ffffffffffffffda RBX: 00007f818ab2ff60 RCX: 00007f818aa1cb19 [ 2820.308038] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2820.308880] RBP: 00007f8187f921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2820.309727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2820.310577] R13: 00007fffc8e81fef R14: 00007f8187f92300 R15: 0000000000022000 03:22:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 17) 03:22:38 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a7812", 0x72, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) [ 2820.401083] FAULT_INJECTION: forcing a failure. [ 2820.401083] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.403625] CPU: 1 PID: 15019 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2820.405128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2820.406895] Call Trace: [ 2820.407470] dump_stack+0x107/0x167 [ 2820.408280] should_fail.cold+0x5/0xa [ 2820.409100] ? create_object.isra.0+0x3a/0xa20 [ 2820.410083] should_failslab+0x5/0x20 [ 2820.410897] kmem_cache_alloc+0x5b/0x310 [ 2820.411777] ? cred_has_capability.isra.0+0x152/0x2b0 [ 2820.412891] create_object.isra.0+0x3a/0xa20 [ 2820.413826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2820.414920] kmem_cache_alloc_trace+0x151/0x320 [ 2820.415933] ? v9fs_write_inode+0x60/0x60 [ 2820.416820] v9fs_mount+0x5a/0x8f0 [ 2820.417595] ? v9fs_write_inode+0x60/0x60 [ 2820.418485] legacy_get_tree+0x105/0x220 [ 2820.419362] vfs_get_tree+0x8e/0x300 [ 2820.420167] path_mount+0x1429/0x2120 [ 2820.420992] ? strncpy_from_user+0x9e/0x470 [ 2820.421917] ? finish_automount+0xa90/0xa90 [ 2820.422842] ? getname_flags.part.0+0x1dd/0x4f0 [ 2820.423849] ? _copy_from_user+0xfb/0x1b0 [ 2820.424752] __x64_sys_mount+0x282/0x300 [ 2820.425623] ? copy_mnt_ns+0xa00/0xa00 [ 2820.426464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2820.427581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2820.428700] do_syscall_64+0x33/0x40 [ 2820.429502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2820.430600] RIP: 0033:0x7f3eebf31b19 [ 2820.431396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2820.435318] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2820.436946] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2820.438479] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2820.440013] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2820.441537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2820.443065] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:22:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:51 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a7812", 0x72, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:51 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 03:22:51 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182304, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 18) 03:22:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40180004, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:51 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182303, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x6) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:22:51 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = creat(&(0x7f0000000340)='./file0\x00', 0xb0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x8010, r3, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x6000, @fd_index, 0x6, 0x1ff, 0x5, 0x10, 0x1, {0x1, r7}}, 0x7) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x4010, r5, 0x89194000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) copy_file_range(r3, &(0x7f0000000140)=0x3, r0, 0x0, 0x200, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000c8}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="a9d91a01fff0d9", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c009900070000001200000018007a8008000400090000000c0003007a3ba5b4a9860fff34007a80140002007dd4874752c76a3c2775f44d33f86af41c0002009f268d8a5fb32a2f55dcad7db0e3dd6bcfa5672e6d2feac7"], 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x50) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x52}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x412000, 0x80) pipe(0x0) [ 2833.269768] FAULT_INJECTION: forcing a failure. [ 2833.269768] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.269979] FAULT_INJECTION: forcing a failure. [ 2833.269979] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.272318] CPU: 0 PID: 15145 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2833.275063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.276852] Call Trace: [ 2833.277418] dump_stack+0x107/0x167 [ 2833.278194] should_fail.cold+0x5/0xa [ 2833.279004] ? __delayacct_tsk_init+0x1b/0x80 [ 2833.279997] should_failslab+0x5/0x20 [ 2833.280811] kmem_cache_alloc+0x5b/0x310 [ 2833.281672] ? prepare_creds+0x466/0x5e0 [ 2833.282538] __delayacct_tsk_init+0x1b/0x80 [ 2833.283457] copy_process+0x3319/0x7800 [ 2833.284336] ? mark_lock+0xf5/0x2df0 [ 2833.285135] ? lock_acquire+0x197/0x470 [ 2833.285976] ? find_held_lock+0x2c/0x110 [ 2833.286856] ? __cleanup_sighand+0xb0/0xb0 [ 2833.287794] ? _copy_from_user+0xfb/0x1b0 [ 2833.288690] kernel_clone+0xe7/0x980 [ 2833.289481] ? lock_acquire+0x197/0x470 [ 2833.290322] ? create_io_thread+0xf0/0xf0 [ 2833.291227] __do_sys_clone3+0x1e5/0x320 [ 2833.292112] ? __do_sys_clone+0x110/0x110 [ 2833.292990] ? lock_downgrade+0x6d0/0x6d0 [ 2833.293887] ? rcu_read_lock_any_held+0x75/0xa0 [ 2833.294882] ? vfs_write+0x354/0xb10 [ 2833.295683] ? ksys_write+0x1a9/0x260 [ 2833.296522] ? __ia32_sys_read+0xb0/0xb0 [ 2833.297389] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2833.298504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.299598] ? trace_hardirqs_on+0x5b/0x180 [ 2833.300544] do_syscall_64+0x33/0x40 [ 2833.301336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2833.302428] RIP: 0033:0x7fc070febb19 [ 2833.303216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.307153] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2833.308796] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2833.310312] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2833.311855] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2833.313371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2833.314883] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2833.316445] CPU: 1 PID: 15153 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2833.317270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.318238] Call Trace: [ 2833.318557] dump_stack+0x107/0x167 [ 2833.318997] should_fail.cold+0x5/0xa [ 2833.319459] should_failslab+0x5/0x20 [ 2833.319914] __kmalloc_track_caller+0x79/0x370 [ 2833.320454] ? v9fs_session_init+0xe9/0x1680 [ 2833.320977] ? kernel_text_address+0xf2/0x120 [ 2833.321518] kstrdup+0x36/0x70 [ 2833.321901] v9fs_session_init+0xe9/0x1680 [ 2833.322407] ? lock_release+0x680/0x680 [ 2833.322884] ? find_held_lock+0x2c/0x110 [ 2833.323374] ? kmem_cache_alloc_trace+0x151/0x320 [ 2833.323943] ? v9fs_show_options+0x690/0x690 [ 2833.324475] ? trace_hardirqs_on+0x5b/0x180 [ 2833.324987] ? kasan_unpoison_shadow+0x33/0x50 [ 2833.325531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2833.326129] v9fs_mount+0x79/0x8f0 [ 2833.326555] ? v9fs_write_inode+0x60/0x60 [ 2833.327049] legacy_get_tree+0x105/0x220 [ 2833.327536] vfs_get_tree+0x8e/0x300 [ 2833.327986] path_mount+0x1429/0x2120 [ 2833.328449] ? strncpy_from_user+0x9e/0x470 [ 2833.328958] ? finish_automount+0xa90/0xa90 [ 2833.329468] ? getname_flags.part.0+0x1dd/0x4f0 [ 2833.330018] ? _copy_from_user+0xfb/0x1b0 [ 2833.330519] __x64_sys_mount+0x282/0x300 [ 2833.330992] ? copy_mnt_ns+0xa00/0xa00 [ 2833.331454] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2833.332070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.332679] do_syscall_64+0x33/0x40 [ 2833.333119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2833.333719] RIP: 0033:0x7f3eebf31b19 [ 2833.334172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.336313] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2833.337205] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2833.338036] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2833.338871] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2833.339708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2833.340544] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:22:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) 03:22:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 19) [ 2833.420037] FAULT_INJECTION: forcing a failure. [ 2833.420037] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.422543] CPU: 0 PID: 15159 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2833.424076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.425844] Call Trace: [ 2833.426416] dump_stack+0x107/0x167 [ 2833.427207] should_fail.cold+0x5/0xa [ 2833.428056] ? create_object.isra.0+0x3a/0xa20 [ 2833.429038] should_failslab+0x5/0x20 [ 2833.429857] kmem_cache_alloc+0x5b/0x310 [ 2833.430743] create_object.isra.0+0x3a/0xa20 [ 2833.431684] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2833.432811] __kmalloc_track_caller+0x177/0x370 [ 2833.433806] ? v9fs_session_init+0xe9/0x1680 [ 2833.434750] ? kernel_text_address+0xf2/0x120 [ 2833.435739] kstrdup+0x36/0x70 [ 2833.436457] v9fs_session_init+0xe9/0x1680 [ 2833.437373] ? lock_release+0x680/0x680 [ 2833.438229] ? find_held_lock+0x2c/0x110 [ 2833.439119] ? kmem_cache_alloc_trace+0x151/0x320 [ 2833.440177] ? v9fs_show_options+0x690/0x690 [ 2833.441147] ? trace_hardirqs_on+0x5b/0x180 [ 2833.442075] ? kasan_unpoison_shadow+0x33/0x50 [ 2833.443051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2833.444167] v9fs_mount+0x79/0x8f0 [ 2833.444935] ? v9fs_write_inode+0x60/0x60 [ 2833.445828] legacy_get_tree+0x105/0x220 [ 2833.446708] vfs_get_tree+0x8e/0x300 [ 2833.447510] path_mount+0x1429/0x2120 [ 2833.448367] ? strncpy_from_user+0x9e/0x470 [ 2833.449293] ? finish_automount+0xa90/0xa90 [ 2833.450221] ? getname_flags.part.0+0x1dd/0x4f0 [ 2833.451219] ? _copy_from_user+0xfb/0x1b0 [ 2833.452150] __x64_sys_mount+0x282/0x300 [ 2833.453023] ? copy_mnt_ns+0xa00/0xa00 [ 2833.453869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2833.454993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.456133] do_syscall_64+0x33/0x40 [ 2833.456937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2833.458037] RIP: 0033:0x7f3eebf31b19 [ 2833.458840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.462792] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2833.464452] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2833.465977] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2833.467502] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2833.469045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2833.470570] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:22:51 executing program 1: clone3(&(0x7f0000000680)={0x20002000, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000400)=0x0, &(0x7f0000000480), {0x2b}, &(0x7f00000004c0)=""/197, 0xc5, &(0x7f00000005c0)=""/114, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)=0x0) setpgid(r1, r2) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00\x00'], 0x1d4}, 0x1, 0x0, 0x0, 0x8080}, 0x10) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=unix,', {[{@nodevmap}], [{@audit}, {@uid_eq={'uid', 0x3d, r3}}, {@measure}, {@hash}, {@permit_directio}]}}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x40000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b00), 0xd}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) pipe(0x0) syz_io_uring_setup(0x27ea, &(0x7f0000000180)={0x0, 0x24df, 0x2c, 0x0, 0x255}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x4007, @fd_index=0x1, 0x6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f0000000280)=""/113, 0x71}], 0x2, 0xc, 0x0, {0x0, r5}}, 0xfa89) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000a40)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r6, 0x0, 0x4) perf_event_open(&(0x7f0000000b40)={0x0, 0x80, 0x6, 0x8, 0x40, 0x8, 0x0, 0x5, 0x100ac, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000ac0), 0x1}, 0x22, 0x5f, 0x200, 0x2, 0x7, 0x7fffffff, 0x1, 0x0, 0x7fff, 0x0, 0xf2}, r2, 0x9, r6, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x210}, 0x1, {0x0, r5}}, 0x8) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000740)) 03:22:51 executing program 1: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x24000090) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfa, 0x3e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x801) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x16b, 0x58}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}, @NL80211_ATTR_FRAME_MATCH={0xf3, 0x5b, "4e775422106bb09877d640fd9f5da1c59ffbdc846ea8a6c4dcb1ca7e4159d9fb09a6f067d75067dbfd12d42b6b0858cc08b45336b5534e66d157536bda064838fb5155107e41f2f7d0e9c0cb499c936b4518681f39710f6bd95b04acfce8249a35a0db16013ba5ecc20299d76796dc73a2d641e18ae71b421e9f31a141add5f1fd564f5b69c03807b05888d425e786c55a7760a337574b11bd66dd1f39bab57cc1b9be22171fea3de050e0f8215a656663521525bfca3e3e1b72b3579104f79fc912626a0bb9d2bb64572aedbecd556c0cbdbc12e4acfeab2976e1b549187b71d3406cc70f463fc1c225858c8a5084"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4b9}, @NL80211_ATTR_FRAME_MATCH={0xac, 0x5b, "6c24a6844fd016f594b52b037ac0805472aca4a2ee4ce2220e20dd8299cb359ee260cc238cec557d48b579b6941dc2842786640aac442dcad4b59746396773d566dc8b82be69eef7bd069ae123b72a252420e58ed30c1a2acce7548bcc788ce90079b4dacadcc85125d2e2ffbcd7fea630f105b53283f32e832db75c99150deea209c9265965b05fb49eda51cc7d0707199ce562c127e5a36b397c4af66bd4d78a3701a6aafabceb"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x90}, 0x4008) 03:22:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x7) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:22:51 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a7812", 0x72, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:22:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ftruncate(r0, 0x6) 03:22:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 20) [ 2833.678492] FAULT_INJECTION: forcing a failure. [ 2833.678492] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.679859] CPU: 1 PID: 15277 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2833.680666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.681620] Call Trace: [ 2833.681931] dump_stack+0x107/0x167 [ 2833.682360] should_fail.cold+0x5/0xa [ 2833.682813] ? p9_client_create+0xaf/0x1230 [ 2833.683315] should_failslab+0x5/0x20 [ 2833.683771] kmem_cache_alloc_trace+0x55/0x320 [ 2833.684300] ? find_held_lock+0x2c/0x110 [ 2833.684780] p9_client_create+0xaf/0x1230 [ 2833.685259] ? lock_downgrade+0x6d0/0x6d0 [ 2833.685744] ? p9_client_flush+0x430/0x430 [ 2833.686237] ? trace_hardirqs_on+0x5b/0x180 [ 2833.686740] ? lockdep_init_map_type+0x2c7/0x780 [ 2833.687291] ? __raw_spin_lock_init+0x36/0x110 [ 2833.687832] v9fs_session_init+0x1dd/0x1680 [ 2833.688329] ? lock_release+0x680/0x680 [ 2833.688794] ? kmem_cache_alloc_trace+0x151/0x320 [ 2833.689346] ? v9fs_show_options+0x690/0x690 [ 2833.689862] ? trace_hardirqs_on+0x5b/0x180 [ 2833.690360] ? kasan_unpoison_shadow+0x33/0x50 [ 2833.690883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2833.691471] v9fs_mount+0x79/0x8f0 [ 2833.691891] ? v9fs_write_inode+0x60/0x60 [ 2833.692372] legacy_get_tree+0x105/0x220 [ 2833.692848] vfs_get_tree+0x8e/0x300 [ 2833.693282] path_mount+0x1429/0x2120 [ 2833.693729] ? strncpy_from_user+0x9e/0x470 [ 2833.694228] ? finish_automount+0xa90/0xa90 [ 2833.694727] ? getname_flags.part.0+0x1dd/0x4f0 [ 2833.695265] ? _copy_from_user+0xfb/0x1b0 [ 2833.695768] __x64_sys_mount+0x282/0x300 [ 2833.696236] ? copy_mnt_ns+0xa00/0xa00 [ 2833.696692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2833.697297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.697894] do_syscall_64+0x33/0x40 [ 2833.698325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2833.698914] RIP: 0033:0x7f3eebf31b19 [ 2833.699340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.701446] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2833.702318] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2833.703129] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2833.703951] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2833.704770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2833.705586] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:22:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 21) [ 2833.746205] FAULT_INJECTION: forcing a failure. [ 2833.746205] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.747551] CPU: 1 PID: 15282 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2833.748352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.749295] Call Trace: [ 2833.749606] dump_stack+0x107/0x167 [ 2833.750029] should_fail.cold+0x5/0xa [ 2833.750474] ? p9_client_create+0xaf/0x1230 [ 2833.750974] should_failslab+0x5/0x20 [ 2833.751411] kmem_cache_alloc_trace+0x55/0x320 [ 2833.751941] ? find_held_lock+0x2c/0x110 [ 2833.752415] p9_client_create+0xaf/0x1230 [ 2833.752891] ? lock_downgrade+0x6d0/0x6d0 [ 2833.753375] ? p9_client_flush+0x430/0x430 [ 2833.753862] ? trace_hardirqs_on+0x5b/0x180 [ 2833.754365] ? lockdep_init_map_type+0x2c7/0x780 [ 2833.754909] ? __raw_spin_lock_init+0x36/0x110 [ 2833.755443] v9fs_session_init+0x1dd/0x1680 [ 2833.755944] ? lock_release+0x680/0x680 [ 2833.756416] ? kmem_cache_alloc_trace+0x151/0x320 [ 2833.756970] ? v9fs_show_options+0x690/0x690 [ 2833.757493] ? trace_hardirqs_on+0x5b/0x180 [ 2833.757988] ? kasan_unpoison_shadow+0x33/0x50 [ 2833.758516] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2833.759099] v9fs_mount+0x79/0x8f0 [ 2833.759512] ? v9fs_write_inode+0x60/0x60 [ 2833.759997] legacy_get_tree+0x105/0x220 [ 2833.760464] vfs_get_tree+0x8e/0x300 [ 2833.760891] path_mount+0x1429/0x2120 [ 2833.761341] ? strncpy_from_user+0x9e/0x470 [ 2833.761839] ? finish_automount+0xa90/0xa90 [ 2833.762335] ? getname_flags.part.0+0x1dd/0x4f0 [ 2833.762869] ? _copy_from_user+0xfb/0x1b0 [ 2833.763358] __x64_sys_mount+0x282/0x300 [ 2833.763828] ? copy_mnt_ns+0xa00/0xa00 [ 2833.764280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2833.764882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.765481] do_syscall_64+0x33/0x40 [ 2833.765911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2833.766498] RIP: 0033:0x7f3eebf31b19 [ 2833.766929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.769040] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2833.769916] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2833.770732] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2833.771555] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2833.772378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2833.773193] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:23:04 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) 03:23:04 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r0, 0x0, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) pipe(&(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) 03:23:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x8) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:23:04 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182304, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 22) 03:23:04 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df2", 0x85, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182305, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:04 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182302, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2846.330499] FAULT_INJECTION: forcing a failure. [ 2846.330499] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.332975] CPU: 1 PID: 15402 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2846.334442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2846.336218] Call Trace: [ 2846.336804] dump_stack+0x107/0x167 [ 2846.337591] should_fail.cold+0x5/0xa [ 2846.338423] should_failslab+0x5/0x20 [ 2846.339244] __kmalloc_track_caller+0x79/0x370 [ 2846.340228] ? p9_client_create+0x41d/0x1230 [ 2846.341191] kstrdup+0x36/0x70 [ 2846.341881] p9_client_create+0x41d/0x1230 [ 2846.342792] ? lock_downgrade+0x6d0/0x6d0 [ 2846.343693] ? p9_client_flush+0x430/0x430 [ 2846.344635] ? trace_hardirqs_on+0x5b/0x180 [ 2846.345567] ? lockdep_init_map_type+0x2c7/0x780 [ 2846.346588] ? __raw_spin_lock_init+0x36/0x110 [ 2846.347587] v9fs_session_init+0x1dd/0x1680 [ 2846.348522] ? lock_release+0x680/0x680 [ 2846.349395] ? kmem_cache_alloc_trace+0x151/0x320 [ 2846.350438] ? v9fs_show_options+0x690/0x690 [ 2846.351420] ? trace_hardirqs_on+0x5b/0x180 [ 2846.352357] ? kasan_unpoison_shadow+0x33/0x50 [ 2846.353337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2846.354422] v9fs_mount+0x79/0x8f0 [ 2846.355179] ? v9fs_write_inode+0x60/0x60 [ 2846.356081] legacy_get_tree+0x105/0x220 [ 2846.356950] vfs_get_tree+0x8e/0x300 [ 2846.357735] path_mount+0x1429/0x2120 [ 2846.358560] ? strncpy_from_user+0x9e/0x470 [ 2846.359476] ? finish_automount+0xa90/0xa90 [ 2846.360407] ? getname_flags.part.0+0x1dd/0x4f0 [ 2846.361391] ? _copy_from_user+0xfb/0x1b0 [ 2846.362291] __x64_sys_mount+0x282/0x300 [ 2846.363152] ? copy_mnt_ns+0xa00/0xa00 [ 2846.364008] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2846.365112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2846.366210] do_syscall_64+0x33/0x40 [ 2846.367008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2846.367024] RIP: 0033:0x7f3eebf31b19 03:23:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4c000, 0x0) [ 2846.367044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.367056] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2846.367080] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2846.367092] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2846.367104] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2846.367116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2846.367129] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2846.375463] FAULT_INJECTION: forcing a failure. [ 2846.375463] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.388654] CPU: 1 PID: 15399 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2846.390110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2846.391868] Call Trace: [ 2846.392428] dump_stack+0x107/0x167 [ 2846.393199] should_fail.cold+0x5/0xa [ 2846.394002] ? create_object.isra.0+0x3a/0xa20 [ 2846.394960] should_failslab+0x5/0x20 [ 2846.395756] kmem_cache_alloc+0x5b/0x310 [ 2846.396626] create_object.isra.0+0x3a/0xa20 [ 2846.397541] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2846.398613] kmem_cache_alloc+0x159/0x310 [ 2846.399477] ? prepare_creds+0x466/0x5e0 [ 2846.400343] __delayacct_tsk_init+0x1b/0x80 [ 2846.401248] copy_process+0x3319/0x7800 [ 2846.402084] ? mark_lock+0xf5/0x2df0 [ 2846.402879] ? lock_acquire+0x197/0x470 [ 2846.403715] ? find_held_lock+0x2c/0x110 [ 2846.404599] ? __cleanup_sighand+0xb0/0xb0 [ 2846.405504] ? _copy_from_user+0xfb/0x1b0 [ 2846.406378] kernel_clone+0xe7/0x980 [ 2846.407168] ? lock_acquire+0x197/0x470 [ 2846.408010] ? create_io_thread+0xf0/0xf0 [ 2846.408904] __do_sys_clone3+0x1e5/0x320 [ 2846.409747] ? __do_sys_clone+0x110/0x110 [ 2846.410613] ? lock_downgrade+0x6d0/0x6d0 [ 2846.411498] ? rcu_read_lock_any_held+0x75/0xa0 03:23:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x6, 0x99, 0x5, 0x4, 0x0, 0xfffffffffffffff9, 0x44000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x24, 0xfffffffffffffffd, 0xfff, 0x8, 0x1, 0xfffffffb, 0x8011, 0x0, 0xc22, 0x0, 0x6}, 0xffffffffffffffff, 0xc, r0, 0x9) r1 = getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0xfa, 0xa1, 0x0, 0x6, 0x2000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x6, 0x9}, 0x4000, 0xfffffffffffff001, 0x81, 0x0, 0x3, 0x1, 0x20, 0x0, 0x1, 0x0, 0x9}, r1, 0x3, r0, 0x9) pipe(0x0) [ 2846.412480] ? vfs_write+0x354/0xb10 [ 2846.413397] ? ksys_write+0x1a9/0x260 [ 2846.414210] ? __ia32_sys_read+0xb0/0xb0 [ 2846.415080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2846.416185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2846.417254] ? trace_hardirqs_on+0x5b/0x180 [ 2846.418159] do_syscall_64+0x33/0x40 [ 2846.418932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2846.420027] RIP: 0033:0x7fc070febb19 [ 2846.420804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.424647] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2846.426235] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2846.427722] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2846.429215] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2846.430714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2846.432218] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:23:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x9) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:23:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 23) 03:23:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x90, 0xd5, 0x4, 0x3, 0x0, 0x9, 0x800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe2, 0x1, @perf_config_ext={0x5, 0x1}, 0x1, 0x61ab6068, 0x2, 0x0, 0x0, 0x80, 0x7, 0x0, 0x5, 0x0, 0xf447}, r1, 0x3, r0, 0x1) [ 2846.521477] FAULT_INJECTION: forcing a failure. [ 2846.521477] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.522882] CPU: 0 PID: 15519 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2846.523678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2846.524675] Call Trace: [ 2846.524990] dump_stack+0x107/0x167 [ 2846.525425] should_fail.cold+0x5/0xa [ 2846.525882] ? create_object.isra.0+0x3a/0xa20 [ 2846.526418] should_failslab+0x5/0x20 [ 2846.526870] kmem_cache_alloc+0x5b/0x310 [ 2846.527348] ? lock_downgrade+0x6d0/0x6d0 [ 2846.527870] create_object.isra.0+0x3a/0xa20 [ 2846.528379] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2846.528981] __kmalloc_track_caller+0x177/0x370 [ 2846.529532] ? p9_client_create+0x41d/0x1230 [ 2846.530066] kstrdup+0x36/0x70 [ 2846.530447] p9_client_create+0x41d/0x1230 [ 2846.530949] ? lock_downgrade+0x6d0/0x6d0 [ 2846.531444] ? p9_client_flush+0x430/0x430 [ 2846.531962] ? trace_hardirqs_on+0x5b/0x180 [ 2846.532475] ? lockdep_init_map_type+0x2c7/0x780 [ 2846.533030] ? __raw_spin_lock_init+0x36/0x110 [ 2846.533583] v9fs_session_init+0x1dd/0x1680 [ 2846.534083] ? lock_release+0x680/0x680 [ 2846.534557] ? kmem_cache_alloc_trace+0x151/0x320 [ 2846.535111] ? v9fs_show_options+0x690/0x690 [ 2846.535639] ? trace_hardirqs_on+0x5b/0x180 [ 2846.536163] ? kasan_unpoison_shadow+0x33/0x50 [ 2846.536702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2846.537301] v9fs_mount+0x79/0x8f0 [ 2846.537714] ? v9fs_write_inode+0x60/0x60 [ 2846.538197] legacy_get_tree+0x105/0x220 [ 2846.538673] vfs_get_tree+0x8e/0x300 [ 2846.539110] path_mount+0x1429/0x2120 [ 2846.539565] ? strncpy_from_user+0x9e/0x470 [ 2846.540084] ? finish_automount+0xa90/0xa90 [ 2846.540591] ? getname_flags.part.0+0x1dd/0x4f0 [ 2846.541137] ? _copy_from_user+0xfb/0x1b0 [ 2846.541633] __x64_sys_mount+0x282/0x300 [ 2846.542112] ? copy_mnt_ns+0xa00/0xa00 [ 2846.542570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2846.543177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2846.543759] do_syscall_64+0x33/0x40 [ 2846.544211] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2846.544766] RIP: 0033:0x7f3eebf31b19 [ 2846.545198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.547200] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2846.548044] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2846.548813] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2846.549639] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2846.550471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2846.551306] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:23:04 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df2", 0x85, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) kcmp(0x0, r1, 0x3, 0xffffffffffffffff, r4) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7f, 0x1, 0x1, 0x0, 0x0, 0x2, 0x80, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1}, 0x4500, 0x0, 0x2, 0x3, 0x1db084dc, 0x8000, 0x7fff, 0x0, 0x8, 0x0, 0x36b}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) pipe(0x0) 03:23:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) lseek(r0, 0x80000001, 0x2) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={r1, r2/1000+10000}, 0x10) pipe(0x0) 03:23:18 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182305, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:18 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 03:23:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = getpgrp(0x0) r5 = getpgrp(0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/class/mac80211_hwsim', 0x20040, 0x2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000600)={0x0, @aes256, 0x0, @desc1}) r8 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r8, &(0x7f0000000140)={r3}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x3f, 0x3, 0x0, 0x0, 0x1, 0x410, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x800, 0x6, 0x80, 0x7, 0x9, 0x3, 0x40, 0x0, 0x2, 0x0, 0x8}, r4, 0x8, r1, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0xc0, &(0x7f0000000280)=0x38000000, 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x3, 0x81, 0x9, 0x0, 0xb5, 0x2a401, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x80, 0x84}, 0x2484, 0x7, 0x1, 0x1, 0xfffffffffffffffd, 0x3f, 0xc8, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x2, r1, 0x2) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x810, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r10, 0x114, &(0x7f0000000400)=0x1, 0x0, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xff, 0x6, 0x3, 0x4, 0x0, 0xba68, 0x3000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0xb608, 0x7, 0xfff, 0x4, 0x8001, 0x6, 0x3, 0x0, 0x6, 0x0, 0x80000000}, r4, 0x10, r0, 0x0) 03:23:18 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df2", 0x85, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 24) 03:23:18 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182303, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0xa) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:23:18 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182306, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2860.605392] FAULT_INJECTION: forcing a failure. [ 2860.605392] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.605775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15647 comm=syz-executor.1 [ 2860.608001] CPU: 1 PID: 15654 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2860.612503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.614249] Call Trace: [ 2860.614812] dump_stack+0x107/0x167 [ 2860.615595] should_fail.cold+0x5/0xa [ 2860.616431] should_failslab+0x5/0x20 [ 2860.617238] __kmalloc_track_caller+0x79/0x370 [ 2860.618202] ? p9_client_create+0x51e/0x1230 [ 2860.619146] kmemdup_nul+0x2d/0xa0 [ 2860.619915] p9_client_create+0x51e/0x1230 [ 2860.620835] ? p9_client_flush+0x430/0x430 [ 2860.621739] ? trace_hardirqs_on+0x5b/0x180 [ 2860.622655] ? lockdep_init_map_type+0x2c7/0x780 [ 2860.623672] ? __raw_spin_lock_init+0x36/0x110 [ 2860.624679] v9fs_session_init+0x1dd/0x1680 [ 2860.625615] ? lock_release+0x680/0x680 [ 2860.626489] ? kmem_cache_alloc_trace+0x151/0x320 [ 2860.627525] ? v9fs_show_options+0x690/0x690 [ 2860.628494] ? trace_hardirqs_on+0x5b/0x180 [ 2860.629425] ? kasan_unpoison_shadow+0x33/0x50 [ 2860.630415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2860.631504] v9fs_mount+0x79/0x8f0 [ 2860.632304] ? v9fs_write_inode+0x60/0x60 [ 2860.633182] legacy_get_tree+0x105/0x220 [ 2860.634054] vfs_get_tree+0x8e/0x300 [ 2860.634848] path_mount+0x1429/0x2120 [ 2860.635674] ? strncpy_from_user+0x9e/0x470 [ 2860.636614] ? finish_automount+0xa90/0xa90 [ 2860.637527] ? getname_flags.part.0+0x1dd/0x4f0 [ 2860.638517] ? _copy_from_user+0xfb/0x1b0 [ 2860.639417] __x64_sys_mount+0x282/0x300 [ 2860.640287] ? copy_mnt_ns+0xa00/0xa00 [ 2860.641129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.642235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2860.643344] do_syscall_64+0x33/0x40 [ 2860.643485] FAULT_INJECTION: forcing a failure. [ 2860.643485] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.644134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2860.644149] RIP: 0033:0x7f3eebf31b19 [ 2860.644174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.652303] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2860.653905] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2860.655401] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2860.656905] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2860.658407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.659921] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2860.661476] CPU: 0 PID: 15659 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2860.662960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.664729] Call Trace: [ 2860.665296] dump_stack+0x107/0x167 [ 2860.666068] should_fail.cold+0x5/0xa [ 2860.666893] ? inherit_task_group.isra.0+0x244/0x5c0 [ 2860.667978] should_failslab+0x5/0x20 [ 2860.668799] kmem_cache_alloc_trace+0x55/0x320 [ 2860.669773] inherit_task_group.isra.0+0x244/0x5c0 [ 2860.670816] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2860.671891] ? trace_hardirqs_on+0x5b/0x180 [ 2860.672809] perf_event_init_task+0x375/0x800 [ 2860.673766] ? perf_event_attrs+0x40/0x40 [ 2860.674645] ? __hrtimer_init+0x12c/0x270 [ 2860.675526] ? memset+0x20/0x50 [ 2860.676237] copy_process+0x182e/0x7800 [ 2860.677092] ? mark_lock+0xf5/0x2df0 [ 2860.677888] ? lock_acquire+0x197/0x470 [ 2860.678726] ? find_held_lock+0x2c/0x110 [ 2860.679601] ? __cleanup_sighand+0xb0/0xb0 [ 2860.680533] ? _copy_from_user+0xfb/0x1b0 [ 2860.681421] kernel_clone+0xe7/0x980 [ 2860.682217] ? lock_acquire+0x197/0x470 [ 2860.683051] ? create_io_thread+0xf0/0xf0 [ 2860.683959] __do_sys_clone3+0x1e5/0x320 [ 2860.684819] ? __do_sys_clone+0x110/0x110 [ 2860.685689] ? lock_downgrade+0x6d0/0x6d0 [ 2860.686582] ? rcu_read_lock_any_held+0x75/0xa0 [ 2860.687568] ? vfs_write+0x354/0xb10 [ 2860.688366] ? ksys_write+0x1a9/0x260 [ 2860.689170] ? __ia32_sys_read+0xb0/0xb0 [ 2860.690033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.691149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2860.692238] ? trace_hardirqs_on+0x5b/0x180 [ 2860.693153] do_syscall_64+0x33/0x40 [ 2860.693939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2860.695018] RIP: 0033:0x7fc070febb19 [ 2860.695805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.699698] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2860.701312] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2860.702816] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2860.704329] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2860.705830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:23:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 25) [ 2860.707331] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2860.736305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15662 comm=syz-executor.1 [ 2860.798117] FAULT_INJECTION: forcing a failure. [ 2860.798117] name failslab, interval 1, probability 0, space 0, times 0 03:23:18 executing program 1: prctl$PR_GET_NO_NEW_PRIVS(0x27) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004}, 0xffffffffffffffff, 0x200000000000, 0xffffffffffffffff, 0x0) pipe(0x0) [ 2860.800602] CPU: 0 PID: 15666 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2860.802236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.803999] Call Trace: [ 2860.804568] dump_stack+0x107/0x167 [ 2860.805349] should_fail.cold+0x5/0xa [ 2860.806162] ? create_object.isra.0+0x3a/0xa20 [ 2860.807145] should_failslab+0x5/0x20 [ 2860.807971] kmem_cache_alloc+0x5b/0x310 [ 2860.808835] ? lock_downgrade+0x6d0/0x6d0 [ 2860.809741] create_object.isra.0+0x3a/0xa20 [ 2860.810672] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2860.811770] __kmalloc_track_caller+0x177/0x370 [ 2860.812770] ? p9_client_create+0x41d/0x1230 [ 2860.813726] kstrdup+0x36/0x70 [ 2860.814424] p9_client_create+0x41d/0x1230 [ 2860.815326] ? lock_downgrade+0x6d0/0x6d0 [ 2860.816239] ? p9_client_flush+0x430/0x430 [ 2860.817153] ? trace_hardirqs_on+0x5b/0x180 [ 2860.818074] ? lockdep_init_map_type+0x2c7/0x780 [ 2860.819097] ? __raw_spin_lock_init+0x36/0x110 [ 2860.820092] v9fs_session_init+0x1dd/0x1680 [ 2860.821013] ? lock_release+0x680/0x680 [ 2860.821877] ? kmem_cache_alloc_trace+0x151/0x320 03:23:18 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2", 0x8f, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2860.822904] ? v9fs_show_options+0x690/0x690 [ 2860.823927] ? trace_hardirqs_on+0x5b/0x180 [ 2860.824860] ? kasan_unpoison_shadow+0x33/0x50 [ 2860.825835] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2860.826934] v9fs_mount+0x79/0x8f0 [ 2860.827703] ? v9fs_write_inode+0x60/0x60 [ 2860.828604] legacy_get_tree+0x105/0x220 [ 2860.829478] vfs_get_tree+0x8e/0x300 [ 2860.830280] path_mount+0x1429/0x2120 [ 2860.831114] ? strncpy_from_user+0x9e/0x470 [ 2860.832058] ? finish_automount+0xa90/0xa90 [ 2860.832986] ? getname_flags.part.0+0x1dd/0x4f0 [ 2860.833979] ? _copy_from_user+0xfb/0x1b0 [ 2860.834884] __x64_sys_mount+0x282/0x300 [ 2860.835758] ? copy_mnt_ns+0xa00/0xa00 [ 2860.836610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.837733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2860.838847] do_syscall_64+0x33/0x40 [ 2860.839644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2860.840757] RIP: 0033:0x7f3eebf31b19 [ 2860.841550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.845477] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2860.847118] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2860.848658] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2860.850179] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2860.851703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.853237] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:23:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x400, 0x400) fcntl$setflags(r0, 0x2, 0x0) 03:23:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 26) 03:23:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2, 0x2, 0xffffffff, 0x8, 0x9}) pipe(0x0) [ 2861.066878] FAULT_INJECTION: forcing a failure. [ 2861.066878] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.069339] CPU: 0 PID: 15752 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2861.070822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2861.072602] Call Trace: [ 2861.073181] dump_stack+0x107/0x167 [ 2861.073970] should_fail.cold+0x5/0xa [ 2861.074800] should_failslab+0x5/0x20 [ 2861.075620] __kmalloc_track_caller+0x79/0x370 [ 2861.076607] ? parse_opts.part.0+0x8e/0x340 [ 2861.077556] kstrdup+0x36/0x70 [ 2861.078247] parse_opts.part.0+0x8e/0x340 [ 2861.079141] ? p9_fd_show_options+0x1c0/0x1c0 [ 2861.080129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2861.081246] ? quarantine_put+0x8b/0x1a0 [ 2861.082113] ? trace_hardirqs_on+0x5b/0x180 [ 2861.083050] ? kfree+0xd7/0x340 [ 2861.083776] p9_fd_create+0x98/0x4a0 [ 2861.084581] ? p9_conn_create+0x510/0x510 [ 2861.085474] ? p9_client_create+0x798/0x1230 [ 2861.086410] ? kfree+0xd7/0x340 [ 2861.087113] ? do_raw_spin_unlock+0x4f/0x220 [ 2861.088083] p9_client_create+0x7ff/0x1230 [ 2861.089016] ? p9_client_flush+0x430/0x430 [ 2861.089929] ? trace_hardirqs_on+0x5b/0x180 [ 2861.090859] ? lockdep_init_map_type+0x2c7/0x780 [ 2861.091895] ? __raw_spin_lock_init+0x36/0x110 [ 2861.092895] v9fs_session_init+0x1dd/0x1680 [ 2861.093830] ? lock_release+0x680/0x680 [ 2861.094709] ? kmem_cache_alloc_trace+0x151/0x320 [ 2861.095745] ? v9fs_show_options+0x690/0x690 [ 2861.096715] ? trace_hardirqs_on+0x5b/0x180 [ 2861.097655] ? kasan_unpoison_shadow+0x33/0x50 [ 2861.098626] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2861.099727] v9fs_mount+0x79/0x8f0 [ 2861.100505] ? v9fs_write_inode+0x60/0x60 [ 2861.101395] legacy_get_tree+0x105/0x220 [ 2861.102273] vfs_get_tree+0x8e/0x300 [ 2861.103071] path_mount+0x1429/0x2120 [ 2861.103907] ? strncpy_from_user+0x9e/0x470 [ 2861.104851] ? finish_automount+0xa90/0xa90 [ 2861.105779] ? getname_flags.part.0+0x1dd/0x4f0 [ 2861.106777] ? _copy_from_user+0xfb/0x1b0 [ 2861.107689] __x64_sys_mount+0x282/0x300 [ 2861.108566] ? copy_mnt_ns+0xa00/0xa00 [ 2861.109412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2861.110546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2861.111654] do_syscall_64+0x33/0x40 [ 2861.112468] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2861.113562] RIP: 0033:0x7f3eebf31b19 [ 2861.114364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2861.118311] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2861.119958] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2861.121486] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2861.123016] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2861.124546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2861.126081] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2861.129433] 9pnet: Insufficient options for proto=fd [ 2877.387550] FAULT_INJECTION: forcing a failure. [ 2877.387550] name failslab, interval 1, probability 0, space 0, times 0 [ 2877.389277] CPU: 1 PID: 15799 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2877.390275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2877.391452] Call Trace: [ 2877.391837] dump_stack+0x107/0x167 [ 2877.392366] should_fail.cold+0x5/0xa [ 2877.392910] ? create_object.isra.0+0x3a/0xa20 [ 2877.393556] should_failslab+0x5/0x20 [ 2877.394091] kmem_cache_alloc+0x5b/0x310 [ 2877.394661] ? legacy_get_tree+0x105/0x220 [ 2877.395253] ? vfs_get_tree+0x8e/0x300 [ 2877.395809] create_object.isra.0+0x3a/0xa20 [ 2877.396438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 03:23:35 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) 03:23:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x244008, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@posixacl}, {@version_9p2000}, {@posixacl}, {@version_u}, {}, {@cachetag={'cachetag', 0x3d, '$(^'}}, {@access_any}], [{@appraise_type}, {@uid_eq={'uid', 0x3d, r2}}, {@measure}]}}) pipe(0x0) 03:23:35 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182307, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182304, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:35 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2", 0x8f, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 27) 03:23:35 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182306, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2877.397379] __kmalloc_track_caller+0x177/0x370 [ 2877.398189] ? parse_opts.part.0+0x8e/0x340 [ 2877.398819] kstrdup+0x36/0x70 [ 2877.399280] parse_opts.part.0+0x8e/0x340 [ 2877.399866] ? p9_fd_show_options+0x1c0/0x1c0 [ 2877.400525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2877.401273] ? quarantine_put+0x8b/0x1a0 [ 2877.401846] ? trace_hardirqs_on+0x5b/0x180 [ 2877.402468] FAULT_INJECTION: forcing a failure. [ 2877.402468] name failslab, interval 1, probability 0, space 0, times 0 [ 2877.402478] ? kfree+0xd7/0x340 [ 2877.402504] p9_fd_create+0x98/0x4a0 [ 2877.405818] ? p9_conn_create+0x510/0x510 [ 2877.406401] ? p9_client_create+0x798/0x1230 [ 2877.407029] ? kfree+0xd7/0x340 [ 2877.407492] ? do_raw_spin_unlock+0x4f/0x220 [ 2877.408138] p9_client_create+0x7ff/0x1230 [ 2877.408758] ? p9_client_flush+0x430/0x430 [ 2877.409361] ? trace_hardirqs_on+0x5b/0x180 [ 2877.409979] ? lockdep_init_map_type+0x2c7/0x780 [ 2877.410658] ? __raw_spin_lock_init+0x36/0x110 [ 2877.411312] v9fs_session_init+0x1dd/0x1680 [ 2877.411927] ? lock_release+0x680/0x680 [ 2877.412512] ? kmem_cache_alloc_trace+0x151/0x320 [ 2877.413191] ? v9fs_show_options+0x690/0x690 [ 2877.413831] ? trace_hardirqs_on+0x5b/0x180 [ 2877.414447] ? kasan_unpoison_shadow+0x33/0x50 [ 2877.415092] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2877.415819] v9fs_mount+0x79/0x8f0 [ 2877.416336] ? v9fs_write_inode+0x60/0x60 [ 2877.416927] legacy_get_tree+0x105/0x220 [ 2877.417501] vfs_get_tree+0x8e/0x300 [ 2877.418033] path_mount+0x1429/0x2120 [ 2877.418581] ? strncpy_from_user+0x9e/0x470 [ 2877.419186] ? finish_automount+0xa90/0xa90 [ 2877.419792] ? getname_flags.part.0+0x1dd/0x4f0 [ 2877.420457] ? _copy_from_user+0xfb/0x1b0 [ 2877.421051] __x64_sys_mount+0x282/0x300 [ 2877.421618] ? copy_mnt_ns+0xa00/0xa00 [ 2877.422171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2877.422908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2877.423641] do_syscall_64+0x33/0x40 [ 2877.424177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2877.424899] RIP: 0033:0x7f3eebf31b19 [ 2877.425416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2877.427990] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2877.429063] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2877.430051] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2877.431044] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2877.432047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2877.433038] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2877.434079] CPU: 0 PID: 15795 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2877.435557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2877.437322] Call Trace: [ 2877.437881] dump_stack+0x107/0x167 [ 2877.438658] should_fail.cold+0x5/0xa [ 2877.439465] ? create_object.isra.0+0x3a/0xa20 [ 2877.440532] should_failslab+0x5/0x20 [ 2877.441465] kmem_cache_alloc+0x5b/0x310 [ 2877.442477] create_object.isra.0+0x3a/0xa20 [ 2877.443558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2877.444855] kmem_cache_alloc_trace+0x151/0x320 [ 2877.446022] inherit_task_group.isra.0+0x244/0x5c0 [ 2877.447238] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2877.448492] ? trace_hardirqs_on+0x5b/0x180 [ 2877.449566] perf_event_init_task+0x375/0x800 [ 2877.450693] ? perf_event_attrs+0x40/0x40 [ 2877.451715] ? __hrtimer_init+0x12c/0x270 [ 2877.452750] ? memset+0x20/0x50 [ 2877.453576] copy_process+0x182e/0x7800 [ 2877.454560] ? mark_lock+0xf5/0x2df0 [ 2877.455482] ? lock_acquire+0x197/0x470 [ 2877.456469] ? find_held_lock+0x2c/0x110 [ 2877.457487] ? __cleanup_sighand+0xb0/0xb0 [ 2877.458541] ? _copy_from_user+0xfb/0x1b0 [ 2877.459573] kernel_clone+0xe7/0x980 [ 2877.460507] ? lock_acquire+0x197/0x470 [ 2877.461486] ? create_io_thread+0xf0/0xf0 [ 2877.462530] __do_sys_clone3+0x1e5/0x320 [ 2877.463513] ? __do_sys_clone+0x110/0x110 [ 2877.464536] ? lock_downgrade+0x6d0/0x6d0 [ 2877.465573] ? rcu_read_lock_any_held+0x75/0xa0 [ 2877.466697] ? vfs_write+0x354/0xb10 [ 2877.467608] ? ksys_write+0x1a9/0x260 [ 2877.468549] ? __ia32_sys_read+0xb0/0xb0 [ 2877.469540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2877.470813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2877.472066] ? trace_hardirqs_on+0x5b/0x180 [ 2877.473123] do_syscall_64+0x33/0x40 [ 2877.474034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2877.475271] RIP: 0033:0x7fc070febb19 03:23:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0xb) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 2877.476179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2877.480807] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2877.482635] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2877.484359] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2877.486052] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2877.487755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2877.489462] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:23:35 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r1, 0x0, 0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x414100, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380), 0x8c, 0x40002) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x200000, 0x0) io_submit(0x0, 0x6, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="d79656aa4e74651c78a590757dccca62e833c66e3fb3715025ff8f4fa593447d05557ba5046de4539136bad2e6e27ba27d6d08360c4bdb224b18849134416d4c57a6bad6129859718c4f005decb033eb97885438a2d209174acac7d1873523d0dfd2ab81b285f1bbee7ddb4f8a98f89c6cd8c118607cbc6df1644ee5a562bf522a", 0x81, 0xffffffffffff7fff, 0x0, 0x2, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x5, r2, &(0x7f0000000140)="c1a39bcb4bfefba1c4bb1be1b00f2e4cc36ab1ac55f2880e60f215d5dde9606593e6b9c02f6d9b89ec65e4315f9b5995ad58efbc980160b448aff49a69bc950d3de86861994dd6", 0x47, 0x6, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xdb3e, r3, &(0x7f0000000200), 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000280)="ce2bebd189b0ce8e6e5475a9e2afd4156f812f8020f00b4c54f989b29adcd0ab555a8ca0cb25be0d062bcaf65387bf324338cc51c8ce2ace5011a182b947bd198f5a95da3e044d2bd28f63c17df04d33f7036eeb", 0x54, 0x5, 0x0, 0x2, r4}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb, 0xfff, r5, &(0x7f00000003c0)="134e40d46eac6067837529e94a41ffdd2375a3efe5a38ffaa8feaa26ccf493c40fc274a99f11eb11589c7bbc21abd9dc648e3203c9b4a8ab7cfa35af3426944d51cbd5f632872342776f7c86532325a985883917ac229720b16bc5a3f00e2c2725a492520c0885c2f3a852b5132a8508", 0x70, 0x8}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x9, r6, &(0x7f00000004c0)="a9916bc28b31f6f212421b4e2d17d37eda568fc006c64c14cf4736e4c649dd607082f9de3fd9ec8a5c", 0x29, 0x2, 0x0, 0x0, r7}]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) 03:23:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 28) 03:23:35 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2", 0x8f, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2877.608760] FAULT_INJECTION: forcing a failure. [ 2877.608760] name failslab, interval 1, probability 0, space 0, times 0 [ 2877.610285] CPU: 1 PID: 15818 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2877.611186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2877.612272] Call Trace: [ 2877.612625] dump_stack+0x107/0x167 [ 2877.613098] should_fail.cold+0x5/0xa [ 2877.613606] should_failslab+0x5/0x20 [ 2877.614104] __kmalloc_track_caller+0x79/0x370 [ 2877.614705] ? match_number+0xaf/0x1d0 [ 2877.615223] kmemdup_nul+0x2d/0xa0 [ 2877.615690] match_number+0xaf/0x1d0 [ 2877.616185] ? match_u64+0x190/0x190 [ 2877.616666] ? __kmalloc_track_caller+0x2c6/0x370 [ 2877.617301] ? memcpy+0x39/0x60 [ 2877.617734] parse_opts.part.0+0x1f3/0x340 [ 2877.618289] ? p9_fd_show_options+0x1c0/0x1c0 [ 2877.618877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2877.619558] ? trace_hardirqs_on+0x5b/0x180 [ 2877.620129] ? kfree+0xd7/0x340 [ 2877.620579] p9_fd_create+0x98/0x4a0 [ 2877.621063] ? p9_conn_create+0x510/0x510 [ 2877.621598] ? p9_client_create+0x798/0x1230 [ 2877.622168] ? kfree+0xd7/0x340 [ 2877.622586] ? do_raw_spin_unlock+0x4f/0x220 [ 2877.623159] p9_client_create+0x7ff/0x1230 [ 2877.623721] ? p9_client_flush+0x430/0x430 [ 2877.624276] ? trace_hardirqs_on+0x5b/0x180 [ 2877.624837] ? lockdep_init_map_type+0x2c7/0x780 [ 2877.625452] ? __raw_spin_lock_init+0x36/0x110 [ 2877.626060] v9fs_session_init+0x1dd/0x1680 [ 2877.626630] ? lock_release+0x680/0x680 [ 2877.627155] ? kmem_cache_alloc_trace+0x151/0x320 [ 2877.627778] ? v9fs_show_options+0x690/0x690 [ 2877.628367] ? trace_hardirqs_on+0x5b/0x180 [ 2877.628923] ? kasan_unpoison_shadow+0x33/0x50 [ 2877.629507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2877.630155] v9fs_mount+0x79/0x8f0 [ 2877.630612] ? v9fs_write_inode+0x60/0x60 [ 2877.631150] legacy_get_tree+0x105/0x220 [ 2877.631667] vfs_get_tree+0x8e/0x300 [ 2877.632150] path_mount+0x1429/0x2120 [ 2877.632653] ? strncpy_from_user+0x9e/0x470 [ 2877.633205] ? finish_automount+0xa90/0xa90 [ 2877.633753] ? getname_flags.part.0+0x1dd/0x4f0 [ 2877.634339] ? _copy_from_user+0xfb/0x1b0 [ 2877.634901] __x64_sys_mount+0x282/0x300 [ 2877.635439] ? copy_mnt_ns+0xa00/0xa00 [ 2877.635950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2877.636633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2877.637294] do_syscall_64+0x33/0x40 [ 2877.637777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2877.638436] RIP: 0033:0x7f3eebf31b19 [ 2877.638902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2877.641245] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2877.642215] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2877.643120] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2877.644024] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2877.644922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2877.645830] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:23:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) dup(r0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2009002, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@debug={'debug', 0x3d, 0xfffffffffffff000}}, {@noextend}, {@access_any}, {@dfltgid}, {@cache_mmap}], [{@hash}, {@smackfsdef={'smackfsdef', 0x3d, '^*'}}, {@smackfshat={'smackfshat', 0x3d, '\'-.@}--'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@fsname}]}}) [ 2877.662098] 9pnet: Insufficient options for proto=fd 03:23:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 29) 03:23:35 executing program 1: r0 = eventfd(0x1000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x6) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x1, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x40000, 0x0, 0x8000000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"/312, @ANYRES32=r4, @ANYBLOB="0800028004000380"], 0x28}}, 0x0) pipe(0x0) [ 2877.752741] FAULT_INJECTION: forcing a failure. [ 2877.752741] name failslab, interval 1, probability 0, space 0, times 0 [ 2877.755217] CPU: 0 PID: 15891 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2877.756685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2877.758416] Call Trace: [ 2877.758977] dump_stack+0x107/0x167 [ 2877.759750] should_fail.cold+0x5/0xa [ 2877.760566] ? create_object.isra.0+0x3a/0xa20 [ 2877.761538] should_failslab+0x5/0x20 [ 2877.762343] kmem_cache_alloc+0x5b/0x310 [ 2877.763216] create_object.isra.0+0x3a/0xa20 [ 2877.764157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2877.765236] __kmalloc_track_caller+0x177/0x370 [ 2877.766222] ? match_number+0xaf/0x1d0 [ 2877.767069] kmemdup_nul+0x2d/0xa0 [ 2877.767830] match_number+0xaf/0x1d0 [ 2877.768633] ? match_u64+0x190/0x190 [ 2877.769415] ? __kmalloc_track_caller+0x2c6/0x370 [ 2877.770439] ? memcpy+0x39/0x60 [ 2877.771151] parse_opts.part.0+0x1f3/0x340 [ 2877.772065] ? p9_fd_show_options+0x1c0/0x1c0 [ 2877.773021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2877.774122] ? trace_hardirqs_on+0x5b/0x180 [ 2877.775031] ? kfree+0xd7/0x340 [ 2877.775748] p9_fd_create+0x98/0x4a0 [ 2877.776541] ? p9_conn_create+0x510/0x510 [ 2877.777415] ? p9_client_create+0x798/0x1230 [ 2877.778337] ? kfree+0xd7/0x340 [ 2877.779027] ? do_raw_spin_unlock+0x4f/0x220 [ 2877.779978] p9_client_create+0x7ff/0x1230 [ 2877.780888] ? p9_client_flush+0x430/0x430 [ 2877.781784] ? trace_hardirqs_on+0x5b/0x180 [ 2877.782697] ? lockdep_init_map_type+0x2c7/0x780 [ 2877.783699] ? __raw_spin_lock_init+0x36/0x110 [ 2877.784692] v9fs_session_init+0x1dd/0x1680 [ 2877.785608] ? lock_release+0x680/0x680 [ 2877.786466] ? kmem_cache_alloc_trace+0x151/0x320 [ 2877.787477] ? v9fs_show_options+0x690/0x690 [ 2877.788436] ? trace_hardirqs_on+0x5b/0x180 [ 2877.789348] ? kasan_unpoison_shadow+0x33/0x50 [ 2877.790321] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2877.791394] v9fs_mount+0x79/0x8f0 [ 2877.792157] ? v9fs_write_inode+0x60/0x60 [ 2877.793032] legacy_get_tree+0x105/0x220 [ 2877.793896] vfs_get_tree+0x8e/0x300 [ 2877.794688] path_mount+0x1429/0x2120 [ 2877.795507] ? strncpy_from_user+0x9e/0x470 [ 2877.796425] ? finish_automount+0xa90/0xa90 [ 2877.797336] ? getname_flags.part.0+0x1dd/0x4f0 [ 2877.798313] ? _copy_from_user+0xfb/0x1b0 [ 2877.799207] __x64_sys_mount+0x282/0x300 [ 2877.800077] ? copy_mnt_ns+0xa00/0xa00 [ 2877.800902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2877.802007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2877.803090] do_syscall_64+0x33/0x40 [ 2877.803888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2877.804988] RIP: 0033:0x7f3eebf31b19 [ 2877.805779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2877.809696] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2877.811316] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2877.812834] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2877.814349] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2877.815869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2877.817390] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:23:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0xc) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:23:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 30) [ 2877.960760] FAULT_INJECTION: forcing a failure. [ 2877.960760] name failslab, interval 1, probability 0, space 0, times 0 [ 2877.962064] CPU: 1 PID: 15937 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2877.962845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2877.963781] Call Trace: [ 2877.964104] dump_stack+0x107/0x167 [ 2877.964521] should_fail.cold+0x5/0xa [ 2877.964963] should_failslab+0x5/0x20 [ 2877.965398] __kmalloc_track_caller+0x79/0x370 [ 2877.965920] ? match_number+0xaf/0x1d0 [ 2877.966375] ? kfree+0xd7/0x340 [ 2877.966760] kmemdup_nul+0x2d/0xa0 [ 2877.967168] match_number+0xaf/0x1d0 [ 2877.967595] ? match_u64+0x190/0x190 [ 2877.968022] ? __kmalloc_track_caller+0x2c6/0x370 [ 2877.968579] ? memcpy+0x39/0x60 [ 2877.968960] parse_opts.part.0+0x1f3/0x340 [ 2877.969443] ? p9_fd_show_options+0x1c0/0x1c0 [ 2877.969961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2877.970557] ? trace_hardirqs_on+0x5b/0x180 [ 2877.971053] ? kfree+0xd7/0x340 [ 2877.971446] p9_fd_create+0x98/0x4a0 [ 2877.971869] ? p9_conn_create+0x510/0x510 [ 2877.972356] ? p9_client_create+0x798/0x1230 [ 2877.972853] ? kfree+0xd7/0x340 [ 2877.973230] ? do_raw_spin_unlock+0x4f/0x220 [ 2877.973737] p9_client_create+0x7ff/0x1230 [ 2877.974240] ? p9_client_flush+0x430/0x430 [ 2877.974723] ? trace_hardirqs_on+0x5b/0x180 [ 2877.975216] ? lockdep_init_map_type+0x2c7/0x780 [ 2877.975759] ? __raw_spin_lock_init+0x36/0x110 [ 2877.976293] v9fs_session_init+0x1dd/0x1680 [ 2877.976783] ? lock_release+0x680/0x680 [ 2877.977251] ? kmem_cache_alloc_trace+0x151/0x320 [ 2877.977800] ? v9fs_show_options+0x690/0x690 [ 2877.978325] ? trace_hardirqs_on+0x5b/0x180 [ 2877.978816] ? kasan_unpoison_shadow+0x33/0x50 [ 2877.979336] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2877.979911] v9fs_mount+0x79/0x8f0 [ 2877.980332] ? v9fs_write_inode+0x60/0x60 [ 2877.980806] legacy_get_tree+0x105/0x220 [ 2877.981275] vfs_get_tree+0x8e/0x300 [ 2877.981697] path_mount+0x1429/0x2120 [ 2877.982138] ? strncpy_from_user+0x9e/0x470 [ 2877.982628] ? finish_automount+0xa90/0xa90 [ 2877.983119] ? getname_flags.part.0+0x1dd/0x4f0 [ 2877.983644] ? _copy_from_user+0xfb/0x1b0 [ 2877.984130] __x64_sys_mount+0x282/0x300 [ 2877.984599] ? copy_mnt_ns+0xa00/0xa00 [ 2877.985046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2877.985644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2877.986235] do_syscall_64+0x33/0x40 [ 2877.986660] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2877.987238] RIP: 0033:0x7f3eebf31b19 [ 2877.987663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2877.989753] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2877.990615] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2877.991436] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2877.992262] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2877.993087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2877.993905] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2877.994841] 9pnet: Insufficient options for proto=fd 03:23:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 31) 03:23:49 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 03:23:49 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594", 0x94, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182305, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x75c9, 0x37a7, 0x0, &(0x7f0000000000)={[0x5]}, 0x8) pipe(0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x2, 0x4, 0x1}, 0x8}}, 0x18) 03:23:49 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182307, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:49 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182308, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0xd) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 2891.352105] FAULT_INJECTION: forcing a failure. [ 2891.352105] name failslab, interval 1, probability 0, space 0, times 0 [ 2891.354831] CPU: 0 PID: 16048 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2891.356339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2891.358137] Call Trace: [ 2891.358710] dump_stack+0x107/0x167 [ 2891.359495] should_fail.cold+0x5/0xa [ 2891.360323] ? perf_event_alloc.part.0+0x5b/0x2b70 [ 2891.361370] should_failslab+0x5/0x20 [ 2891.362168] kmem_cache_alloc_trace+0x55/0x320 [ 2891.363144] perf_event_alloc.part.0+0x5b/0x2b70 [ 2891.364180] ? lockdep_init_map_type+0x2c7/0x780 [ 2891.365192] inherit_event.constprop.0+0x168/0x8d0 [ 2891.366248] inherit_task_group.isra.0+0xb6/0x5c0 [ 2891.367285] perf_event_init_task+0x375/0x800 [ 2891.368253] ? perf_event_attrs+0x40/0x40 [ 2891.369138] ? __hrtimer_init+0x12c/0x270 [ 2891.370020] ? memset+0x20/0x50 [ 2891.370733] copy_process+0x182e/0x7800 [ 2891.371582] ? mark_lock+0xf5/0x2df0 [ 2891.372385] ? lock_acquire+0x197/0x470 [ 2891.373223] ? find_held_lock+0x2c/0x110 [ 2891.374153] ? __cleanup_sighand+0xb0/0xb0 [ 2891.374189] ? _copy_from_user+0xfb/0x1b0 [ 2891.374216] kernel_clone+0xe7/0x980 [ 2891.374236] ? lock_acquire+0x197/0x470 [ 2891.374254] ? create_io_thread+0xf0/0xf0 [ 2891.374298] __do_sys_clone3+0x1e5/0x320 [ 2891.374316] ? __do_sys_clone+0x110/0x110 [ 2891.374334] ? lock_downgrade+0x6d0/0x6d0 [ 2891.374371] ? rcu_read_lock_any_held+0x75/0xa0 [ 2891.374389] ? vfs_write+0x354/0xb10 [ 2891.374415] ? ksys_write+0x1a9/0x260 [ 2891.374435] ? __ia32_sys_read+0xb0/0xb0 [ 2891.374458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2891.374478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2891.374494] ? trace_hardirqs_on+0x5b/0x180 [ 2891.374515] do_syscall_64+0x33/0x40 [ 2891.374533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2891.374546] RIP: 0033:0x7fc070febb19 [ 2891.374562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2891.374572] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2891.374592] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2891.374603] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2891.374613] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2891.374623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2891.374634] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2891.378021] FAULT_INJECTION: forcing a failure. [ 2891.378021] name failslab, interval 1, probability 0, space 0, times 0 03:23:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x6) pipe(0x0) [ 2891.378036] CPU: 1 PID: 16060 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2891.378043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2891.378048] Call Trace: [ 2891.378067] dump_stack+0x107/0x167 [ 2891.378083] should_fail.cold+0x5/0xa [ 2891.378100] ? create_object.isra.0+0x3a/0xa20 [ 2891.378117] should_failslab+0x5/0x20 [ 2891.378137] kmem_cache_alloc+0x5b/0x310 [ 2891.378157] create_object.isra.0+0x3a/0xa20 [ 2891.378167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2891.378186] __kmalloc_track_caller+0x177/0x370 [ 2891.378200] ? match_number+0xaf/0x1d0 [ 2891.378222] kmemdup_nul+0x2d/0xa0 [ 2891.378236] match_number+0xaf/0x1d0 [ 2891.378250] ? match_u64+0x190/0x190 [ 2891.378262] ? __kmalloc_track_caller+0x2c6/0x370 [ 2891.378277] ? memcpy+0x39/0x60 [ 2891.378295] parse_opts.part.0+0x1f3/0x340 [ 2891.378310] ? p9_fd_show_options+0x1c0/0x1c0 [ 2891.378331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2891.378344] ? trace_hardirqs_on+0x5b/0x180 [ 2891.378360] ? kfree+0xd7/0x340 [ 2891.378381] p9_fd_create+0x98/0x4a0 [ 2891.378392] ? p9_conn_create+0x510/0x510 03:23:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 32) [ 2891.378404] ? p9_client_create+0x798/0x1230 [ 2891.378416] ? kfree+0xd7/0x340 [ 2891.378425] ? do_raw_spin_unlock+0x4f/0x220 [ 2891.378448] p9_client_create+0x7ff/0x1230 [ 2891.378472] ? p9_client_flush+0x430/0x430 [ 2891.378487] ? trace_hardirqs_on+0x5b/0x180 [ 2891.378501] ? lockdep_init_map_type+0x2c7/0x780 [ 2891.378518] ? __raw_spin_lock_init+0x36/0x110 [ 2891.378539] v9fs_session_init+0x1dd/0x1680 03:23:49 executing program 1: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x6d248625ce3beba2}, 0x0, 0x8001, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) [ 2891.378553] ? lock_release+0x680/0x680 [ 2891.378576] ? kmem_cache_alloc_trace+0x151/0x320 [ 2891.378589] ? v9fs_show_options+0x690/0x690 [ 2891.378614] ? trace_hardirqs_on+0x5b/0x180 [ 2891.378629] ? kasan_unpoison_shadow+0x33/0x50 [ 2891.378641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2891.378658] v9fs_mount+0x79/0x8f0 [ 2891.378672] ? v9fs_write_inode+0x60/0x60 [ 2891.378687] legacy_get_tree+0x105/0x220 [ 2891.378703] vfs_get_tree+0x8e/0x300 [ 2891.378716] path_mount+0x1429/0x2120 [ 2891.378735] ? strncpy_from_user+0x9e/0x470 [ 2891.378749] ? finish_automount+0xa90/0xa90 [ 2891.378763] ? getname_flags.part.0+0x1dd/0x4f0 [ 2891.378775] ? _copy_from_user+0xfb/0x1b0 [ 2891.378799] __x64_sys_mount+0x282/0x300 [ 2891.378811] ? copy_mnt_ns+0xa00/0xa00 [ 2891.378828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2891.378842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2891.378859] do_syscall_64+0x33/0x40 [ 2891.378872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2891.378880] RIP: 0033:0x7f3eebf31b19 [ 2891.378891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2891.378897] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2891.378911] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2891.378918] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2891.378925] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 03:23:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 33) [ 2891.378931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2891.378938] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2891.507065] FAULT_INJECTION: forcing a failure. [ 2891.507065] name failslab, interval 1, probability 0, space 0, times 0 [ 2891.507080] CPU: 1 PID: 16070 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2891.507087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2891.507091] Call Trace: [ 2891.507108] dump_stack+0x107/0x167 [ 2891.507129] should_fail.cold+0x5/0xa [ 2891.507144] ? p9_fd_create+0x161/0x4a0 [ 2891.507160] should_failslab+0x5/0x20 [ 2891.507177] kmem_cache_alloc_trace+0x55/0x320 [ 2891.507196] p9_fd_create+0x161/0x4a0 [ 2891.507211] ? p9_conn_create+0x510/0x510 [ 2891.507232] ? p9_client_create+0x798/0x1230 [ 2891.507252] ? kfree+0xd7/0x340 [ 2891.507271] ? do_raw_spin_unlock+0x4f/0x220 [ 2891.507308] p9_client_create+0x7ff/0x1230 [ 2891.507355] ? p9_client_flush+0x430/0x430 [ 2891.507383] ? trace_hardirqs_on+0x5b/0x180 [ 2891.507409] ? lockdep_init_map_type+0x2c7/0x780 [ 2891.507436] ? __raw_spin_lock_init+0x36/0x110 [ 2891.507471] v9fs_session_init+0x1dd/0x1680 [ 2891.507496] ? lock_release+0x680/0x680 [ 2891.507534] ? kmem_cache_alloc_trace+0x151/0x320 [ 2891.507559] ? v9fs_show_options+0x690/0x690 [ 2891.507607] ? trace_hardirqs_on+0x5b/0x180 [ 2891.507635] ? kasan_unpoison_shadow+0x33/0x50 [ 2891.507655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2891.507682] v9fs_mount+0x79/0x8f0 [ 2891.507705] ? v9fs_write_inode+0x60/0x60 [ 2891.507726] legacy_get_tree+0x105/0x220 [ 2891.507752] vfs_get_tree+0x8e/0x300 [ 2891.507776] path_mount+0x1429/0x2120 [ 2891.507807] ? strncpy_from_user+0x9e/0x470 [ 2891.507831] ? finish_automount+0xa90/0xa90 [ 2891.507853] ? getname_flags.part.0+0x1dd/0x4f0 03:23:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 34) [ 2891.507876] ? _copy_from_user+0xfb/0x1b0 [ 2891.507915] __x64_sys_mount+0x282/0x300 [ 2891.507939] ? copy_mnt_ns+0xa00/0xa00 [ 2891.507972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2891.507996] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2891.508040] do_syscall_64+0x33/0x40 [ 2891.508056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 03:23:49 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594", 0x94, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2891.508066] RIP: 0033:0x7f3eebf31b19 [ 2891.508084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2891.508094] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2891.508117] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2891.508130] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2891.508143] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2891.508154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2891.508163] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2891.571489] FAULT_INJECTION: forcing a failure. [ 2891.571489] name failslab, interval 1, probability 0, space 0, times 0 [ 2891.571501] CPU: 1 PID: 16077 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2891.571507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2891.571511] Call Trace: [ 2891.571525] dump_stack+0x107/0x167 [ 2891.571539] should_fail.cold+0x5/0xa [ 2891.571551] ? p9_fd_create+0x161/0x4a0 [ 2891.571565] should_failslab+0x5/0x20 [ 2891.571576] kmem_cache_alloc_trace+0x55/0x320 [ 2891.571594] p9_fd_create+0x161/0x4a0 [ 2891.571606] ? p9_conn_create+0x510/0x510 [ 2891.571618] ? p9_client_create+0x798/0x1230 [ 2891.571632] ? kfree+0xd7/0x340 [ 2891.571640] ? do_raw_spin_unlock+0x4f/0x220 [ 2891.571661] p9_client_create+0x7ff/0x1230 [ 2891.571683] ? p9_client_flush+0x430/0x430 [ 2891.571697] ? trace_hardirqs_on+0x5b/0x180 [ 2891.571711] ? lockdep_init_map_type+0x2c7/0x780 [ 2891.571727] ? __raw_spin_lock_init+0x36/0x110 [ 2891.571752] v9fs_session_init+0x1dd/0x1680 [ 2891.571765] ? lock_release+0x680/0x680 [ 2891.571786] ? kmem_cache_alloc_trace+0x151/0x320 [ 2891.571798] ? v9fs_show_options+0x690/0x690 [ 2891.571821] ? trace_hardirqs_on+0x5b/0x180 [ 2891.571834] ? kasan_unpoison_shadow+0x33/0x50 [ 2891.571845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2891.571861] v9fs_mount+0x79/0x8f0 [ 2891.571874] ? v9fs_write_inode+0x60/0x60 [ 2891.571887] legacy_get_tree+0x105/0x220 [ 2891.571901] vfs_get_tree+0x8e/0x300 [ 2891.571913] path_mount+0x1429/0x2120 [ 2891.571930] ? strncpy_from_user+0x9e/0x470 [ 2891.571942] ? finish_automount+0xa90/0xa90 [ 2891.571955] ? getname_flags.part.0+0x1dd/0x4f0 [ 2891.571966] ? _copy_from_user+0xfb/0x1b0 [ 2891.571988] __x64_sys_mount+0x282/0x300 [ 2891.571999] ? copy_mnt_ns+0xa00/0xa00 [ 2891.572024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2891.572036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2891.572052] do_syscall_64+0x33/0x40 [ 2891.572064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2891.572071] RIP: 0033:0x7f3eebf31b19 [ 2891.572080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2891.572087] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2891.572099] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2891.572106] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2891.572112] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2891.572119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2891.572125] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2891.656455] FAULT_INJECTION: forcing a failure. [ 2891.656455] name failslab, interval 1, probability 0, space 0, times 0 [ 2891.686216] CPU: 0 PID: 16080 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2891.686228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2891.686235] Call Trace: [ 2891.686264] dump_stack+0x107/0x167 [ 2891.686293] should_fail.cold+0x5/0xa [ 2891.686322] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 2891.686350] should_failslab+0x5/0x20 [ 2891.686375] kmem_cache_alloc+0x5b/0x310 [ 2891.693745] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2891.694846] p9_client_rpc+0x220/0x1370 [ 2891.695695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2891.696826] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2891.697968] ? pipe_poll+0x21b/0x800 [ 2891.698764] ? p9_fd_close+0x4a0/0x4a0 [ 2891.699592] ? wait_for_partner+0x3c0/0x3c0 [ 2891.700514] ? p9_fd_poll+0x1e0/0x2c0 [ 2891.701339] ? p9_fd_create+0x357/0x4a0 [ 2891.702193] ? p9_conn_create+0x510/0x510 [ 2891.703071] ? p9_client_create+0x798/0x1230 [ 2891.704004] ? kfree+0xd7/0x340 [ 2891.704712] ? do_raw_spin_unlock+0x4f/0x220 [ 2891.705666] p9_client_create+0xa76/0x1230 [ 2891.706588] ? p9_client_flush+0x430/0x430 [ 2891.707493] ? trace_hardirqs_on+0x5b/0x180 [ 2891.708425] ? lockdep_init_map_type+0x2c7/0x780 [ 2891.709437] ? __raw_spin_lock_init+0x36/0x110 [ 2891.710417] v9fs_session_init+0x1dd/0x1680 [ 2891.711344] ? lock_release+0x680/0x680 [ 2891.712227] ? kmem_cache_alloc_trace+0x151/0x320 [ 2891.713259] ? v9fs_show_options+0x690/0x690 [ 2891.714218] ? trace_hardirqs_on+0x5b/0x180 [ 2891.715140] ? kasan_unpoison_shadow+0x33/0x50 [ 2891.716122] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2891.717214] v9fs_mount+0x79/0x8f0 [ 2891.717982] ? v9fs_write_inode+0x60/0x60 [ 2891.718870] legacy_get_tree+0x105/0x220 [ 2891.719737] vfs_get_tree+0x8e/0x300 [ 2891.720553] path_mount+0x1429/0x2120 [ 2891.721388] ? strncpy_from_user+0x9e/0x470 [ 2891.722305] ? finish_automount+0xa90/0xa90 [ 2891.723225] ? getname_flags.part.0+0x1dd/0x4f0 [ 2891.724215] ? _copy_from_user+0xfb/0x1b0 [ 2891.725122] __x64_sys_mount+0x282/0x300 [ 2891.725987] ? copy_mnt_ns+0xa00/0xa00 [ 2891.726818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2891.727935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2891.729043] do_syscall_64+0x33/0x40 [ 2891.729851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2891.730963] RIP: 0033:0x7f3eebf31b19 [ 2891.731749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2891.735696] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2891.737334] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2891.738866] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2891.740390] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2891.741915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2891.743416] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:23:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0xe) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:23:49 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594", 0x94, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:23:49 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182308, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0xf) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:24:03 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599", 0x96, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x4018230a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 35) 03:24:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182306, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:03 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) 03:24:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c0502dc8a3f3e75366d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42ca654e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab0100000000000000c9aa53b8c092760da4cd088f03fad6704eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46eda75f2b1a85bdce12a8afa95492a14be3f42052ff500", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005ed00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ff00)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "1a0e0a464e3b76"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000052040)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c0502dc8a3f3e75366d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42ca654e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab0100000000000000c9aa53b8c092760da4cd088f03fad6704eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46eda75f2b1a85bdce12a8afa95492a14be3f42052ff500", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005ed00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ff00)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x1, "1a0e0a464e3b76"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000640)=ANY=[@ANYRES64=r12, @ANYBLOB="c0ffffffffffffff090000000000000009000000000000000000361500000000000000000000000500000000000000040000007747000004000000e0ffffff0001000000000000050000000000000009000000000000000700000000000f002000000000000000000000000000000000000000000000000000000000000000000000000000000026ce72f95122e1e5718ab9767043cec498378c5f3a110bac716943ed974f09bb5c81356b79cad7187434ed0f03edd2bf35a3425198f760b623001e33a67fc36d60f172be312829f18654b38c761af893eec9a6662ea337563e83668e2891c106e2c23fe48c3795a1c96a"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000640)=ANY=[@ANYRES64=r13, @ANYBLOB="c0ffffffffffffff090000000000000009000000000000000000361500000000000000000000000500000000000000040000007747000004000000e0ffffff0001000000000000050000000000000009000000000000000700000000000f002000000000000000000000000000000000000000000000000000000000000000000000000000000026ce72f95122e1e5718ab9767043cec498378c5f3a110bac716943ed974f09bb5c81356b79cad7187434ed0f03edd2bf35a3425198f760b623001e33a67fc36d60f172be312829f18654b38c761af893eec9a6662ea337563e83668e2891c106e2c23fe48c3795a1c96a"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000053040)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000053240)={{0x0, 0x1, 0x2e50639e, 0xffffffff, 0x9, 0x9, 0x8, 0x3, 0x800, 0x7ff, 0x7, 0x8, 0xb26, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000054240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054440)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "6bc501dbceea52"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r6, r11}, {r12}, {r13, r14}, {}, {}, {}, {r15, r16}, {r17}], 0x0, "39349c8bf8b7fe"}) 03:24:03 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018230a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2905.171747] FAULT_INJECTION: forcing a failure. [ 2905.171747] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.173208] CPU: 1 PID: 16309 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2905.174060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.175086] Call Trace: [ 2905.175429] dump_stack+0x107/0x167 [ 2905.175885] should_fail.cold+0x5/0xa [ 2905.176377] ? create_object.isra.0+0x3a/0xa20 [ 2905.176953] should_failslab+0x5/0x20 [ 2905.177424] kmem_cache_alloc+0x5b/0x310 [ 2905.177932] create_object.isra.0+0x3a/0xa20 [ 2905.178481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.179130] kmem_cache_alloc+0x159/0x310 [ 2905.179664] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2905.180309] p9_client_rpc+0x220/0x1370 [ 2905.180802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.181455] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2905.182110] ? pipe_poll+0x21b/0x800 [ 2905.182564] ? p9_fd_close+0x4a0/0x4a0 [ 2905.183038] ? wait_for_partner+0x3c0/0x3c0 [ 2905.183576] ? p9_fd_poll+0x1e0/0x2c0 [ 2905.184051] ? p9_fd_create+0x357/0x4a0 [ 2905.184551] ? p9_conn_create+0x510/0x510 [ 2905.185068] ? p9_client_create+0x798/0x1230 [ 2905.185618] ? kfree+0xd7/0x340 [ 2905.186018] ? do_raw_spin_unlock+0x4f/0x220 [ 2905.186564] p9_client_create+0xa76/0x1230 [ 2905.187097] ? p9_client_flush+0x430/0x430 [ 2905.187625] ? trace_hardirqs_on+0x5b/0x180 [ 2905.188160] ? lockdep_init_map_type+0x2c7/0x780 [ 2905.188740] ? __raw_spin_lock_init+0x36/0x110 [ 2905.189306] v9fs_session_init+0x1dd/0x1680 [ 2905.189833] ? lock_release+0x680/0x680 [ 2905.190333] ? kmem_cache_alloc_trace+0x151/0x320 [ 2905.190932] ? v9fs_show_options+0x690/0x690 [ 2905.191481] ? trace_hardirqs_on+0x5b/0x180 [ 2905.192014] ? kasan_unpoison_shadow+0x33/0x50 [ 2905.192582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.193213] v9fs_mount+0x79/0x8f0 [ 2905.193650] ? v9fs_write_inode+0x60/0x60 [ 2905.194158] legacy_get_tree+0x105/0x220 [ 2905.194665] vfs_get_tree+0x8e/0x300 [ 2905.195123] path_mount+0x1429/0x2120 [ 2905.195610] ? strncpy_from_user+0x9e/0x470 [ 2905.196164] ? finish_automount+0xa90/0xa90 [ 2905.196697] ? getname_flags.part.0+0x1dd/0x4f0 [ 2905.197272] ? _copy_from_user+0xfb/0x1b0 [ 2905.197796] __x64_sys_mount+0x282/0x300 [ 2905.198312] ? copy_mnt_ns+0xa00/0xa00 [ 2905.198794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.199439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.200071] do_syscall_64+0x33/0x40 [ 2905.200534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2905.201153] RIP: 0033:0x7f3eebf31b19 [ 2905.201604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2905.203816] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2905.204758] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2905.205631] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2905.206496] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2905.207366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2905.208237] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2905.216343] FAULT_INJECTION: forcing a failure. [ 2905.216343] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.216355] CPU: 1 PID: 16307 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2905.216360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.216364] Call Trace: [ 2905.216375] dump_stack+0x107/0x167 [ 2905.216387] should_fail.cold+0x5/0xa [ 2905.216402] ? create_object.isra.0+0x3a/0xa20 [ 2905.216416] should_failslab+0x5/0x20 [ 2905.216435] kmem_cache_alloc+0x5b/0x310 [ 2905.216456] create_object.isra.0+0x3a/0xa20 [ 2905.216465] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.216480] kmem_cache_alloc_trace+0x151/0x320 [ 2905.216495] perf_event_alloc.part.0+0x5b/0x2b70 [ 2905.216507] ? lockdep_init_map_type+0x2c7/0x780 [ 2905.216524] inherit_event.constprop.0+0x168/0x8d0 [ 2905.216539] inherit_task_group.isra.0+0xb6/0x5c0 [ 2905.216555] perf_event_init_task+0x375/0x800 [ 2905.216571] ? perf_event_attrs+0x40/0x40 [ 2905.216582] ? __hrtimer_init+0x12c/0x270 [ 2905.216594] ? memset+0x20/0x50 [ 2905.216609] copy_process+0x182e/0x7800 [ 2905.216620] ? mark_lock+0xf5/0x2df0 [ 2905.216636] ? lock_acquire+0x197/0x470 [ 2905.216645] ? find_held_lock+0x2c/0x110 [ 2905.216665] ? __cleanup_sighand+0xb0/0xb0 [ 2905.216685] ? _copy_from_user+0xfb/0x1b0 [ 2905.216701] kernel_clone+0xe7/0x980 [ 2905.216712] ? lock_acquire+0x197/0x470 [ 2905.216723] ? create_io_thread+0xf0/0xf0 [ 2905.216748] __do_sys_clone3+0x1e5/0x320 [ 2905.216758] ? __do_sys_clone+0x110/0x110 [ 2905.216782] ? lock_downgrade+0x6d0/0x6d0 [ 2905.236091] ? rcu_read_lock_any_held+0x75/0xa0 [ 2905.236655] ? vfs_write+0x354/0xb10 [ 2905.237121] ? ksys_write+0x1a9/0x260 [ 2905.237590] ? __ia32_sys_read+0xb0/0xb0 [ 2905.238083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.238720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.239343] ? trace_hardirqs_on+0x5b/0x180 [ 2905.239858] do_syscall_64+0x33/0x40 [ 2905.240321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2905.240927] RIP: 0033:0x7fc070febb19 [ 2905.241374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2905.243581] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2905.244520] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2905.245387] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2905.246233] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2905.247087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2905.247945] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:24:03 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599", 0x96, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x73, 0x0, 0xfc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) pipe(0x0) 03:24:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=@routing={0x2b, 0x8, 0x2, 0x0, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}, 0x48) 03:24:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 36) 03:24:03 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599", 0x96, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x2) pipe(0x0) [ 2905.483513] FAULT_INJECTION: forcing a failure. [ 2905.483513] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.484840] CPU: 1 PID: 16370 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2905.485626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.486582] Call Trace: [ 2905.486891] dump_stack+0x107/0x167 [ 2905.487314] should_fail.cold+0x5/0xa [ 2905.487761] ? create_object.isra.0+0x3a/0xa20 [ 2905.488301] should_failslab+0x5/0x20 [ 2905.488742] kmem_cache_alloc+0x5b/0x310 [ 2905.489217] create_object.isra.0+0x3a/0xa20 [ 2905.489722] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.490315] kmem_cache_alloc+0x159/0x310 [ 2905.490808] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2905.491412] p9_client_rpc+0x220/0x1370 [ 2905.491879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.492496] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2905.493112] ? pipe_poll+0x21b/0x800 [ 2905.493535] ? p9_fd_close+0x4a0/0x4a0 [ 2905.493982] ? wait_for_partner+0x3c0/0x3c0 [ 2905.494476] ? p9_fd_poll+0x1e0/0x2c0 [ 2905.494925] ? p9_fd_create+0x357/0x4a0 [ 2905.495380] ? p9_conn_create+0x510/0x510 [ 2905.495854] ? p9_client_create+0x798/0x1230 [ 2905.496366] ? kfree+0xd7/0x340 [ 2905.496745] ? do_raw_spin_unlock+0x4f/0x220 [ 2905.497258] p9_client_create+0xa76/0x1230 [ 2905.497760] ? p9_client_flush+0x430/0x430 [ 2905.498256] ? trace_hardirqs_on+0x5b/0x180 [ 2905.498757] ? lockdep_init_map_type+0x2c7/0x780 [ 2905.499305] ? __raw_spin_lock_init+0x36/0x110 [ 2905.499838] v9fs_session_init+0x1dd/0x1680 [ 2905.500343] ? lock_release+0x680/0x680 [ 2905.500810] ? kmem_cache_alloc_trace+0x151/0x320 [ 2905.501367] ? v9fs_show_options+0x690/0x690 [ 2905.501888] ? trace_hardirqs_on+0x5b/0x180 [ 2905.502393] ? kasan_unpoison_shadow+0x33/0x50 [ 2905.502916] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.503504] v9fs_mount+0x79/0x8f0 [ 2905.503915] ? v9fs_write_inode+0x60/0x60 [ 2905.504409] legacy_get_tree+0x105/0x220 [ 2905.504882] vfs_get_tree+0x8e/0x300 [ 2905.505315] path_mount+0x1429/0x2120 [ 2905.505773] ? strncpy_from_user+0x9e/0x470 [ 2905.506275] ? finish_automount+0xa90/0xa90 [ 2905.506772] ? getname_flags.part.0+0x1dd/0x4f0 [ 2905.507314] ? _copy_from_user+0xfb/0x1b0 [ 2905.507798] __x64_sys_mount+0x282/0x300 [ 2905.508272] ? copy_mnt_ns+0xa00/0xa00 [ 2905.508725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.509329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.509933] do_syscall_64+0x33/0x40 [ 2905.510363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2905.510957] RIP: 0033:0x7f3eebf31b19 [ 2905.511384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2905.513505] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2905.514385] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2905.515208] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2905.516021] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2905.516853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2905.517674] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:24:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x7fff, 0x22880) write$binfmt_elf64(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x36d) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x20, 0x7, 0x3f, 0x46, 0x0, 0x9, 0x80000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000000), 0x10}, 0x408, 0x40, 0xfffffc01, 0x2, 0x400, 0x7, 0x1, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000800)={0x591, 0x7, 0x1, 0x401, 0x80000001}) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff}, 0x0) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d4, 0x24, 0x400, 0x70bd2a, 0x25dfdbfd, {0xe}, [@typed={0xa2, 0x29, 0x0, 0x0, @binary="2808533fc0175425876442db650b4cf8c00540bf559b72e0ae7a0653d402384bd3b4deb674851c96d539ea00edb09cb3a7e1714219c362216f8c9937644ecc1cbb27803be5d475db09022dc5bcedc4ed7df46cda2a20856b6928eeeb45e4160178421cbd1a611390c0fcc36a8a21bc02816bb97bde2cb937e0079ca173c1978d810068609b70ff62ce3c966ee454e1c8beaad53591c35970fb332eb526ae"}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x3}, @generic="222b710c33c125e588d6edf37dcdf8e36be61abb3e05b8ba57bc84b470ceafddb834aa65e0786919143f56f5a04f231d0638b04fcf26aeac23ad07a6e750898b60b71336faa4f2f3ffac6c4e6b69200b41f5694ce26c02cbec6a1b0f0cebd1739762be673c36397079d15f531aa013d83b371db7800852b18bbb", @nested={0x94, 0x65, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd}, @generic="699e38e9830fdc220182855693c409260604650bc34e3353ece050a3ab0931d1056b0eb9f4fe5f83bae4f7db90785244b638489bcecad5268eb0c74cbc482eac46d573f9d7ea8830026bb2a20abbcc185890a5793295a17d300e81455808e5e17671c2924145b66156846acd6ae1c705b81d00d136a990f50670e0babe34239a", @typed={0x8, 0x4d, 0x0, 0x0, @uid=r4}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8080}, 0x10) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@access_client}], [{@fsmagic}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@uid_lt={'uid<', r4}}]}}) r5 = signalfd4(r0, &(0x7f0000000140)={[0xffffffff]}, 0x8, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x5312, &(0x7f00000006c0)={0x0, 0x8dfc, 0x10, 0x2, 0x33e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000740), &(0x7f0000000780)=0x0) syz_io_uring_submit(r6, r8, &(0x7f00000007c0)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x2, 0x5, 0x0, 0x800}, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r9}}, {@cache_mmap}, {@version_L}, {@loose}], [{@appraise_type}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x18}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, ']-'}}]}}) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x290100, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x97, 0x800067}}}}, [@NL80211_ATTR_BSSID={0xfffffffffffffd48, 0xf5, @random="2b6a7d4b12b2"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x44800) 03:24:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x10) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:24:17 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 03:24:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x70) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x8, 0x7, 0x8, 0x0, 0x3, 0x2400, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x100, 0x7, 0x3, 0x4, 0x100, 0x9, 0xf000, 0x0, 0x8, 0x0, 0x3492}, r2, 0xe, r4, 0x0) 03:24:17 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c8", 0x97, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:17 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x4018230c, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 37) 03:24:17 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018230c, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:17 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182307, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x11) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 2919.919953] FAULT_INJECTION: forcing a failure. [ 2919.919953] name failslab, interval 1, probability 0, space 0, times 0 [ 2919.921514] CPU: 1 PID: 16554 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2919.922347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2919.923409] Call Trace: [ 2919.923749] dump_stack+0x107/0x167 [ 2919.924203] should_fail.cold+0x5/0xa [ 2919.924676] ? selinux_perf_event_alloc+0x43/0x190 [ 2919.925269] should_failslab+0x5/0x20 [ 2919.925729] kmem_cache_alloc_trace+0x55/0x320 [ 2919.926287] selinux_perf_event_alloc+0x43/0x190 [ 2919.926859] security_perf_event_alloc+0x46/0xa0 [ 2919.927430] perf_event_alloc.part.0+0x18b3/0x2b70 [ 2919.928033] inherit_event.constprop.0+0x168/0x8d0 [ 2919.928647] inherit_task_group.isra.0+0xb6/0x5c0 [ 2919.929232] perf_event_init_task+0x375/0x800 [ 2919.929798] ? perf_event_attrs+0x40/0x40 [ 2919.930306] ? __hrtimer_init+0x12c/0x270 [ 2919.930847] ? memset+0x20/0x50 [ 2919.931257] copy_process+0x182e/0x7800 [ 2919.931750] ? mark_lock+0xf5/0x2df0 [ 2919.932210] ? lock_acquire+0x197/0x470 [ 2919.932693] ? find_held_lock+0x2c/0x110 [ 2919.933190] ? __cleanup_sighand+0xb0/0xb0 [ 2919.933711] ? _copy_from_user+0xfb/0x1b0 [ 2919.934223] kernel_clone+0xe7/0x980 [ 2919.934674] ? lock_acquire+0x197/0x470 [ 2919.935151] ? create_io_thread+0xf0/0xf0 [ 2919.935693] __do_sys_clone3+0x1e5/0x320 [ 2919.936199] ? __do_sys_clone+0x110/0x110 [ 2919.936713] ? lock_downgrade+0x6d0/0x6d0 [ 2919.937223] ? rcu_read_lock_any_held+0x75/0xa0 [ 2919.937779] ? vfs_write+0x354/0xb10 [ 2919.938229] ? ksys_write+0x1a9/0x260 [ 2919.938616] FAULT_INJECTION: forcing a failure. [ 2919.938616] name failslab, interval 1, probability 0, space 0, times 0 [ 2919.938684] ? __ia32_sys_read+0xb0/0xb0 [ 2919.938705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2919.942151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2919.942758] ? trace_hardirqs_on+0x5b/0x180 [ 2919.943270] do_syscall_64+0x33/0x40 [ 2919.943711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2919.944324] RIP: 0033:0x7fc070febb19 [ 2919.944789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2919.946960] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2919.947898] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2919.948754] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2919.949593] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2919.950471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2919.951312] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2919.952232] CPU: 0 PID: 16564 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2919.953708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2919.955467] Call Trace: [ 2919.956037] dump_stack+0x107/0x167 [ 2919.956830] should_fail.cold+0x5/0xa [ 2919.957650] ? create_object.isra.0+0x3a/0xa20 [ 2919.958628] should_failslab+0x5/0x20 [ 2919.959439] kmem_cache_alloc+0x5b/0x310 [ 2919.960331] create_object.isra.0+0x3a/0xa20 [ 2919.961272] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2919.962369] __kmalloc+0x16e/0x390 [ 2919.963146] p9_fcall_init+0x97/0x290 [ 2919.963976] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2919.965091] p9_client_rpc+0x220/0x1370 [ 2919.965941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2919.967076] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2919.968229] ? pipe_poll+0x21b/0x800 [ 2919.969020] ? p9_fd_close+0x4a0/0x4a0 [ 2919.969847] ? wait_for_partner+0x3c0/0x3c0 [ 2919.970769] ? p9_fd_poll+0x1e0/0x2c0 [ 2919.971600] ? p9_fd_create+0x357/0x4a0 [ 2919.972449] ? p9_conn_create+0x510/0x510 [ 2919.973336] ? p9_client_create+0x798/0x1230 [ 2919.974270] ? kfree+0xd7/0x340 [ 2919.974967] ? do_raw_spin_unlock+0x4f/0x220 [ 2919.975922] p9_client_create+0xa76/0x1230 [ 2919.976856] ? p9_client_flush+0x430/0x430 [ 2919.977772] ? trace_hardirqs_on+0x5b/0x180 [ 2919.978696] ? lockdep_init_map_type+0x2c7/0x780 [ 2919.979710] ? __raw_spin_lock_init+0x36/0x110 [ 2919.980703] v9fs_session_init+0x1dd/0x1680 [ 2919.981618] ? lock_release+0x680/0x680 [ 2919.982486] ? kmem_cache_alloc_trace+0x151/0x320 [ 2919.983516] ? v9fs_show_options+0x690/0x690 [ 2919.984489] ? trace_hardirqs_on+0x5b/0x180 [ 2919.985424] ? kasan_unpoison_shadow+0x33/0x50 [ 2919.986401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2919.987494] v9fs_mount+0x79/0x8f0 [ 2919.988265] ? v9fs_write_inode+0x60/0x60 [ 2919.989141] legacy_get_tree+0x105/0x220 [ 2919.990010] vfs_get_tree+0x8e/0x300 [ 2919.990797] path_mount+0x1429/0x2120 [ 2919.991613] ? strncpy_from_user+0x9e/0x470 [ 2919.992546] ? finish_automount+0xa90/0xa90 [ 2919.992571] ? getname_flags.part.0+0x1dd/0x4f0 [ 2919.992593] ? _copy_from_user+0xfb/0x1b0 [ 2919.992636] __x64_sys_mount+0x282/0x300 [ 2919.992659] ? copy_mnt_ns+0xa00/0xa00 [ 2919.992690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2919.992713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2919.992745] do_syscall_64+0x33/0x40 [ 2919.992767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2919.992782] RIP: 0033:0x7f3eebf31b19 [ 2919.992801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2919.992813] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:24:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x7, 0x1f, 0x1, 0x0, 0x5491, 0x8020, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x408d0, 0x1000, 0x5f5, 0x9, 0x9, 0xa610, 0x1ff, 0x0, 0x3, 0x0, 0x3}, r0, 0xa, 0xffffffffffffffff, 0x18) pipe(0x0) [ 2919.992838] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2919.992850] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2919.992862] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2919.992874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2919.992887] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:24:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9e7, 0x800) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r1}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x86800, 0x60) pipe(0x0) 03:24:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 38) 03:24:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x12) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:24:18 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c8", 0x97, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup2(r0, r1) [ 2920.204429] FAULT_INJECTION: forcing a failure. [ 2920.204429] name failslab, interval 1, probability 0, space 0, times 0 [ 2920.206821] CPU: 0 PID: 16677 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2920.208294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2920.210044] Call Trace: [ 2920.210608] dump_stack+0x107/0x167 [ 2920.211386] should_fail.cold+0x5/0xa [ 2920.212206] ? p9_fcall_init+0x97/0x290 [ 2920.213068] should_failslab+0x5/0x20 [ 2920.213873] __kmalloc+0x72/0x390 [ 2920.214612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2920.215697] p9_fcall_init+0x97/0x290 [ 2920.216532] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2920.217629] p9_client_rpc+0x220/0x1370 [ 2920.218474] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2920.219571] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2920.220723] ? pipe_poll+0x21b/0x800 [ 2920.221514] ? p9_fd_close+0x4a0/0x4a0 [ 2920.222338] ? wait_for_partner+0x3c0/0x3c0 [ 2920.223259] ? p9_fd_poll+0x1e0/0x2c0 [ 2920.224087] ? p9_fd_create+0x357/0x4a0 [ 2920.224943] ? p9_conn_create+0x510/0x510 [ 2920.225816] ? p9_client_create+0x798/0x1230 [ 2920.226745] ? kfree+0xd7/0x340 [ 2920.227449] ? do_raw_spin_unlock+0x4f/0x220 [ 2920.228404] p9_client_create+0xa76/0x1230 [ 2920.229324] ? p9_client_flush+0x430/0x430 [ 2920.230224] ? trace_hardirqs_on+0x5b/0x180 [ 2920.231143] ? lockdep_init_map_type+0x2c7/0x780 [ 2920.232169] ? __raw_spin_lock_init+0x36/0x110 [ 2920.233157] v9fs_session_init+0x1dd/0x1680 [ 2920.234078] ? lock_release+0x680/0x680 [ 2920.234947] ? kmem_cache_alloc_trace+0x151/0x320 [ 2920.235970] ? v9fs_show_options+0x690/0x690 [ 2920.236940] ? trace_hardirqs_on+0x5b/0x180 [ 2920.237864] ? kasan_unpoison_shadow+0x33/0x50 [ 2920.238835] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2920.239916] v9fs_mount+0x79/0x8f0 [ 2920.240681] ? v9fs_write_inode+0x60/0x60 [ 2920.241562] legacy_get_tree+0x105/0x220 [ 2920.242427] vfs_get_tree+0x8e/0x300 [ 2920.243222] path_mount+0x1429/0x2120 [ 2920.244038] ? strncpy_from_user+0x9e/0x470 [ 2920.244963] ? finish_automount+0xa90/0xa90 [ 2920.245880] ? getname_flags.part.0+0x1dd/0x4f0 [ 2920.246862] ? _copy_from_user+0xfb/0x1b0 [ 2920.247762] __x64_sys_mount+0x282/0x300 [ 2920.248632] ? copy_mnt_ns+0xa00/0xa00 [ 2920.249469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2920.250583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2920.251680] do_syscall_64+0x33/0x40 [ 2920.252477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2920.253557] RIP: 0033:0x7f3eebf31b19 [ 2920.254346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2920.258252] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2920.259868] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2920.261380] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2920.262887] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2920.264404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2920.265906] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:24:18 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x402082, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004800}, 0x4040) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r1, 0x0, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) pipe(0x0) 03:24:18 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c8", 0x97, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:33 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018230e, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffffffff8000}}, './file0\x00'}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000180)=0x1ff) syz_io_uring_setup(0x1d7a, &(0x7f0000000040)={0x0, 0xe9c8, 0x4, 0x2, 0x27e, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 03:24:33 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182308, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:33 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x13) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:24:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 39) 03:24:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182310, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:33 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) [ 2935.178904] FAULT_INJECTION: forcing a failure. [ 2935.178904] name failslab, interval 1, probability 0, space 0, times 0 [ 2935.180564] CPU: 1 PID: 16807 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2935.181506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2935.182628] Call Trace: [ 2935.182986] dump_stack+0x107/0x167 [ 2935.183488] should_fail.cold+0x5/0xa [ 2935.184016] ? create_object.isra.0+0x3a/0xa20 [ 2935.184635] should_failslab+0x5/0x20 [ 2935.185138] kmem_cache_alloc+0x5b/0x310 [ 2935.185702] create_object.isra.0+0x3a/0xa20 [ 2935.186289] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2935.186971] __kmalloc+0x16e/0x390 [ 2935.187466] p9_fcall_init+0x97/0x290 [ 2935.187990] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2935.188691] p9_client_rpc+0x220/0x1370 [ 2935.189222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2935.189932] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2935.190644] ? pipe_poll+0x21b/0x800 [ 2935.191141] ? p9_fd_close+0x4a0/0x4a0 [ 2935.191669] ? wait_for_partner+0x3c0/0x3c0 [ 2935.192261] ? p9_fd_poll+0x1e0/0x2c0 [ 2935.192786] ? p9_fd_create+0x357/0x4a0 [ 2935.193321] ? p9_conn_create+0x510/0x510 [ 2935.193875] ? p9_client_create+0x798/0x1230 [ 2935.194459] ? kfree+0xd7/0x340 [ 2935.194898] ? do_raw_spin_unlock+0x4f/0x220 [ 2935.195493] p9_client_create+0xa76/0x1230 [ 2935.196076] ? p9_client_flush+0x430/0x430 [ 2935.196667] ? trace_hardirqs_on+0x5b/0x180 [ 2935.197255] ? lockdep_init_map_type+0x2c7/0x780 [ 2935.197906] ? __raw_spin_lock_init+0x36/0x110 [ 2935.198529] v9fs_session_init+0x1dd/0x1680 [ 2935.199109] ? lock_release+0x680/0x680 [ 2935.199640] ? kmem_cache_alloc_trace+0x151/0x320 [ 2935.200278] ? v9fs_show_options+0x690/0x690 [ 2935.200890] ? trace_hardirqs_on+0x5b/0x180 [ 2935.201439] ? kasan_unpoison_shadow+0x33/0x50 [ 2935.202041] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2935.202682] v9fs_mount+0x79/0x8f0 [ 2935.203153] ? v9fs_write_inode+0x60/0x60 [ 2935.203702] legacy_get_tree+0x105/0x220 [ 2935.204258] vfs_get_tree+0x8e/0x300 [ 2935.204753] path_mount+0x1429/0x2120 [ 2935.205254] ? strncpy_from_user+0x9e/0x470 [ 2935.205818] ? finish_automount+0xa90/0xa90 [ 2935.206376] ? getname_flags.part.0+0x1dd/0x4f0 [ 2935.206988] ? _copy_from_user+0xfb/0x1b0 [ 2935.207554] __x64_sys_mount+0x282/0x300 [ 2935.208086] ? copy_mnt_ns+0xa00/0xa00 [ 2935.208595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2935.209278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2935.209930] do_syscall_64+0x33/0x40 [ 2935.210437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2935.211077] RIP: 0033:0x7f3eebf31b19 [ 2935.211577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2935.213864] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2935.214873] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2935.215820] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2935.216793] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2935.217742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2935.218684] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:24:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000080)=""/249, 0xf9}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/72, 0x48}], 0x3, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/186, 0xba}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/159, 0x9f}], 0x4}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/18, 0x12}, {&(0x7f0000001700)=""/40, 0x28}, {&(0x7f0000001740)=""/55, 0x37}, {&(0x7f0000001780)=""/27, 0x1b}, {&(0x7f00000017c0)=""/4, 0x4}], 0x6, &(0x7f0000001880)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001940)=@abs, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/98, 0x62}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b00)=""/125, 0x7d}, {&(0x7f0000001b80)=""/171, 0xab}], 0x2, &(0x7f0000001c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x5, 0x40002043, &(0x7f0000001d40)={r0, r1+60000000}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000003f40)=0xffffffff) pipe(0x0) syz_io_uring_setup(0x575e, &(0x7f0000003f80)={0x0, 0x6d8d, 0x10, 0x0, 0x2dd, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000004100)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r2, 0x0, &(0x7f0000004080)="38a9309b022ec8a2b63bc37f4152dc6e95b51a6cc400eab209057c87d16996a08cea950d01f6a27977d92a57d94907a720dcc5718e35f57a4c8a7aebf9ab966067718e56e3af4d77c42de75482fc9f2e76626aa21352f1fd", 0x58, 0x40000}, 0x8) [ 2935.301677] FAULT_INJECTION: forcing a failure. [ 2935.301677] name failslab, interval 1, probability 0, space 0, times 0 [ 2935.303276] CPU: 1 PID: 16814 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2935.304155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2935.305213] Call Trace: [ 2935.305556] dump_stack+0x107/0x167 [ 2935.306014] should_fail.cold+0x5/0xa [ 2935.306518] ? create_object.isra.0+0x3a/0xa20 [ 2935.307099] should_failslab+0x5/0x20 [ 2935.307582] kmem_cache_alloc+0x5b/0x310 [ 2935.308104] create_object.isra.0+0x3a/0xa20 [ 2935.308681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2935.309342] kmem_cache_alloc_trace+0x151/0x320 [ 2935.309938] selinux_perf_event_alloc+0x43/0x190 [ 2935.310543] security_perf_event_alloc+0x46/0xa0 [ 2935.311145] perf_event_alloc.part.0+0x18b3/0x2b70 [ 2935.311787] inherit_event.constprop.0+0x168/0x8d0 [ 2935.312425] inherit_task_group.isra.0+0xb6/0x5c0 [ 2935.313057] perf_event_init_task+0x375/0x800 [ 2935.313632] ? perf_event_attrs+0x40/0x40 [ 2935.314157] ? __hrtimer_init+0x12c/0x270 [ 2935.314683] ? memset+0x20/0x50 [ 2935.315120] copy_process+0x182e/0x7800 [ 2935.315615] ? mark_lock+0xf5/0x2df0 [ 2935.316085] ? lock_acquire+0x197/0x470 [ 2935.316588] ? find_held_lock+0x2c/0x110 [ 2935.317122] ? __cleanup_sighand+0xb0/0xb0 [ 2935.317667] ? _copy_from_user+0xfb/0x1b0 [ 2935.318195] kernel_clone+0xe7/0x980 [ 2935.318636] ? lock_acquire+0x197/0x470 [ 2935.319140] ? create_io_thread+0xf0/0xf0 [ 2935.319649] __do_sys_clone3+0x1e5/0x320 [ 2935.320155] ? __do_sys_clone+0x110/0x110 [ 2935.320676] ? lock_downgrade+0x6d0/0x6d0 [ 2935.321204] ? rcu_read_lock_any_held+0x75/0xa0 [ 2935.321794] ? vfs_write+0x354/0xb10 [ 2935.322277] ? ksys_write+0x1a9/0x260 [ 2935.322756] ? __ia32_sys_read+0xb0/0xb0 [ 2935.323269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2935.323928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2935.324598] ? trace_hardirqs_on+0x5b/0x180 [ 2935.325147] do_syscall_64+0x33/0x40 [ 2935.325611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2935.326255] RIP: 0033:0x7fc070febb19 [ 2935.326725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2935.329038] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2935.329999] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2935.330906] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2935.331797] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2935.332702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2935.333590] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:24:33 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:33 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000040)={0x7}) 03:24:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = getpgrp(0x0) r4 = getpgrp(0x0) r5 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_setup(0x4323, &(0x7f0000000240)={0x0, 0xf331, 0xebc4d7f62394f33, 0x0, 0x14b, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) io_uring_setup(0x7153, &(0x7f0000000500)={0x0, 0x814f, 0x4, 0x3, 0x21}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x4007, @fd_index=0x1, 0x6, &(0x7f0000000000)=[{&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f0000000280)=""/113, 0x71}], 0x2, 0xc, 0x0, {0x0, r10}}, 0xfa89) syz_io_uring_submit(r6, r8, &(0x7f00000004c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x20, 0x2000, 0x0, {0x0, r10}}, 0x57d) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000140)={r2}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xef, 0x0, 0x81, 0x5, 0x0, 0xea2, 0x8000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x396, 0x4}, 0x40000, 0x80000001, 0xe22, 0x9, 0x3, 0x3, 0x8, 0x0, 0x9, 0x0, 0x200}, r3, 0x3, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) 03:24:33 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 40) [ 2935.562888] FAULT_INJECTION: forcing a failure. [ 2935.562888] name failslab, interval 1, probability 0, space 0, times 0 [ 2935.565385] CPU: 0 PID: 16845 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2935.566858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2935.568612] Call Trace: [ 2935.569187] dump_stack+0x107/0x167 [ 2935.569976] should_fail.cold+0x5/0xa [ 2935.570804] ? create_object.isra.0+0x3a/0xa20 [ 2935.571798] should_failslab+0x5/0x20 [ 2935.572634] kmem_cache_alloc+0x5b/0x310 [ 2935.573526] create_object.isra.0+0x3a/0xa20 [ 2935.574473] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2935.575577] __kmalloc+0x16e/0x390 [ 2935.576380] p9_fcall_init+0x97/0x290 [ 2935.577217] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2935.578328] p9_client_rpc+0x220/0x1370 [ 2935.579179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2935.580342] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2935.581498] ? pipe_poll+0x21b/0x800 [ 2935.582298] ? p9_fd_close+0x4a0/0x4a0 [ 2935.583133] ? wait_for_partner+0x3c0/0x3c0 [ 2935.584067] ? p9_fd_poll+0x1e0/0x2c0 [ 2935.584909] ? p9_fd_create+0x357/0x4a0 [ 2935.585772] ? p9_conn_create+0x510/0x510 [ 2935.586661] ? p9_client_create+0x798/0x1230 [ 2935.587607] ? kfree+0xd7/0x340 [ 2935.588325] ? do_raw_spin_unlock+0x4f/0x220 [ 2935.589278] p9_client_create+0xa76/0x1230 [ 2935.590200] ? p9_client_flush+0x430/0x430 [ 2935.591119] ? trace_hardirqs_on+0x5b/0x180 [ 2935.592041] ? lockdep_init_map_type+0x2c7/0x780 [ 2935.593076] ? __raw_spin_lock_init+0x36/0x110 [ 2935.594070] v9fs_session_init+0x1dd/0x1680 [ 2935.595003] ? lock_release+0x680/0x680 [ 2935.595874] ? kmem_cache_alloc_trace+0x151/0x320 [ 2935.596911] ? v9fs_show_options+0x690/0x690 [ 2935.597877] ? trace_hardirqs_on+0x5b/0x180 [ 2935.598811] ? kasan_unpoison_shadow+0x33/0x50 [ 2935.599788] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2935.600892] v9fs_mount+0x79/0x8f0 [ 2935.601659] ? v9fs_write_inode+0x60/0x60 [ 2935.602551] legacy_get_tree+0x105/0x220 [ 2935.603432] vfs_get_tree+0x8e/0x300 [ 2935.604224] path_mount+0x1429/0x2120 [ 2935.605050] ? strncpy_from_user+0x9e/0x470 [ 2935.605975] ? finish_automount+0xa90/0xa90 [ 2935.606899] ? getname_flags.part.0+0x1dd/0x4f0 [ 2935.607895] ? _copy_from_user+0xfb/0x1b0 [ 2935.608812] __x64_sys_mount+0x282/0x300 [ 2935.609689] ? copy_mnt_ns+0xa00/0xa00 [ 2935.610539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2935.611670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2935.612806] do_syscall_64+0x33/0x40 [ 2935.613610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2935.614715] RIP: 0033:0x7f3eebf31b19 [ 2935.615514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2935.619457] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2935.621109] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2935.622638] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2935.624165] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2935.625700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2935.627240] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:24:33 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 41) 03:24:49 executing program 1: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x101, 0xfff8, 0x7, 0xd2, 0x9, 0x3, 0x380a}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) 03:24:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018230a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:49 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182311, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:49 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:49 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) 03:24:49 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182310, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x14) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 2951.100253] FAULT_INJECTION: forcing a failure. [ 2951.100253] name failslab, interval 1, probability 0, space 0, times 0 [ 2951.102867] CPU: 1 PID: 16963 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2951.104312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2951.106054] Call Trace: [ 2951.106613] dump_stack+0x107/0x167 [ 2951.107397] should_fail.cold+0x5/0xa [ 2951.108196] ? ___slab_alloc+0x155/0x700 [ 2951.109065] ? create_object.isra.0+0x3a/0xa20 [ 2951.110032] should_failslab+0x5/0x20 [ 2951.110818] kmem_cache_alloc+0x5b/0x310 [ 2951.111691] create_object.isra.0+0x3a/0xa20 [ 2951.112622] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2951.113702] kmem_cache_alloc+0x159/0x310 [ 2951.114611] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2951.115785] idr_get_free+0x4b5/0x8f0 [ 2951.116619] idr_alloc_u32+0x170/0x2d0 [ 2951.117447] ? __fprop_inc_percpu_max+0x130/0x130 [ 2951.118478] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2951.119618] ? lock_release+0x680/0x680 [ 2951.120472] idr_alloc+0xc2/0x130 [ 2951.121198] ? idr_alloc_u32+0x2d0/0x2d0 [ 2951.122036] ? rwlock_bug.part.0+0x90/0x90 [ 2951.122961] p9_client_prepare_req.part.0+0x612/0xac0 [ 2951.124049] p9_client_rpc+0x220/0x1370 [ 2951.124914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2951.126088] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2951.127230] ? pipe_poll+0x21b/0x800 [ 2951.128017] ? p9_fd_close+0x4a0/0x4a0 [ 2951.128844] ? wait_for_partner+0x3c0/0x3c0 [ 2951.129761] ? p9_fd_poll+0x1e0/0x2c0 [ 2951.130592] ? p9_fd_create+0x357/0x4a0 [ 2951.131454] ? p9_conn_create+0x510/0x510 [ 2951.132362] ? p9_client_create+0x798/0x1230 [ 2951.133284] ? kfree+0xd7/0x340 [ 2951.134008] ? do_raw_spin_unlock+0x4f/0x220 [ 2951.134977] p9_client_create+0xa76/0x1230 [ 2951.135886] ? p9_client_flush+0x430/0x430 [ 2951.136795] ? trace_hardirqs_on+0x5b/0x180 [ 2951.137690] ? lockdep_init_map_type+0x2c7/0x780 [ 2951.138708] ? __raw_spin_lock_init+0x36/0x110 [ 2951.139744] v9fs_session_init+0x1dd/0x1680 [ 2951.140719] ? lock_release+0x680/0x680 [ 2951.141608] ? kmem_cache_alloc_trace+0x151/0x320 [ 2951.142608] ? v9fs_show_options+0x690/0x690 [ 2951.143563] ? trace_hardirqs_on+0x5b/0x180 [ 2951.144477] ? kasan_unpoison_shadow+0x33/0x50 [ 2951.145521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2951.146323] v9fs_mount+0x79/0x8f0 [ 2951.147116] ? v9fs_write_inode+0x60/0x60 [ 2951.148063] legacy_get_tree+0x105/0x220 [ 2951.148935] vfs_get_tree+0x8e/0x300 [ 2951.149723] path_mount+0x1429/0x2120 [ 2951.150530] ? strncpy_from_user+0x9e/0x470 [ 2951.151501] ? finish_automount+0xa90/0xa90 [ 2951.152493] ? getname_flags.part.0+0x1dd/0x4f0 [ 2951.153496] ? _copy_from_user+0xfb/0x1b0 [ 2951.154413] __x64_sys_mount+0x282/0x300 [ 2951.155255] ? copy_mnt_ns+0xa00/0xa00 [ 2951.156079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2951.157174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2951.158256] do_syscall_64+0x33/0x40 [ 2951.159031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2951.160086] RIP: 0033:0x7f3eebf31b19 [ 2951.160861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:24:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = getpgrp(0x0) r3 = getpgrp(0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x99, 0x80, 0xff, 0x0, 0x587, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xfff}, 0x1, 0x1, 0x9, 0x4, 0xca, 0x3, 0x2, 0x0, 0x40}, r2, 0x3, r5, 0xb) pipe(0x0) [ 2951.164661] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2951.166520] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2951.168071] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2951.169575] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2951.171074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2951.172621] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:24:49 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2951.193688] FAULT_INJECTION: forcing a failure. [ 2951.193688] name failslab, interval 1, probability 0, space 0, times 0 [ 2951.196178] CPU: 1 PID: 16962 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2951.197620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2951.199311] Call Trace: [ 2951.199849] dump_stack+0x107/0x167 [ 2951.200604] should_fail.cold+0x5/0xa [ 2951.201400] ? dup_fd+0x89/0xf40 [ 2951.202112] should_failslab+0x5/0x20 [ 2951.202945] kmem_cache_alloc+0x5b/0x310 [ 2951.203838] dup_fd+0x89/0xf40 [ 2951.204524] ? audit_filter_inodes+0x40/0x40 [ 2951.205488] ? security_task_alloc+0xe6/0x260 [ 2951.206434] copy_process+0x197e/0x7800 [ 2951.207274] ? mark_lock+0xf5/0x2df0 [ 2951.208064] ? lock_acquire+0x197/0x470 [ 2951.208915] ? find_held_lock+0x2c/0x110 [ 2951.209830] ? __cleanup_sighand+0xb0/0xb0 [ 2951.210734] ? _copy_from_user+0xfb/0x1b0 [ 2951.211606] kernel_clone+0xe7/0x980 [ 2951.212398] ? lock_acquire+0x197/0x470 [ 2951.213254] ? create_io_thread+0xf0/0xf0 [ 2951.214146] __do_sys_clone3+0x1e5/0x320 [ 2951.214984] ? __do_sys_clone+0x110/0x110 [ 2951.215888] ? lock_downgrade+0x6d0/0x6d0 [ 2951.216780] ? rcu_read_lock_any_held+0x75/0xa0 [ 2951.217753] ? vfs_write+0x354/0xb10 [ 2951.218537] ? ksys_write+0x1a9/0x260 [ 2951.219333] ? __ia32_sys_read+0xb0/0xb0 [ 2951.220202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2951.221295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2951.222374] ? trace_hardirqs_on+0x5b/0x180 [ 2951.223263] do_syscall_64+0x33/0x40 [ 2951.224026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2951.225098] RIP: 0033:0x7fc070febb19 [ 2951.225864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2951.229699] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2951.231305] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2951.232777] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2951.234228] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2951.235687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2951.237182] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:24:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x15) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:24:49 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0x9, 0xffffffffffffffff, 0x0) pipe(0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(r1, r2) 03:24:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x6, 0x2, 0xff, 0x8, 0x0, 0x9, 0xc0004, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x42909, 0x46, 0x4, 0x4, 0x20, 0x9, 0x2, 0x0, 0xfffffff9, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r0, 0x8) pipe(0x0) 03:24:49 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:24:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6ff, 0x40, 0x2}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x4, 0x6, 0x4, 0x600000000}) pipe(0x0) 03:24:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 42) [ 2951.492751] FAULT_INJECTION: forcing a failure. [ 2951.492751] name failslab, interval 1, probability 0, space 0, times 0 [ 2951.494084] CPU: 0 PID: 17145 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2951.494892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2951.495873] Call Trace: [ 2951.496196] dump_stack+0x107/0x167 [ 2951.496643] should_fail.cold+0x5/0xa [ 2951.497099] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2951.497784] should_failslab+0x5/0x20 [ 2951.498239] kmem_cache_alloc+0x5b/0x310 [ 2951.498741] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2951.499413] idr_get_free+0x4b5/0x8f0 [ 2951.499886] idr_alloc_u32+0x170/0x2d0 [ 2951.500357] ? __fprop_inc_percpu_max+0x130/0x130 [ 2951.500930] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2951.501559] ? lock_release+0x680/0x680 [ 2951.502035] idr_alloc+0xc2/0x130 [ 2951.502445] ? idr_alloc_u32+0x2d0/0x2d0 [ 2951.502924] ? rwlock_bug.part.0+0x90/0x90 [ 2951.503442] p9_client_prepare_req.part.0+0x612/0xac0 [ 2951.504073] p9_client_rpc+0x220/0x1370 [ 2951.504557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2951.505184] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2951.505819] ? pipe_poll+0x21b/0x800 [ 2951.506258] ? p9_fd_close+0x4a0/0x4a0 [ 2951.506722] ? wait_for_partner+0x3c0/0x3c0 [ 2951.507231] ? p9_fd_poll+0x1e0/0x2c0 [ 2951.507689] ? p9_fd_create+0x357/0x4a0 [ 2951.508158] ? p9_conn_create+0x510/0x510 [ 2951.508654] ? p9_client_create+0x798/0x1230 [ 2951.509173] ? kfree+0xd7/0x340 [ 2951.509558] ? do_raw_spin_unlock+0x4f/0x220 [ 2951.510092] p9_client_create+0xa76/0x1230 [ 2951.510610] ? p9_client_flush+0x430/0x430 [ 2951.511112] ? trace_hardirqs_on+0x5b/0x180 [ 2951.511626] ? lockdep_init_map_type+0x2c7/0x780 [ 2951.512188] ? __raw_spin_lock_init+0x36/0x110 [ 2951.512745] v9fs_session_init+0x1dd/0x1680 [ 2951.513253] ? lock_release+0x680/0x680 [ 2951.513731] ? kmem_cache_alloc_trace+0x151/0x320 [ 2951.514292] ? v9fs_show_options+0x690/0x690 [ 2951.514825] ? trace_hardirqs_on+0x5b/0x180 [ 2951.515333] ? kasan_unpoison_shadow+0x33/0x50 [ 2951.515869] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2951.516474] v9fs_mount+0x79/0x8f0 [ 2951.516893] ? v9fs_write_inode+0x60/0x60 [ 2951.517388] legacy_get_tree+0x105/0x220 [ 2951.517866] vfs_get_tree+0x8e/0x300 [ 2951.518303] path_mount+0x1429/0x2120 [ 2951.518760] ? strncpy_from_user+0x9e/0x470 [ 2951.519267] ? finish_automount+0xa90/0xa90 [ 2951.519780] ? getname_flags.part.0+0x1dd/0x4f0 [ 2951.520329] ? _copy_from_user+0xfb/0x1b0 [ 2951.520836] __x64_sys_mount+0x282/0x300 [ 2951.521309] ? copy_mnt_ns+0xa00/0xa00 [ 2951.521781] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2951.522397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2951.523006] do_syscall_64+0x33/0x40 [ 2951.523445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2951.524042] RIP: 0033:0x7f3eebf31b19 [ 2951.524489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2951.526644] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2951.527526] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2951.528372] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2951.529195] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2951.530017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2951.530852] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:25:04 executing program 1: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000040)=""/13, 0xd}) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='+\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x81, 0x1, 0xc, 0x0, 0x23, 0x800, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x1, 0x11, 0x9, 0x292, 0x3, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffff2d6}, 0x0, 0xf, r1, 0x8) pipe(0x0) 03:25:04 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) 03:25:04 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018230c, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 43) 03:25:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x16) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:25:04 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182311, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182312, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:04 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2966.154052] FAULT_INJECTION: forcing a failure. [ 2966.154052] name failslab, interval 1, probability 0, space 0, times 0 [ 2966.156478] CPU: 0 PID: 17207 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2966.157955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2966.159745] Call Trace: [ 2966.160319] dump_stack+0x107/0x167 [ 2966.161113] should_fail.cold+0x5/0xa [ 2966.161938] ? create_object.isra.0+0x3a/0xa20 [ 2966.162921] should_failslab+0x5/0x20 [ 2966.163746] kmem_cache_alloc+0x5b/0x310 [ 2966.164638] create_object.isra.0+0x3a/0xa20 [ 2966.165585] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2966.166695] kmem_cache_alloc+0x159/0x310 [ 2966.167616] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2966.168833] idr_get_free+0x4b5/0x8f0 [ 2966.169691] idr_alloc_u32+0x170/0x2d0 [ 2966.170528] ? __fprop_inc_percpu_max+0x130/0x130 [ 2966.171569] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2966.172725] ? lock_release+0x680/0x680 [ 2966.173587] idr_alloc+0xc2/0x130 [ 2966.174340] ? idr_alloc_u32+0x2d0/0x2d0 [ 2966.175211] ? rwlock_bug.part.0+0x90/0x90 [ 2966.176143] p9_client_prepare_req.part.0+0x612/0xac0 [ 2966.177275] p9_client_rpc+0x220/0x1370 [ 2966.178122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2966.179271] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2966.180428] ? pipe_poll+0x21b/0x800 [ 2966.181219] ? p9_fd_close+0x4a0/0x4a0 [ 2966.182046] ? wait_for_partner+0x3c0/0x3c0 [ 2966.182974] ? p9_fd_poll+0x1e0/0x2c0 [ 2966.183807] ? p9_fd_create+0x357/0x4a0 [ 2966.184684] ? p9_conn_create+0x510/0x510 [ 2966.185571] ? p9_client_create+0x798/0x1230 [ 2966.186522] ? kfree+0xd7/0x340 [ 2966.187229] ? do_raw_spin_unlock+0x4f/0x220 [ 2966.188184] p9_client_create+0xa76/0x1230 [ 2966.189118] ? p9_client_flush+0x430/0x430 [ 2966.190026] ? trace_hardirqs_on+0x5b/0x180 [ 2966.190949] ? lockdep_init_map_type+0x2c7/0x780 [ 2966.191974] ? __raw_spin_lock_init+0x36/0x110 [ 2966.192974] v9fs_session_init+0x1dd/0x1680 [ 2966.193905] ? lock_release+0x680/0x680 [ 2966.194770] ? asm_sysvec_call_function_single+0x12/0x20 [ 2966.195932] ? trace_hardirqs_on+0x5b/0x180 [ 2966.195962] ? v9fs_show_options+0x690/0x690 [ 2966.197543] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2966.198634] ? kasan_unpoison_shadow+0x33/0x50 [ 2966.199617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2966.200727] v9fs_mount+0x79/0x8f0 [ 2966.201499] ? v9fs_write_inode+0x60/0x60 [ 2966.202395] legacy_get_tree+0x105/0x220 [ 2966.203268] vfs_get_tree+0x8e/0x300 [ 2966.204069] path_mount+0x1429/0x2120 [ 2966.204909] ? strncpy_from_user+0x9e/0x470 [ 2966.205840] ? finish_automount+0xa90/0xa90 [ 2966.206782] ? getname_flags.part.0+0x1dd/0x4f0 [ 2966.207782] ? _copy_from_user+0xfb/0x1b0 [ 2966.208703] __x64_sys_mount+0x282/0x300 [ 2966.209580] ? copy_mnt_ns+0xa00/0xa00 [ 2966.210438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2966.211561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2966.212681] do_syscall_64+0x33/0x40 [ 2966.213481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2966.214584] RIP: 0033:0x7f3eebf31b19 [ 2966.215376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2966.219284] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2966.220927] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2966.222438] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2966.223953] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2966.225476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2966.226987] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2966.232882] FAULT_INJECTION: forcing a failure. [ 2966.232882] name failslab, interval 1, probability 0, space 0, times 0 [ 2966.234420] CPU: 1 PID: 17206 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2966.235295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2966.236357] Call Trace: [ 2966.236719] dump_stack+0x107/0x167 [ 2966.237181] should_fail.cold+0x5/0xa [ 2966.237673] ? selinux_perf_event_alloc+0x43/0x190 [ 2966.238293] should_failslab+0x5/0x20 [ 2966.238777] kmem_cache_alloc_trace+0x55/0x320 [ 2966.239361] selinux_perf_event_alloc+0x43/0x190 [ 2966.239964] security_perf_event_alloc+0x46/0xa0 [ 2966.240589] perf_event_alloc.part.0+0x18b3/0x2b70 [ 2966.241233] inherit_event.constprop.0+0x168/0x8d0 [ 2966.241860] inherit_task_group.isra.0+0xb6/0x5c0 [ 2966.242474] perf_event_init_task+0x375/0x800 [ 2966.243056] ? perf_event_attrs+0x40/0x40 [ 2966.243597] ? __hrtimer_init+0x12c/0x270 [ 2966.244120] ? memset+0x20/0x50 [ 2966.244553] copy_process+0x182e/0x7800 [ 2966.245069] ? mark_lock+0xf5/0x2df0 [ 2966.245544] ? lock_acquire+0x197/0x470 [ 2966.246051] ? find_held_lock+0x2c/0x110 [ 2966.246576] ? __cleanup_sighand+0xb0/0xb0 [ 2966.247127] ? _copy_from_user+0xfb/0x1b0 [ 2966.247664] kernel_clone+0xe7/0x980 [ 2966.248143] ? lock_acquire+0x197/0x470 [ 2966.248649] ? create_io_thread+0xf0/0xf0 [ 2966.249189] __do_sys_clone3+0x1e5/0x320 [ 2966.249701] ? __do_sys_clone+0x110/0x110 [ 2966.250220] ? lock_downgrade+0x6d0/0x6d0 [ 2966.250752] ? rcu_read_lock_any_held+0x75/0xa0 [ 2966.251338] ? vfs_write+0x354/0xb10 [ 2966.251812] ? ksys_write+0x1a9/0x260 [ 2966.252305] ? __ia32_sys_read+0xb0/0xb0 [ 2966.252829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2966.253492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2966.254137] ? trace_hardirqs_on+0x5b/0x180 [ 2966.254680] do_syscall_64+0x33/0x40 [ 2966.255158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2966.255815] RIP: 0033:0x7fc070febb19 [ 2966.256304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2966.258647] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2966.259611] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2966.260520] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2966.261427] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2966.262321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2966.263211] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:25:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xd26) pipe(0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x9, 0x1000}) 03:25:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) mkdir(&(0x7f00000000c0)='./file0/../file0\x00', 0xa0) 03:25:04 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:04 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:04 executing program 1: r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2, 0x20000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x100, 0x40000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0xa) pipe(0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000080)=0xffffffffffffff31) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = getpgrp(0x0) r4 = getpgrp(0x0) r5 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000140)={r2}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r7 = getpgrp(0x0) r8 = getpgrp(0x0) r9 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r9, &(0x7f0000000140)={r6}) ptrace(0x10, r8) sendmsg$netlink(r1, &(0x7f0000001840)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc, &(0x7f0000001800)=[{&(0x7f00000001c0)={0x18, 0x1c, 0x1, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x76, 0x0, 0x0, @pid=r4}]}, 0x18}, {&(0x7f0000000240)={0x1e8, 0x1d, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x14e, 0xb, 0x0, 0x1, [@generic="9caa728a36ca73c620c0b4e07c9af7161474b3de6b81c718c29c8bc12b481f2d83147225274a6473cbfb90038bf21bead8053f0a5af5d42dbc7a504611399cf87ac3a11147e82dcc989f6ec708e2a1453c36b80c7d8a940e15b404333bf20e2a4b35d869f97dc5ac9ac00a5cab02cad68fd4fb67d9d58de5b5a79fab8dbb2cb0b457d00f2eedb11c883585b0442d79f3527961897705b2d3b3b4aa8c39d1fc4ae6e59a187b53c8410c66a832160ca3c9c648a71004bc6791d424dac22e14d9359c85203c5f0cb1cfccc739717c87", @generic="ad616a42f1e0627c70b2d67d6a3e803c7569d85e4c9de56f0677e227ec501b39b916778ce8fb0b0545faf140c952ebe2cf88dd28300ade59083a23336e41a441fee6d8c812207aca254f9a5ac05358bdd54af316db7a07674e525a04a69488784e1dfc43a782f569", @typed={0x14, 0x62, 0x0, 0x0, @ipv6=@private0}]}, @nested={0x87, 0x6a, 0x0, 0x1, [@typed={0xc, 0x95, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@remote}, @generic="a99009d60d9819321bbc456d67337bc7761c067c91fe7c89c40f72346aba43e0914f327f2097c10f0ad5249f1427e3a803f6c88f04a8489956d76d65376b6c6d1983ec06f4b3ede169f2016b053945bd7c16d59eda0d6078d7d242646907adcfb5bceb"]}]}, 0x1e8}, {&(0x7f0000000440)={0x1384, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xb6, 0x6a, 0x0, 0x1, [@generic="9dee38cd2ffcc42f322852a4c2561d0f083b8535b39129cbcbf391b10dbe49f734b80887504d12fbc58ab2f67fbee29b9ba2d00eb2df78a247e5f6515ec0b0014ea08f85b49f6c2edb2bf54053329433b9978db18bb90ce0a15ee0715e641050a222a5ce4aea502174ffc87522738707399d1b48e29eba22c745db67f3ac1cfbf1f8711e7126173a4294f0f617bc2d3f1989783f2ad5575a623653e24f5857142066d4f7c71652ae3322", @typed={0x5, 0x72, 0x0, 0x0, @str='\x00'}]}, @typed={0x5, 0x83, 0x0, 0x0, @str='\x00'}, @generic="efec5d27a390cb8ac2b748e6012f158590e25565011814fc66c0a457d2a074f788815508d565cbaf2f4a95b328d9055fcf7dd97d75641edef83ee42b6a13c0044bd92150e0fd83d38bbdee6c5cd1e102f51ade33d3a43721a332971dd41aab2d6f0164e33bb435b5f47ef029ac5e98aaf9b86d62e6cfecb6dc8a242a6b609d53ea3b4c4f007a543a835f0e91c89c38b984fd7b776603745ed98b9863811e011c2905c1f8bed1a4fbe07a193d012b9b7c6717c87d782d9cc1156a66dfe262a4bdafd7f00c76016cdc8f9e664b1a244190539429b84bf63020a3a7154104ef1a13e0d776050363a47afde0", @generic="39b40dbaeff46c50a152d39f6d114822a2fa9747afbd824c3c87eafd5e7e223e320b74b2650863a3358e471486c7ba1b6bea5866213187e422b0d50c7195c9f6e6c858a08c771e98da0e1348852202195f4571cde901c5836a180cbf6131e696704d05c1c7eff6efbb0be44b629030d0c5d98ed1aad7c9cedcb87e65708d31dff8f078d9eb9df8b29ffc9baf8f2a7666ca22afdc4417c6ddfb01e2f3f7f07c83ded7529a78ed36fa9e698c08b25cd2c1fac58b5d475498866e3ef9948c1dc12f4c1292", @generic="0aeff389ac8230c82b38c7b54d73e6d5aa1913d06dd0c849de8129479a0e0d98a10ec5a2fb62433ed279f55036d0a6c7bdec058ebdd12e602122a54efa853e3b8655a6854a4947cb2d8838397c83dd627c73893f6e1c820bcb6ae9e8d6fe3a5bd97e3d34f8086e84965c80c7fc6bca2235a3bdbe07863f5c1e157da23d3bb679899c058984cdd388e7772a0905f04dc3aad937080291ba45f3ec44434b9d455f30b354355ace9b32fcbd8f5a3df21eee9386ba45ce9b9449915fe54b69702710d9e1e3", @nested={0x1044, 0x38, 0x0, 0x1, [@generic="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", @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="e317cb3f", @generic="75ef7940f1bd5e2de705322d9c2ff074cfd4166e41db54ba0513702119359afc57c9ee81f35dfc42011e430f13f11888c2bc293e"]}]}, 0x1384}], 0x3}, 0x80) fstat(0xffffffffffffffff, &(0x7f0000000000)) 03:25:04 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2966.497285] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=17397 comm=syz-executor.1 [ 2966.515294] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=17433 comm=syz-executor.1 03:25:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 44) 03:25:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) 03:25:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)}, {&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/94, 0x5e}], 0x3) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 2966.594823] FAULT_INJECTION: forcing a failure. [ 2966.594823] name failslab, interval 1, probability 0, space 0, times 0 [ 2966.597196] CPU: 0 PID: 17439 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2966.598671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2966.600442] Call Trace: [ 2966.601021] dump_stack+0x107/0x167 [ 2966.601812] should_fail.cold+0x5/0xa [ 2966.602634] ? create_object.isra.0+0x3a/0xa20 [ 2966.603614] should_failslab+0x5/0x20 [ 2966.604439] kmem_cache_alloc+0x5b/0x310 [ 2966.605330] create_object.isra.0+0x3a/0xa20 [ 2966.606260] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2966.607358] kmem_cache_alloc+0x159/0x310 [ 2966.608363] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2966.609691] idr_get_free+0x4b5/0x8f0 [ 2966.610541] idr_alloc_u32+0x170/0x2d0 [ 2966.611381] ? __fprop_inc_percpu_max+0x130/0x130 [ 2966.612409] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2966.613554] ? lock_release+0x680/0x680 [ 2966.614416] idr_alloc+0xc2/0x130 [ 2966.615167] ? idr_alloc_u32+0x2d0/0x2d0 [ 2966.616024] ? rwlock_bug.part.0+0x90/0x90 [ 2966.616963] p9_client_prepare_req.part.0+0x612/0xac0 [ 2966.618071] p9_client_rpc+0x220/0x1370 [ 2966.618914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2966.620053] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2966.621197] ? pipe_poll+0x21b/0x800 [ 2966.621981] ? p9_fd_close+0x4a0/0x4a0 [ 2966.622805] ? wait_for_partner+0x3c0/0x3c0 [ 2966.623730] ? p9_fd_poll+0x1e0/0x2c0 [ 2966.624568] ? p9_fd_create+0x357/0x4a0 [ 2966.625409] ? p9_conn_create+0x510/0x510 [ 2966.626290] ? p9_client_create+0x798/0x1230 [ 2966.627224] ? kfree+0xd7/0x340 [ 2966.627924] ? do_raw_spin_unlock+0x4f/0x220 [ 2966.628888] p9_client_create+0xa76/0x1230 [ 2966.629822] ? p9_client_flush+0x430/0x430 [ 2966.630727] ? trace_hardirqs_on+0x5b/0x180 [ 2966.631656] ? lockdep_init_map_type+0x2c7/0x780 [ 2966.632707] ? __raw_spin_lock_init+0x36/0x110 [ 2966.632745] v9fs_session_init+0x1dd/0x1680 [ 2966.632769] ? lock_release+0x680/0x680 [ 2966.632810] ? kmem_cache_alloc_trace+0x151/0x320 [ 2966.632834] ? v9fs_show_options+0x690/0x690 [ 2966.637059] ? trace_hardirqs_on+0x5b/0x180 [ 2966.637994] ? kasan_unpoison_shadow+0x33/0x50 [ 2966.638967] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2966.640044] v9fs_mount+0x79/0x8f0 [ 2966.640826] ? v9fs_write_inode+0x60/0x60 [ 2966.641708] legacy_get_tree+0x105/0x220 [ 2966.642573] vfs_get_tree+0x8e/0x300 [ 2966.643363] path_mount+0x1429/0x2120 [ 2966.644179] ? strncpy_from_user+0x9e/0x470 [ 2966.645108] ? finish_automount+0xa90/0xa90 [ 2966.646023] ? getname_flags.part.0+0x1dd/0x4f0 [ 2966.647000] ? _copy_from_user+0xfb/0x1b0 [ 2966.647904] __x64_sys_mount+0x282/0x300 [ 2966.648783] ? copy_mnt_ns+0xa00/0xa00 [ 2966.649631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2966.650746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2966.651852] do_syscall_64+0x33/0x40 [ 2966.652659] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2966.653752] RIP: 0033:0x7f3eebf31b19 [ 2966.654548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2966.658518] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2966.660163] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2966.661716] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2966.663238] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2966.664772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2966.666295] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2980.201079] FAULT_INJECTION: forcing a failure. [ 2980.201079] name failslab, interval 1, probability 0, space 0, times 0 [ 2980.203750] CPU: 0 PID: 17552 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2980.205220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2980.206963] Call Trace: [ 2980.207524] dump_stack+0x107/0x167 [ 2980.208296] should_fail.cold+0x5/0xa [ 2980.209112] ? alloc_fdtable+0x84/0x280 [ 2980.209953] should_failslab+0x5/0x20 [ 2980.210752] kmem_cache_alloc_trace+0x55/0x320 [ 2980.211710] ? rwlock_bug.part.0+0x90/0x90 [ 2980.212608] alloc_fdtable+0x84/0x280 [ 2980.213411] dup_fd+0x92e/0xf40 [ 2980.214132] copy_process+0x197e/0x7800 [ 2980.214969] ? mark_lock+0xf5/0x2df0 [ 2980.215776] ? lock_acquire+0x197/0x470 [ 2980.216617] ? find_held_lock+0x2c/0x110 [ 2980.217504] ? __cleanup_sighand+0xb0/0xb0 [ 2980.218424] ? _copy_from_user+0xfb/0x1b0 [ 2980.219302] kernel_clone+0xe7/0x980 [ 2980.220103] ? lock_acquire+0x197/0x470 [ 2980.220962] ? create_io_thread+0xf0/0xf0 [ 2980.221875] __do_sys_clone3+0x1e5/0x320 [ 2980.222744] ? __do_sys_clone+0x110/0x110 [ 2980.223632] ? lock_downgrade+0x6d0/0x6d0 [ 2980.224548] ? rcu_read_lock_any_held+0x75/0xa0 [ 2980.225535] ? vfs_write+0x354/0xb10 [ 2980.226345] ? ksys_write+0x1a9/0x260 [ 2980.227173] ? __ia32_sys_read+0xb0/0xb0 [ 2980.228066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2980.229218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2980.230337] ? trace_hardirqs_on+0x5b/0x180 [ 2980.231281] do_syscall_64+0x33/0x40 [ 2980.232094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2980.233228] RIP: 0033:0x7fc070febb19 [ 2980.234050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2980.238094] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2980.239755] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2980.241321] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2980.242875] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2980.244428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2980.245995] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:25:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 45) 03:25:18 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182312, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:18 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) 03:25:18 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018230e, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x4, &(0x7f0000000300)=[{&(0x7f0000000080)="58e0c974ec8f8656b0630d807a5b6c5c51cadc100812c0965ba9105a36a786c527e73bcb843f466d69119c64ae98f625ec51843634a6eae651ff556f39d928793a19c11f658350db597821cea7eccbfe0ee2dc2f1c850a7f889623e9e828aa4952489bfad236d979c40c0d2676205c8179ff05ec32060e4297083273d90491b5e28adf79", 0x84, 0x4}, {&(0x7f0000000140)="bf186d6d53bdcc6641d39cce7b6ad203ce015c6245a5396af6f464d34bc30d56c9218d5ab0f6b1f3722d8482", 0x2c, 0xc05}, {&(0x7f0000000180)="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", 0xff, 0x2}, {&(0x7f0000000280)="fefd6e36c0a502cfa2bff6d6ed64388da035509ae85805c307cd57c1752addbefa94fb76fd5d3134b917f487f70c1f329da46fd5a20a79204327e7d21df349e12af0e68d81521a8a815ff04d526ad959499fafe456d10a5716c333c253b36f47d532ae2caf7e2af1cf6003f6a9220ffb795dc554", 0x74, 0x1000}], 0x2000004, &(0x7f0000000380)={[{@nodots}, {@dots}, {@fat=@dos1xfloppy}], [{@fowner_eq}, {@obj_role={'obj_role', 0x3d, '&(-}'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) r4 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r5 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r4}) keyctl$chown(0x4, r4, 0xee01, r5) write$bt_hci(r2, &(0x7f0000000040)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x5, @none}}}, 0xb) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r1, @ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32, @ANYRES16=r6, @ANYRESOCT=r7, @ANYRESOCT=r3], 0x4c, 0x2) fchownat(r0, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, r5, 0x1000) 03:25:18 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182314, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:18 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x2}, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x1, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) sendmsg$unix(r2, &(0x7f0000001740)={&(0x7f00000000c0)=@file={0x0, './file0/file1\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000001640)="c3161c42d3decc4fe00770aa98873fadba52138cd4c10f63a27b7269e795c846bcd20e4650b9270c7f08dc06096f4f9e5db94fdd136a108a941cfe0631e93500d4c636b2fb87306e89a771068bf39e825214df6574df085c31f0bc815c1c6382ed67c3886b24e0fa18eb04d6d417e674ec025f249b44957d9185b2bf339b74fa168816fcda2532bbaf6cf08e40a34e282405b9805f17fce214b394e25c13c44093bd5c70e64386ab011a94204c5bfb938ac36e8983b27e994e95f720ddb5f2f3d82636c076975e2125053ed736", 0xcd}, {&(0x7f0000001a40)="9aadaf84c6e4addcc5bb7bbd2c2edc75bfcbe627b9e1b1f4e860e6b04d249419d057ee30e8ad3c23076d018ab1fd1c114f797ba8e123b41cbf919e8ae0c1856d9611e947057ceca5180a6a355e0b21210c74deb12f6b58d1d3d97e3d861dbea417e70ebaf8be6da9776da56989cacef2372a711f2a615d97813703efaa9dae0e503a", 0x82}, {&(0x7f0000001b00)="4cc639a86191254dd2586c4ca833289fbc1b0b504850ae74ccc61d58314139c2284be97921fd91332779a69e5edf5e1b83482e9a1b3efd6cacb390555138fe55d774d22ebcc8334a8b268cc9d1ec21394d512a243505b677dbf7131ed412b18de7b6e87a2f7409b6d2c3124ad237b02f48313bd8781f8286b6bd5f9768b61b1bf3dc9fc5039644cbf1d8600e2b0f130c9071a9bdfbe18039fc946277bb9614f6", 0xa0}], 0x3, &(0x7f0000001880)=ANY=[@ANYBLOB="28000d000080e9000000002001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x810}, 0xc0) [ 2980.259348] FAULT_INJECTION: forcing a failure. [ 2980.259348] name failslab, interval 1, probability 0, space 0, times 0 [ 2980.261831] CPU: 1 PID: 17557 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2980.263334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2980.265142] Call Trace: [ 2980.265731] dump_stack+0x107/0x167 [ 2980.266537] should_fail.cold+0x5/0xa ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:25:18 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2980.267382] ? create_object.isra.0+0x3a/0xa20 [ 2980.268563] should_failslab+0x5/0x20 [ 2980.269380] kmem_cache_alloc+0x5b/0x310 [ 2980.270260] create_object.isra.0+0x3a/0xa20 [ 2980.271211] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2980.271248] kmem_cache_alloc+0x159/0x310 [ 2980.271293] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2980.271333] idr_get_free+0x4b5/0x8f0 [ 2980.271390] idr_alloc_u32+0x170/0x2d0 [ 2980.271426] ? __fprop_inc_percpu_max+0x130/0x130 [ 2980.271459] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2980.271495] ? lock_release+0x680/0x680 [ 2980.271527] idr_alloc+0xc2/0x130 [ 2980.271550] ? idr_alloc_u32+0x2d0/0x2d0 [ 2980.271567] ? rwlock_bug.part.0+0x90/0x90 [ 2980.271620] p9_client_prepare_req.part.0+0x612/0xac0 [ 2980.271665] p9_client_rpc+0x220/0x1370 [ 2980.283640] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2980.284758] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2980.285909] ? pipe_poll+0x21b/0x800 [ 2980.286705] ? p9_fd_close+0x4a0/0x4a0 [ 2980.287536] ? wait_for_partner+0x3c0/0x3c0 [ 2980.288460] ? p9_fd_poll+0x1e0/0x2c0 [ 2980.289295] ? p9_fd_create+0x357/0x4a0 [ 2980.290268] ? p9_conn_create+0x510/0x510 [ 2980.291345] ? p9_client_create+0x798/0x1230 [ 2980.292255] ? kfree+0xd7/0x340 [ 2980.292969] ? do_raw_spin_unlock+0x4f/0x220 [ 2980.293928] p9_client_create+0xa76/0x1230 [ 2980.294850] ? p9_client_flush+0x430/0x430 [ 2980.295757] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2980.296843] ? lockdep_init_map_type+0x2c7/0x780 [ 2980.297862] ? __raw_spin_lock_init+0x36/0x110 [ 2980.298879] v9fs_session_init+0x1dd/0x1680 [ 2980.299813] ? lock_release+0x680/0x680 [ 2980.300700] ? kmem_cache_alloc_trace+0x151/0x320 [ 2980.301730] ? v9fs_show_options+0x690/0x690 [ 2980.302697] ? trace_hardirqs_on+0x5b/0x180 [ 2980.303625] ? kasan_unpoison_shadow+0x33/0x50 [ 2980.304607] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2980.305696] v9fs_mount+0x79/0x8f0 [ 2980.306461] ? v9fs_write_inode+0x60/0x60 [ 2980.307348] legacy_get_tree+0x105/0x220 [ 2980.308232] vfs_get_tree+0x8e/0x300 [ 2980.309035] path_mount+0x1429/0x2120 [ 2980.309864] ? strncpy_from_user+0x9e/0x470 [ 2980.310798] ? finish_automount+0xa90/0xa90 [ 2980.311721] ? getname_flags.part.0+0x1dd/0x4f0 [ 2980.312724] ? _copy_from_user+0xfb/0x1b0 [ 2980.313630] __x64_sys_mount+0x282/0x300 [ 2980.314499] ? copy_mnt_ns+0xa00/0xa00 [ 2980.315339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2980.316457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2980.317588] do_syscall_64+0x33/0x40 [ 2980.318392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2980.319484] RIP: 0033:0x7f3eebf31b19 [ 2980.320280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2980.324227] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2980.325866] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2980.327397] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2980.328933] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2980.330475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2980.332006] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:25:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0x0, 0x82}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f0000000040)='-^\x00', 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000000700000008000300a7b07d93b6b6a2c636549791995e4e76", @ANYRES32=r2, @ANYBLOB="1400040069b9365f0100000000dc16d90416d55eb979ea77a173000008c8bd00040000000400cc00"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x54, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "7733c6e8cf79c4620fd4a3ff1a2101ab"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ba4120898306"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x54}, 0x1, 0x0, 0x0, 0x48084}, 0x800) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0xa43e5000) fcntl$setstatus(r1, 0x4, 0x40800) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10004800}, 0x4000) 03:25:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) flock(r0, 0xa) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 2980.535920] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2980.647964] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 03:25:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 46) 03:25:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) [ 2980.744580] FAULT_INJECTION: forcing a failure. [ 2980.744580] name failslab, interval 1, probability 0, space 0, times 0 [ 2980.747200] CPU: 1 PID: 17688 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2980.748636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2980.750333] Call Trace: [ 2980.750889] dump_stack+0x107/0x167 [ 2980.751650] should_fail.cold+0x5/0xa [ 2980.752444] ? p9pdu_readf+0xadb/0x1d40 [ 2980.753299] should_failslab+0x5/0x20 [ 2980.754092] __kmalloc+0x72/0x390 [ 2980.754827] p9pdu_readf+0xadb/0x1d40 [ 2980.755624] ? pipe_poll+0x21b/0x800 [ 2980.756420] ? p9pdu_writef+0x100/0x100 [ 2980.757257] ? p9_fd_poll+0x1e0/0x2c0 [ 2980.758062] ? p9_fd_create+0x357/0x4a0 [ 2980.758884] ? p9_conn_create+0x510/0x510 [ 2980.759732] ? p9_client_create+0x798/0x1230 [ 2980.760654] ? kfree+0xd7/0x340 [ 2980.761332] ? do_raw_spin_unlock+0x4f/0x220 [ 2980.762274] p9_client_create+0xaee/0x1230 [ 2980.763163] ? p9_client_flush+0x430/0x430 [ 2980.764049] ? trace_hardirqs_on+0x5b/0x180 [ 2980.764949] ? lockdep_init_map_type+0x2c7/0x780 [ 2980.765932] ? __raw_spin_lock_init+0x36/0x110 [ 2980.766916] v9fs_session_init+0x1dd/0x1680 [ 2980.767801] ? lock_release+0x680/0x680 [ 2980.768652] ? kmem_cache_alloc_trace+0x151/0x320 [ 2980.769649] ? v9fs_show_options+0x690/0x690 [ 2980.770574] ? trace_hardirqs_on+0x5b/0x180 [ 2980.771471] ? kasan_unpoison_shadow+0x33/0x50 [ 2980.772408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2980.773479] v9fs_mount+0x79/0x8f0 [ 2980.774214] ? v9fs_write_inode+0x60/0x60 [ 2980.775101] legacy_get_tree+0x105/0x220 [ 2980.775953] vfs_get_tree+0x8e/0x300 [ 2980.776735] path_mount+0x1429/0x2120 [ 2980.777539] ? strncpy_from_user+0x9e/0x470 [ 2980.778426] ? finish_automount+0xa90/0xa90 [ 2980.779318] ? getname_flags.part.0+0x1dd/0x4f0 [ 2980.780282] ? _copy_from_user+0xfb/0x1b0 [ 2980.781157] __x64_sys_mount+0x282/0x300 [ 2980.781995] ? copy_mnt_ns+0xa00/0xa00 [ 2980.782807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2980.783885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2980.784964] do_syscall_64+0x33/0x40 [ 2980.785733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2980.786780] RIP: 0033:0x7f3eebf31b19 [ 2980.787544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2980.791309] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2980.792899] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2980.794353] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2980.795809] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2980.797271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2980.798741] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:25:18 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r1, 0x0, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@private1, r4}, 0x14) sendmsg$inet6(r1, &(0x7f0000000a80)={&(0x7f0000000540)={0xa, 0x4e23, 0x1ff, @loopback, 0x1}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000580)="0b2db8402543344661903bf8ca2404f3b2782f5340d47997d537b7dcb4025ef9a02a166fe7e076e12e6878ede5b0f3b6d1c16577aae96f16346edce6f75dd99fcb2f80bbf80a7bf92491c44bf4d2ed4dd879e8a4c4522d6263614446b808b14b11991d6691c735a0b1ed63260a46e8defbdfd4b7fa55fdd4c06bf425b8a42b071ff30ef7c08f605384f28d2eaf8c873c70", 0x91}, {&(0x7f0000000640)}, {&(0x7f0000000680)="11f7338c", 0x4}, {&(0x7f00000006c0)="ade16f80463fa8065547ba530d9f447c6144e1e69cb00acff9cd56afb1c53836d94b708a9dd94640c053fe9dfaf4c72f9dd7d7a97aceba3845598068c1982dfb1ee074c5a6218307a232b5a4e080f21bb115c4180cd50b65be056da22b6bfe5d43f19002775a9411750cc66aa01f838d733a99a84cc99edb014a1f1db8e9218f5ef7a9975e078e035e75481b8d405a", 0x8f}], 0x4, &(0x7f00000007c0)=[@rthdr={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3b}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x3a, 0xb, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x6, [0x40, 0x2, 0x8, 0x9, 0xfffffffffffffff8, 0x1, 0x6000000000]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x7f}]}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x84, 0xe, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xff, [0x7, 0x0, 0x80, 0x4, 0x9, 0x9]}}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0xa2}, @generic={0x1, 0x7, "754ba3fd4ec38b"}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x1, 0x11, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x81, 0x7, [0x7, 0x5, 0xfffffffffffffffb]}}, @enc_lim, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x40, 0xffe0, [0x5, 0x0, 0x100000001, 0xfc, 0x5, 0x10000000000, 0x38]}}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x60000000}}, @tclass={{0x14, 0x29, 0x43, 0xff}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x541}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x288}, 0x90) lseek(r0, 0x0, 0x4) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000140)={0xa, 0x4e20, 0xc71, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000180)="ea56f051d7270087afd66cc80b7b1c84cd3df37b0b6602e1adac5410a2b02492d6b29e1adabef3cdcd5ab089a148849e977a4a3e218fac0f58bdd7e5f2f4ce619baab22dcd6bd9e81cb001f2284798dbdd78eceb63d73108cf280d53256b49c9ca2e2d18d39c18e318dcedad56030503dddfb54be7fc5f461410b11dfaaf83eeb13459736a82a859f87e04943dacde4136297d1924950b792d0a4c0339ffa420ef7f9444b41ef79054ef604e455e38d8ed83cf9268e4b20b1473ebab424bb9a63097623c3b1da0ec744ebfe52b36decfaadd974f36727227514d96efa4db67", 0xdf}, {&(0x7f0000000280)="00ea65d086a83b3f39b84d3445bbc16fc8cabaa748e6ce18e779b07fdea377971708c5ee610cd95d2fad634366ffd6718d223c274ec4002a2dcee49833e4ca407f290f849b1e2711bd1af677c05ab3ecf6df31b47a55d37b15ecec624242ec2d4a0c576c25b5aca89704b30ee3a008e4c2528c1487cb138e21e8336f3f30f9658e8a2c5ceca34771eac4ae04f305154b3011c6ed81a508d445e70f48ee9c2ddf4257f7285e0794d7f81361123670c762", 0xb0}, {&(0x7f0000000340)="b0809eac8d3d2fc97338f0165aa2180c2f7837ed76386da97a008748dc12506207d7aaea989e8a931c969ef21224b6bb1b6c9facd0010ff8b52a48fb281959d0970d9a49d413497b681f1ee5d1d0fcad3e763151cf2521be266e6ce195ae38923434", 0x62}, {&(0x7f00000003c0)="483f7b5a414337c9f931777226c2e1a7342c4ba84e98db2733b3c768762b18a60033d031000beeb17df9cb7503589b7873ddb81566c1fc748788af9fc6ed23eb64391844b83a6c4eb03aca254c084c9d46a3b5ead49ed7972aef89d6fba3b887a14b25f1eecef6f9369a7a8d9c37a280572d6350f40d6eede19af12e3d9a4f9c828c75d296c9b8b4660acfb9ba4f00b85ee63094e68516781d63e7a437b7c46bbcea083073d11a798fe70f3c999d4ead806576614f1569024605f03e384860fbca5ed9f344ca", 0xc6}], 0x4}, 0x60000040) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000040)=""/1, 0x1}, {&(0x7f0000000080)=""/67, 0x43}], 0x2) 03:25:18 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 47) [ 2980.926796] audit: type=1400 audit(1747538719.045:12): avc: denied { read } for pid=17795 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 03:25:19 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182314, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1073410, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x78, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x48020200) 03:25:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182310, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:19 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182315, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:19 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) [ 2981.041017] FAULT_INJECTION: forcing a failure. [ 2981.041017] name failslab, interval 1, probability 0, space 0, times 0 03:25:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f00000001c0)='\x00\xd2\xf1\x87\xaa|xQ\r\x83Jg\xd1\xdc\xf6V\xb0\xfd\xd2UL\xec\f\x1b@/\x9e\xbb\xbe>\xf5\xe9\xbc\xf3\x11\x81\xbe\x10\x1d.\x0e\x96*5E)@Z\xd1[\t4Y\xe5\xa0\x05\xb3\x1c\x1f\x05\r\x02z\xfeI\xccK\xaf\x96}\x0f\x1fl\xa3q\x95\xf5\x9eU\xad\xf7\xa6\x1f\xe1\xc18\xcfF\xf5B\x94v(h\x81>\'X\x04\xc5\xe2\xda\xf6\xff\x94\x9b_8cV,\xa3\tQ\xf6\xef\xcd\xe9\xa1.\xea<\x05\xba\xf5\xec!>\x9f\xc3\xad)\xe3V\xa4\x96\x05\xb3\xab\xaa\x1b?\xace\x01\xc9\xd8\x06$n\xa9\x8f&\f.DJ\r&y', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r2, 0x0, 0x4) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x10) lseek(r1, 0x0, 0x4) pipe(0x0) [ 2981.041042] CPU: 0 PID: 17807 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2981.041054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.041061] Call Trace: [ 2981.041088] dump_stack+0x107/0x167 [ 2981.041116] should_fail.cold+0x5/0xa [ 2981.041145] ? p9pdu_readf+0xadb/0x1d40 [ 2981.041176] should_failslab+0x5/0x20 [ 2981.041196] __kmalloc+0x72/0x390 [ 2981.041228] p9pdu_readf+0xadb/0x1d40 [ 2981.041261] ? pipe_poll+0x21b/0x800 [ 2981.041282] ? p9pdu_writef+0x100/0x100 03:25:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 48) [ 2981.041304] ? p9_fd_poll+0x1e0/0x2c0 [ 2981.041338] ? p9_fd_create+0x357/0x4a0 [ 2981.041357] ? p9_conn_create+0x510/0x510 [ 2981.041376] ? p9_client_create+0x798/0x1230 [ 2981.041397] ? kfree+0xd7/0x340 [ 2981.041414] ? do_raw_spin_unlock+0x4f/0x220 [ 2981.041452] p9_client_create+0xaee/0x1230 [ 2981.041493] ? p9_client_flush+0x430/0x430 [ 2981.041520] ? trace_hardirqs_on+0x5b/0x180 [ 2981.041545] ? lockdep_init_map_type+0x2c7/0x780 [ 2981.041574] ? __raw_spin_lock_init+0x36/0x110 [ 2981.041609] v9fs_session_init+0x1dd/0x1680 [ 2981.041633] ? lock_release+0x680/0x680 [ 2981.041671] ? kmem_cache_alloc_trace+0x151/0x320 [ 2981.041694] ? v9fs_show_options+0x690/0x690 [ 2981.041736] ? trace_hardirqs_on+0x5b/0x180 [ 2981.041762] ? kasan_unpoison_shadow+0x33/0x50 [ 2981.041782] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 03:25:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 49) [ 2981.041811] v9fs_mount+0x79/0x8f0 [ 2981.041835] ? v9fs_write_inode+0x60/0x60 [ 2981.041859] legacy_get_tree+0x105/0x220 [ 2981.041886] vfs_get_tree+0x8e/0x300 [ 2981.041908] path_mount+0x1429/0x2120 [ 2981.041938] ? strncpy_from_user+0x9e/0x470 03:25:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000980), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f0000000c00)=""/205, 0xcd}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000380)=""/98, 0x62}, {&(0x7f0000000400)=""/38, 0x26}, {&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000700)=""/117, 0x75}], 0xa, &(0x7f0000000d00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xf8}, 0x2121) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000880)={0x6, 0x398, 0x6, 0x0, 0x0, [{{r1}, 0x2}, {{r0}, 0x3}, {{r0}, 0x8}, {{r0}}, {{r2}, 0x6}, {{r0}, 0x200}]}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x40, 0x6, 0x20, 0x0, 0x5, 0x101, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x0, 0x6}, 0x624, 0x9, 0x401, 0x4, 0x0, 0x8, 0xcc, 0x0, 0x5, 0x0, 0xffffffffffff8000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0x1000, 0x86d7}}, './file0\x00'}) syz_io_uring_setup(0x2bc1, &(0x7f0000000a40)={0x0, 0x60c7, 0x4, 0x2, 0x351, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) [ 2981.041962] ? finish_automount+0xa90/0xa90 [ 2981.041984] ? getname_flags.part.0+0x1dd/0x4f0 [ 2981.042005] ? _copy_from_user+0xfb/0x1b0 [ 2981.042045] __x64_sys_mount+0x282/0x300 [ 2981.042066] ? copy_mnt_ns+0xa00/0xa00 [ 2981.042095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.042118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.042148] do_syscall_64+0x33/0x40 [ 2981.042169] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.042183] RIP: 0033:0x7f3eebf31b19 [ 2981.042202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2981.042214] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2981.042237] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2981.042250] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2981.042261] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2981.042273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2981.042285] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2981.129079] FAULT_INJECTION: forcing a failure. [ 2981.129079] name failslab, interval 1, probability 0, space 0, times 0 [ 2981.129100] CPU: 0 PID: 17820 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2981.129110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.129123] Call Trace: [ 2981.129147] dump_stack+0x107/0x167 [ 2981.129166] should_fail.cold+0x5/0xa [ 2981.129192] ? create_object.isra.0+0x3a/0xa20 [ 2981.129212] should_failslab+0x5/0x20 [ 2981.129229] kmem_cache_alloc+0x5b/0x310 [ 2981.129252] create_object.isra.0+0x3a/0xa20 [ 2981.129267] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2981.129290] kmem_cache_alloc_trace+0x151/0x320 [ 2981.129314] alloc_fdtable+0x84/0x280 [ 2981.129333] dup_fd+0x92e/0xf40 [ 2981.129364] copy_process+0x197e/0x7800 [ 2981.129384] ? mark_lock+0xf5/0x2df0 [ 2981.129408] ? lock_acquire+0x197/0x470 [ 2981.129423] ? find_held_lock+0x2c/0x110 [ 2981.129455] ? __cleanup_sighand+0xb0/0xb0 [ 2981.129486] ? _copy_from_user+0xfb/0x1b0 [ 2981.129511] kernel_clone+0xe7/0x980 [ 2981.129529] ? lock_acquire+0x197/0x470 [ 2981.129545] ? create_io_thread+0xf0/0xf0 [ 2981.129585] __do_sys_clone3+0x1e5/0x320 [ 2981.129601] ? __do_sys_clone+0x110/0x110 [ 2981.129618] ? lock_downgrade+0x6d0/0x6d0 [ 2981.129651] ? rcu_read_lock_any_held+0x75/0xa0 [ 2981.129667] ? vfs_write+0x354/0xb10 [ 2981.129690] ? ksys_write+0x1a9/0x260 [ 2981.129709] ? __ia32_sys_read+0xb0/0xb0 [ 2981.129731] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.129749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.129763] ? trace_hardirqs_on+0x5b/0x180 [ 2981.129783] do_syscall_64+0x33/0x40 [ 2981.129801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.129813] RIP: 0033:0x7fc070febb19 [ 2981.129829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2981.129839] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2981.129858] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2981.129868] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2981.129878] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2981.129888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2981.129898] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2981.173565] FAULT_INJECTION: forcing a failure. [ 2981.173565] name failslab, interval 1, probability 0, space 0, times 0 [ 2981.173586] CPU: 0 PID: 17839 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2981.173597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.173604] Call Trace: [ 2981.173627] dump_stack+0x107/0x167 [ 2981.173653] should_fail.cold+0x5/0xa [ 2981.173685] should_failslab+0x5/0x20 [ 2981.173704] __kmalloc_track_caller+0x79/0x370 [ 2981.173721] ? kasprintf+0xbb/0xf0 [ 2981.173740] ? __delete_object+0xb3/0x100 [ 2981.173769] kvasprintf+0xb5/0x150 [ 2981.173791] ? bust_spinlocks+0xe0/0xe0 [ 2981.173810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.173860] kasprintf+0xbb/0xf0 [ 2981.173882] ? kvasprintf_const+0x1a0/0x1a0 [ 2981.173909] ? kmem_cache_free+0x249/0x2d0 [ 2981.173953] ? p9_client_create+0xbfa/0x1230 [ 2981.173982] p9_client_create+0xc1b/0x1230 [ 2981.174021] ? p9_client_flush+0x430/0x430 [ 2981.174046] ? trace_hardirqs_on+0x5b/0x180 [ 2981.174069] ? lockdep_init_map_type+0x2c7/0x780 [ 2981.174097] ? __raw_spin_lock_init+0x36/0x110 [ 2981.174130] v9fs_session_init+0x1dd/0x1680 [ 2981.174152] ? lock_release+0x680/0x680 [ 2981.174188] ? kmem_cache_alloc_trace+0x151/0x320 [ 2981.174210] ? v9fs_show_options+0x690/0x690 [ 2981.174250] ? trace_hardirqs_on+0x5b/0x180 [ 2981.174274] ? kasan_unpoison_shadow+0x33/0x50 [ 2981.174293] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2981.174320] v9fs_mount+0x79/0x8f0 [ 2981.174343] ? v9fs_write_inode+0x60/0x60 [ 2981.174365] legacy_get_tree+0x105/0x220 [ 2981.174390] vfs_get_tree+0x8e/0x300 [ 2981.174410] path_mount+0x1429/0x2120 [ 2981.174439] ? strncpy_from_user+0x9e/0x470 [ 2981.174462] ? finish_automount+0xa90/0xa90 [ 2981.174483] ? getname_flags.part.0+0x1dd/0x4f0 [ 2981.174502] ? _copy_from_user+0xfb/0x1b0 [ 2981.174540] __x64_sys_mount+0x282/0x300 [ 2981.174560] ? copy_mnt_ns+0xa00/0xa00 [ 2981.174587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.174608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.174636] do_syscall_64+0x33/0x40 [ 2981.174655] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.174668] RIP: 0033:0x7f3eebf31b19 [ 2981.174686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2981.174697] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2981.174719] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2981.174730] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2981.174742] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2981.174753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2981.174764] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2981.302019] FAULT_INJECTION: forcing a failure. [ 2981.302019] name failslab, interval 1, probability 0, space 0, times 0 [ 2981.398119] CPU: 1 PID: 17925 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2981.398128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.398134] Call Trace: [ 2981.398156] dump_stack+0x107/0x167 [ 2981.398178] should_fail.cold+0x5/0xa [ 2981.398198] ? create_object.isra.0+0x3a/0xa20 [ 2981.398218] should_failslab+0x5/0x20 [ 2981.398233] kmem_cache_alloc+0x5b/0x310 [ 2981.398249] ? vsnprintf+0x4ba/0x1600 [ 2981.398271] create_object.isra.0+0x3a/0xa20 [ 2981.398283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2981.398308] __kmalloc_track_caller+0x177/0x370 [ 2981.398322] ? kasprintf+0xbb/0xf0 [ 2981.398350] kvasprintf+0xb5/0x150 [ 2981.407865] ? bust_spinlocks+0xe0/0xe0 [ 2981.407882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.407921] kasprintf+0xbb/0xf0 [ 2981.407938] ? kvasprintf_const+0x1a0/0x1a0 [ 2981.407959] ? kmem_cache_free+0x249/0x2d0 [ 2981.407987] ? p9_client_create+0xbfa/0x1230 [ 2981.408009] p9_client_create+0xc1b/0x1230 [ 2981.408039] ? p9_client_flush+0x430/0x430 [ 2981.408059] ? trace_hardirqs_on+0x5b/0x180 [ 2981.408077] ? lockdep_init_map_type+0x2c7/0x780 [ 2981.408099] ? __raw_spin_lock_init+0x36/0x110 [ 2981.408125] v9fs_session_init+0x1dd/0x1680 [ 2981.408143] ? lock_release+0x680/0x680 [ 2981.408171] ? kmem_cache_alloc_trace+0x151/0x320 [ 2981.408188] ? v9fs_show_options+0x690/0x690 [ 2981.408219] ? trace_hardirqs_on+0x5b/0x180 [ 2981.408238] ? kasan_unpoison_shadow+0x33/0x50 [ 2981.408252] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2981.408274] v9fs_mount+0x79/0x8f0 [ 2981.408293] ? v9fs_write_inode+0x60/0x60 [ 2981.408311] legacy_get_tree+0x105/0x220 [ 2981.408331] vfs_get_tree+0x8e/0x300 [ 2981.408347] path_mount+0x1429/0x2120 [ 2981.408370] ? strncpy_from_user+0x9e/0x470 [ 2981.408387] ? finish_automount+0xa90/0xa90 [ 2981.408404] ? getname_flags.part.0+0x1dd/0x4f0 [ 2981.408419] ? _copy_from_user+0xfb/0x1b0 [ 2981.408448] __x64_sys_mount+0x282/0x300 [ 2981.408464] ? copy_mnt_ns+0xa00/0xa00 [ 2981.408485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.408501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.408531] do_syscall_64+0x33/0x40 [ 2981.408547] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.408557] RIP: 0033:0x7f3eebf31b19 [ 2981.408571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2981.408579] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2981.408596] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2981.408605] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2981.408614] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2981.408623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2981.408632] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:25:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x40800, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000015c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc0400040}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x92}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745e9982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d000000000000000009919231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5865385bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:25:34 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:34 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) 03:25:34 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182318, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 50) 03:25:34 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182311, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:34 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182315, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2996.030887] FAULT_INJECTION: forcing a failure. [ 2996.030887] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.033509] CPU: 1 PID: 17942 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2996.034971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2996.036714] Call Trace: [ 2996.037278] dump_stack+0x107/0x167 [ 2996.038056] should_fail.cold+0x5/0xa [ 2996.038863] ? kvmalloc_node+0x119/0x170 [ 2996.039717] should_failslab+0x5/0x20 03:25:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x1, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) [ 2996.040528] __kmalloc_node+0x76/0x420 [ 2996.041470] kvmalloc_node+0x119/0x170 [ 2996.042292] alloc_fdtable+0xd3/0x280 [ 2996.043090] dup_fd+0x92e/0xf40 [ 2996.043806] copy_process+0x197e/0x7800 [ 2996.044659] ? mark_lock+0xf5/0x2df0 [ 2996.045449] ? lock_acquire+0x197/0x470 [ 2996.046282] ? find_held_lock+0x2c/0x110 [ 2996.047153] ? __cleanup_sighand+0xb0/0xb0 [ 2996.048063] ? _copy_from_user+0xfb/0x1b0 [ 2996.048952] kernel_clone+0xe7/0x980 [ 2996.049751] ? lock_acquire+0x197/0x470 [ 2996.050594] ? create_io_thread+0xf0/0xf0 [ 2996.051486] __do_sys_clone3+0x1e5/0x320 [ 2996.052336] ? __do_sys_clone+0x110/0x110 [ 2996.053211] ? lock_downgrade+0x6d0/0x6d0 [ 2996.054102] ? rcu_read_lock_any_held+0x75/0xa0 [ 2996.055074] ? vfs_write+0x354/0xb10 [ 2996.055860] ? ksys_write+0x1a9/0x260 [ 2996.056665] ? __ia32_sys_read+0xb0/0xb0 [ 2996.057667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 03:25:34 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) pipe(0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x3, 0x4, &(0x7f0000000700)=[{&(0x7f00000003c0)="e5a85c217e1f546a9d83867e1560a9365b6061b83e536c89f2abf87a86c05e02aefa6c0ec76c5df37a94bb77c6f6dae415f42b6edd6060b7d06ac9333440d9fdffe4dbc3609ad45ebeaae0e0bf56e39bcc95ba48787b981cc5112a1dcd", 0x5d, 0x9}, {&(0x7f0000000440)="3e346366e4f3ee1d538600083388bd6456b087b794729dd6635afabb1a858353958c8ddd31164ba7694c156b2e59b912da095605b315eb33045f5005d9a24547c262f086a3d0a3d48e603c553894177a11d0605ce26e1b64d9b58f8f805490ef002938e8c746a6f4a3c63030827b165b95539bd9d3ef9aaab2359dff8eac207b16320549f5a83109fe19de74e871d9f2df196f5283e334", 0x97, 0x4}, {&(0x7f0000000500)="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", 0xfb, 0xf210}, {&(0x7f0000000600)="f7e64b98f2f016be52f1451e194957fdeb95f3530e981996940d3c57be482193c30d500d1a395d70a77e35ffc71f4ae2fcbbf1c7f8d9fd6ef2b276ed1e42dfc3d66604a29e960b0f26163476b7a47945e399e9d0d65beb60b0fbe7929900b6676e8b7e4fc71aaa6ae46949105a7f498a3c280da2c7cd40e05268004eb27f014f2a794b7c000d57189ea7eb9520058c8a9dd49687c5831216bd51a98bb4b28510760e601403a9eec8cd1a36d6d31cc985e4e8932cd4cb869b162c13c2a96820728c9f92b81c770ff2198cdf6850977f236d208fc1499e8e4ad4842d27b8d44e77bfad112597a475f4b8e43f995e7fcd70dab986700a", 0xf5, 0x40}], 0x58885, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f7265636f76670c90b46e6f6d626c6b5f696f5b7375626d69742c6175746f5f64615f616c6c6f633d3078303030303030303030303030306461352c757365725f78617474722c6e6f6c6f61642c626c6f636b5f76616c69646974946b53f33978acef6172642c6d6561737572652c0068408b2dc5f0e1d74ee5e0cba456068d9462a70be9696a6d95920b3723dc4ac3c3ae63b27691ccf19bfa173e96532876991c2531bd393224cee0dc7c8e6543a14a3afb2c418ac9156bd03ea16e649a46422ae5ec3921e0dc1f7beb882c418bb1dcd1cb55d67d9c8910b175d188122df6599f2149976b"]) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000180)={0x0, 0xfffffffe, 0x10, 0xfffffffc, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x8f9b137030cacf70, 0x300) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000980)=ANY=[@ANYBLOB="ca8a866076052fff9d0a4e0aa07cf6145ad77793dcd5e3163cc4461e518ae539303e0d63edf0f74bfe30f5b3ec08103ffd534771bc25db6c24891e95a8b45fc103eef87ed08171a41027b88cfa9489ffdc19a0e09ef3c8d1ff9199681fef47ee09ba0ce4dd9cd1958b5d1c2ad72b487175a49af662a1aa2501f12acb838c49f2a4dc59812ce88350563c25a1c0ae4456068429e6872f075496559c4a095d29753ed8738f946835a6790a1990e98fd7b7ebeb469120fee4de1e513e599cf2d45300a23cacc46464568ce40b158f003cec327c1260a2b07bc8e0f6eb2227a1b7ceabe776eb8dea25b5d2cd2a5893bfaad28237c0325a686d8ac995675e1c496cbde8773356d88a5d81665caaf01aed10e010a435727966050993ff011d0b0da899162579a8a3f719cb5663d5b2bae4db219eb815d4ee834c8c87c8a4059ecbc9fb0703b9429a2573be15d456d8086b5d1066d8f9a8ce5e130e1b5ea408fdd0b0b172c6b291257c34df486c190f5d7b089e5a72e6a09417f25dd9183ecb64979d8d56c00340ceec20c3f18299da702641afbe3e8cbbe1788191ad7cb13f585dad23edce0f74bbded511538ad69560e76f", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000100)=0x11, 0x0) splice(r2, &(0x7f0000000000), r3, &(0x7f0000000040)=0x2, 0x3, 0x6) [ 2996.058767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2996.059953] ? trace_hardirqs_on+0x5b/0x180 [ 2996.060863] do_syscall_64+0x33/0x40 [ 2996.061652] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2996.062729] RIP: 0033:0x7fc070febb19 [ 2996.063512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2996.067427] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2996.069041] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2996.070551] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2996.072063] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2996.073585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2996.075102] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 2996.095712] FAULT_INJECTION: forcing a failure. [ 2996.095712] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.098584] CPU: 1 PID: 17953 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2996.100069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2996.101864] Call Trace: [ 2996.102433] dump_stack+0x107/0x167 [ 2996.103226] should_fail.cold+0x5/0xa [ 2996.104063] should_failslab+0x5/0x20 [ 2996.104899] __kmalloc_track_caller+0x79/0x370 [ 2996.105884] ? kstrdup_const+0x53/0x80 [ 2996.106725] ? kasprintf+0xbb/0xf0 [ 2996.107501] kstrdup+0x36/0x70 [ 2996.108199] kstrdup_const+0x53/0x80 [ 2996.109015] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2996.110104] p9_client_create+0xc6a/0x1230 [ 2996.111040] ? p9_client_flush+0x430/0x430 [ 2996.111950] ? trace_hardirqs_on+0x5b/0x180 [ 2996.112891] ? lockdep_init_map_type+0x2c7/0x780 [ 2996.113921] ? __raw_spin_lock_init+0x36/0x110 [ 2996.114915] v9fs_session_init+0x1dd/0x1680 [ 2996.115854] ? lock_release+0x680/0x680 [ 2996.116741] ? kmem_cache_alloc_trace+0x151/0x320 [ 2996.117778] ? v9fs_show_options+0x690/0x690 [ 2996.118751] ? trace_hardirqs_on+0x5b/0x180 [ 2996.119684] ? kasan_unpoison_shadow+0x33/0x50 [ 2996.120673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2996.121765] v9fs_mount+0x79/0x8f0 [ 2996.122532] ? v9fs_write_inode+0x60/0x60 [ 2996.123427] legacy_get_tree+0x105/0x220 [ 2996.124309] vfs_get_tree+0x8e/0x300 [ 2996.125118] path_mount+0x1429/0x2120 03:25:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = getpgrp(0x0) r3 = getpgrp(0x0) r4 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x0, 0xff, 0x3, 0x0, 0x4e8f6683, 0x800, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x10000, 0x7, 0x2, 0x0, 0x8, 0x1ff, 0x100, 0x0, 0x81, 0x0, 0x95c}, r3, 0x5, r0, 0x1) pipe(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = getpgrp(0x0) r7 = getpgrp(0x0) r8 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) write$P9_RRENAME(r5, &(0x7f0000000280)={0x7, 0x15, 0x1}, 0x7) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f0000000140)={r5}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xff, 0x8f, 0x5, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x10, 0xef, 0x800, 0x6771430a42741be3, 0xf30, 0x7, 0x0, 0x0, 0xff, 0x0, 0x6}, r6, 0x4, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="010000000000000039dd66696c6530005ead48995305212e60cf595d2cc8ff28b06fae5cb6491163847b8f0abd34617ad0"]) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x1, @broadcast}, 0x42, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'xfrm0\x00'}) [ 2996.125944] ? strncpy_from_user+0x9e/0x470 [ 2996.127052] ? finish_automount+0xa90/0xa90 [ 2996.127982] ? getname_flags.part.0+0x1dd/0x4f0 [ 2996.128991] ? _copy_from_user+0xfb/0x1b0 [ 2996.129901] __x64_sys_mount+0x282/0x300 [ 2996.130772] ? copy_mnt_ns+0xa00/0xa00 [ 2996.131612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2996.132743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2996.133852] do_syscall_64+0x33/0x40 [ 2996.134645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2996.135743] RIP: 0033:0x7f3eebf31b19 [ 2996.136544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2996.140461] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2996.142091] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2996.143615] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2996.145129] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2996.146648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2996.148166] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 2996.149854] kmem_cache_create(9p-fcall-cache-185) failed with error -12 [ 2996.151315] CPU: 1 PID: 17953 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2996.152804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2996.154569] Call Trace: [ 2996.155136] dump_stack+0x107/0x167 [ 2996.155925] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2996.157060] p9_client_create+0xc6a/0x1230 [ 2996.157984] ? p9_client_flush+0x430/0x430 [ 2996.158885] ? trace_hardirqs_on+0x5b/0x180 [ 2996.159807] ? lockdep_init_map_type+0x2c7/0x780 [ 2996.160830] ? __raw_spin_lock_init+0x36/0x110 [ 2996.161837] v9fs_session_init+0x1dd/0x1680 [ 2996.162780] ? lock_release+0x680/0x680 [ 2996.163664] ? kmem_cache_alloc_trace+0x151/0x320 [ 2996.164713] ? v9fs_show_options+0x690/0x690 [ 2996.165694] ? trace_hardirqs_on+0x5b/0x180 [ 2996.166637] ? kasan_unpoison_shadow+0x33/0x50 [ 2996.167630] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2996.168755] v9fs_mount+0x79/0x8f0 [ 2996.169533] ? v9fs_write_inode+0x60/0x60 [ 2996.170432] legacy_get_tree+0x105/0x220 [ 2996.171330] vfs_get_tree+0x8e/0x300 [ 2996.172142] path_mount+0x1429/0x2120 [ 2996.172986] ? strncpy_from_user+0x9e/0x470 [ 2996.173927] ? finish_automount+0xa90/0xa90 [ 2996.174861] ? getname_flags.part.0+0x1dd/0x4f0 [ 2996.175862] ? _copy_from_user+0xfb/0x1b0 [ 2996.176756] __x64_sys_mount+0x282/0x300 [ 2996.177629] ? copy_mnt_ns+0xa00/0xa00 [ 2996.178455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2996.179561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2996.180656] do_syscall_64+0x33/0x40 [ 2996.181466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2996.182544] RIP: 0033:0x7f3eebf31b19 [ 2996.183353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2996.187327] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2996.188978] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 03:25:34 executing program 1: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/99) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) [ 2996.190513] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2996.192236] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2996.193789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2996.195332] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:25:34 executing program 1: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0xfffffffd, 0x0, 0x4c26, 0xffffffff, 0xfff]}, &(0x7f0000000100)=0x54) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1d2) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x4, 0x9, 0x5, 0xa25, 0x39]}, &(0x7f0000000200)=0x54) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x20, 0x4, 0xfb, 0x0, 0x2, 0x4, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0xffffffff00000000}, 0x1, 0x2c963ee9, 0x8, 0x6, 0x8, 0xed, 0x0, 0x0, 0x7fff, 0x0, 0x400}, 0xffffffffffffffff, 0x3, r1, 0x3) pipe(0x0) 03:25:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 51) 03:25:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x88, 0x3f, 0x7, 0x0, 0x0, 0x24002, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x747c, 0x3}, 0x670, 0x0, 0x5, 0x3, 0x1, 0xeb3, 0x9, 0x0, 0x9, 0x0, 0x81}, 0x0, 0x4, r0, 0x8) pipe(0x0) 03:25:34 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:34 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0xcd, 0x0, 0x0, 0x0, 0x5e, 0x1084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x1, 0xabd7, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x12) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/tcp6\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600), 0x0) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001640)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="9339363a52f1d3f79fb336dd1cf4f21392a057383326959b75f56ef69dbcf5a8e675cb1928730c5d6beb77c9c07e84c3bab6a9f4c5887025c41a60f9498a94fb439b04ab20a0c48c3a1fb5b3053476667f34681f059801eaf33f43054069ce26461c987022919cb8001b227a30fac87897b3beeb0fc7a5a3f2488b191ed13d607975ea3d23b6adcae5b10f81cb5eef94f5c30c71685bebd057bdd8f35812fd1b97eba8846a862a17e013da7aaabdab27175bc88f53bb3005f1156209e9eaf52983922cd478286fa20e2769bad5f1920b25e273d9f207da898c2695e88189f13e313f8cdef4c53070b78fff40"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'L-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000015c0)='./file0/../file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x1) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/file1\x00', 0x17c) unshare(0x48020200) [ 2996.343385] FAULT_INJECTION: forcing a failure. [ 2996.343385] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.345834] CPU: 1 PID: 18076 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 2996.347290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2996.349046] Call Trace: [ 2996.349605] dump_stack+0x107/0x167 [ 2996.350381] should_fail.cold+0x5/0xa [ 2996.351198] ? create_object.isra.0+0x3a/0xa20 [ 2996.352162] should_failslab+0x5/0x20 [ 2996.352987] kmem_cache_alloc+0x5b/0x310 [ 2996.353846] ? lock_acquire+0x197/0x470 [ 2996.354701] create_object.isra.0+0x3a/0xa20 [ 2996.355615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2996.356714] __kmalloc_track_caller+0x177/0x370 [ 2996.357698] ? kstrdup_const+0x53/0x80 [ 2996.358529] ? kasprintf+0xbb/0xf0 [ 2996.359298] kstrdup+0x36/0x70 [ 2996.360007] kstrdup_const+0x53/0x80 [ 2996.360830] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2996.361933] p9_client_create+0xc6a/0x1230 [ 2996.362881] ? p9_client_flush+0x430/0x430 [ 2996.363811] ? trace_hardirqs_on+0x5b/0x180 [ 2996.364761] ? lockdep_init_map_type+0x2c7/0x780 [ 2996.365799] ? __raw_spin_lock_init+0x36/0x110 [ 2996.366807] v9fs_session_init+0x1dd/0x1680 [ 2996.367755] ? lock_release+0x680/0x680 [ 2996.368652] ? kmem_cache_alloc_trace+0x151/0x320 [ 2996.369703] ? v9fs_show_options+0x690/0x690 [ 2996.370696] ? trace_hardirqs_on+0x5b/0x180 [ 2996.371639] ? kasan_unpoison_shadow+0x33/0x50 [ 2996.372637] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2996.373756] v9fs_mount+0x79/0x8f0 [ 2996.374538] ? v9fs_write_inode+0x60/0x60 [ 2996.375445] legacy_get_tree+0x105/0x220 [ 2996.376340] vfs_get_tree+0x8e/0x300 [ 2996.377161] path_mount+0x1429/0x2120 [ 2996.378002] ? strncpy_from_user+0x9e/0x470 [ 2996.378944] ? finish_automount+0xa90/0xa90 [ 2996.379887] ? getname_flags.part.0+0x1dd/0x4f0 [ 2996.380906] ? _copy_from_user+0xfb/0x1b0 [ 2996.381829] __x64_sys_mount+0x282/0x300 [ 2996.382711] ? copy_mnt_ns+0xa00/0xa00 [ 2996.383566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2996.384712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2996.385840] do_syscall_64+0x33/0x40 [ 2996.386649] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2996.387756] RIP: 0033:0x7f3eebf31b19 [ 2996.388563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2996.392541] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2996.394195] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 2996.395734] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2996.397286] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 2996.398826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2996.400458] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:25:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000040)={{r1}, "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"}) pipe(0x0) 03:25:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:25:34 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) 03:25:34 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:34 executing program 1: lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x4, 0xf3, 0xd8, 0x7f, 0x0, 0x7f, 0x8400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x8, 0x5}, 0x1000, 0x80000001, 0xffffffff, 0x9, 0xa76, 0x3, 0x8, 0x0, 0xe944, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) r4 = getegid() r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000280)=@secondary) keyctl$chown(0x4, 0x0, 0xee01, r4) write$bt_hci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0111208705ff496452496b3c33502a5c7d154e12"], 0xb) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32, @ANYBLOB="af870b000000000000e2a55fbb5061ee263ae7fe4ccfa881000000fdb0c4b1d9db782a000000001895a50000a8fc4ddabba288c39fcea053e66f8ae50584fa069f1caf200ed1ad56dfb28b8802bc2e5e9c1c70bd1c222593efcedd5294ad6900000000000020", @ANYRES32, @ANYRES16=r4, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32, @ANYRES16=r6, @ANYRESOCT=r7, @ANYRESOCT=r3], 0x4c, 0x2) setgroups(0x6, &(0x7f0000000140)=[0xffffffffffffffff, r0, 0xee01, 0xffffffffffffffff, 0xee01, r4]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10a92}, 0x0, 0xb, 0xffffffffffffffff, 0x0) pipe(0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x5) [ 2996.718839] FAULT_INJECTION: forcing a failure. [ 2996.718839] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.720412] CPU: 0 PID: 18300 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 2996.721280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2996.722295] Call Trace: [ 2996.722623] dump_stack+0x107/0x167 [ 2996.723066] should_fail.cold+0x5/0xa [ 2996.723525] ? create_object.isra.0+0x3a/0xa20 [ 2996.724068] should_failslab+0x5/0x20 [ 2996.724526] kmem_cache_alloc+0x5b/0x310 [ 2996.725023] create_object.isra.0+0x3a/0xa20 [ 2996.725550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2996.726158] __kmalloc_node+0x1ae/0x420 [ 2996.726647] kvmalloc_node+0x119/0x170 [ 2996.727117] alloc_fdtable+0xd3/0x280 [ 2996.727578] dup_fd+0x92e/0xf40 [ 2996.727990] copy_process+0x197e/0x7800 [ 2996.728466] ? mark_lock+0xf5/0x2df0 [ 2996.728917] ? lock_acquire+0x197/0x470 [ 2996.729395] ? find_held_lock+0x2c/0x110 [ 2996.729890] ? __cleanup_sighand+0xb0/0xb0 [ 2996.730380] ? _copy_from_user+0xfb/0x1b0 [ 2996.730879] kernel_clone+0xe7/0x980 [ 2996.731326] ? lock_acquire+0x197/0x470 [ 2996.731806] ? create_io_thread+0xf0/0xf0 [ 2996.732308] __do_sys_clone3+0x1e5/0x320 [ 2996.732798] ? __do_sys_clone+0x110/0x110 [ 2996.733301] ? lock_downgrade+0x6d0/0x6d0 [ 2996.733803] ? rcu_read_lock_any_held+0x75/0xa0 [ 2996.734351] ? vfs_write+0x354/0xb10 [ 2996.734795] ? ksys_write+0x1a9/0x260 [ 2996.735257] ? __ia32_sys_read+0xb0/0xb0 [ 2996.735744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2996.736382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2996.736998] ? trace_hardirqs_on+0x5b/0x180 [ 2996.737509] do_syscall_64+0x33/0x40 [ 2996.737944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2996.738560] RIP: 0033:0x7fc070febb19 [ 2996.738986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2996.741208] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2996.742071] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 2996.742924] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2996.743735] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 2996.744593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2996.745452] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:25:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 52) 03:25:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES16=r2]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:25:49 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182336, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:49 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018232c, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:49 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:25:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) 03:25:49 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) 03:25:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182312, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3011.859422] FAULT_INJECTION: forcing a failure. [ 3011.859422] name failslab, interval 1, probability 0, space 0, times 0 [ 3011.860958] CPU: 0 PID: 18319 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3011.861806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3011.862816] Call Trace: [ 3011.863177] dump_stack+0x107/0x167 [ 3011.863653] should_fail.cold+0x5/0xa [ 3011.864150] ? create_object.isra.0+0x3a/0xa20 [ 3011.864761] should_failslab+0x5/0x20 [ 3011.865263] kmem_cache_alloc+0x5b/0x310 [ 3011.865821] create_object.isra.0+0x3a/0xa20 [ 3011.866403] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3011.867082] kmem_cache_alloc+0x159/0x310 [ 3011.867652] kmem_cache_create_usercopy+0x190/0x2f0 [ 3011.868333] p9_client_create+0xc6a/0x1230 [ 3011.868888] ? p9_client_flush+0x430/0x430 [ 3011.869455] ? trace_hardirqs_on+0x5b/0x180 [ 3011.869848] FAULT_INJECTION: forcing a failure. [ 3011.869848] name failslab, interval 1, probability 0, space 0, times 0 [ 3011.870023] ? lockdep_init_map_type+0x2c7/0x780 [ 3011.872985] ? __raw_spin_lock_init+0x36/0x110 [ 3011.873592] v9fs_session_init+0x1dd/0x1680 [ 3011.874153] ? lock_release+0x680/0x680 [ 3011.874688] ? kmem_cache_alloc_trace+0x151/0x320 [ 3011.875307] ? v9fs_show_options+0x690/0x690 [ 3011.875901] ? trace_hardirqs_on+0x5b/0x180 [ 3011.876459] ? kasan_unpoison_shadow+0x33/0x50 [ 3011.877056] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3011.877690] v9fs_mount+0x79/0x8f0 [ 3011.878157] ? v9fs_write_inode+0x60/0x60 [ 3011.878706] legacy_get_tree+0x105/0x220 [ 3011.879234] vfs_get_tree+0x8e/0x300 [ 3011.879718] path_mount+0x1429/0x2120 [ 3011.880227] ? strncpy_from_user+0x9e/0x470 [ 3011.880793] ? finish_automount+0xa90/0xa90 [ 3011.881359] ? getname_flags.part.0+0x1dd/0x4f0 [ 3011.881961] ? _copy_from_user+0xfb/0x1b0 [ 3011.882535] __x64_sys_mount+0x282/0x300 [ 3011.883069] ? copy_mnt_ns+0xa00/0xa00 [ 3011.883561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3011.884246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3011.884925] do_syscall_64+0x33/0x40 [ 3011.885425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3011.886084] RIP: 0033:0x7f3eebf31b19 [ 3011.886571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3011.888939] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3011.889923] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3011.890851] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3011.891776] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3011.892651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3011.893590] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 3011.894547] CPU: 1 PID: 18307 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3011.896040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3011.897823] Call Trace: [ 3011.898394] dump_stack+0x107/0x167 [ 3011.899173] should_fail.cold+0x5/0xa [ 3011.899986] ? kvmalloc_node+0x119/0x170 [ 3011.900869] should_failslab+0x5/0x20 [ 3011.901678] __kmalloc_node+0x76/0x420 [ 3011.902504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3011.903584] kvmalloc_node+0x119/0x170 [ 3011.904414] alloc_fdtable+0x13f/0x280 [ 3011.905254] dup_fd+0x92e/0xf40 [ 3011.905974] copy_process+0x197e/0x7800 [ 3011.906825] ? mark_lock+0xf5/0x2df0 [ 3011.907624] ? lock_acquire+0x197/0x470 [ 3011.908466] ? find_held_lock+0x2c/0x110 [ 3011.909350] ? __cleanup_sighand+0xb0/0xb0 [ 3011.910273] ? _copy_from_user+0xfb/0x1b0 [ 3011.911160] kernel_clone+0xe7/0x980 [ 3011.911949] ? lock_acquire+0x197/0x470 [ 3011.912802] ? create_io_thread+0xf0/0xf0 [ 3011.913728] __do_sys_clone3+0x1e5/0x320 [ 3011.914606] ? __do_sys_clone+0x110/0x110 [ 3011.915499] ? lock_downgrade+0x6d0/0x6d0 [ 3011.916413] ? rcu_read_lock_any_held+0x75/0xa0 [ 3011.917433] ? vfs_write+0x354/0xb10 [ 3011.918245] ? ksys_write+0x1a9/0x260 [ 3011.919068] ? __ia32_sys_read+0xb0/0xb0 [ 3011.919957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3011.921103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3011.922220] ? trace_hardirqs_on+0x5b/0x180 [ 3011.923154] do_syscall_64+0x33/0x40 [ 3011.923962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3011.925079] RIP: 0033:0x7fc070febb19 [ 3011.925883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3011.929862] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3011.931511] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 3011.933069] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 3011.934611] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 3011.936146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3011.937692] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:25:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = eventfd(0x3) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) dup2(r0, r1) 03:25:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r1, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x1f, 0xff, 0x40, 0xf9, 0x0, 0x4, 0x4060, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x7}, 0x8128, 0x8, 0x400, 0x5da460bdb71f4334, 0x7, 0x40, 0x8, 0x0, 0x1995, 0x0, 0x4}, r1, 0xd, r2, 0x0) pipe(0x0) 03:25:50 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3026.184515] FAULT_INJECTION: forcing a failure. [ 3026.184515] name failslab, interval 1, probability 0, space 0, times 0 [ 3026.187452] CPU: 1 PID: 18444 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3026.188922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3026.190656] Call Trace: [ 3026.191208] dump_stack+0x107/0x167 [ 3026.191972] should_fail.cold+0x5/0xa [ 3026.192779] ? create_object.isra.0+0x3a/0xa20 [ 3026.193757] should_failslab+0x5/0x20 [ 3026.194553] kmem_cache_alloc+0x5b/0x310 [ 3026.195412] create_object.isra.0+0x3a/0xa20 [ 3026.196327] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3026.197419] __kmalloc_node+0x1ae/0x420 [ 3026.198265] kvmalloc_node+0x119/0x170 [ 3026.199083] alloc_fdtable+0x13f/0x280 03:26:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 53) 03:26:04 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) 03:26:04 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182314, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) r3 = syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f00000000c0)) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) [ 3026.200158] dup_fd+0x92e/0xf40 [ 3026.200913] copy_process+0x197e/0x7800 [ 3026.201769] ? mark_lock+0xf5/0x2df0 [ 3026.202567] ? lock_acquire+0x197/0x470 [ 3026.203415] ? find_held_lock+0x2c/0x110 [ 3026.204294] ? __cleanup_sighand+0xb0/0xb0 03:26:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x47a, 0x20901) read(r3, &(0x7f0000000340)=""/232, 0xe8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x8, 0x0, 0x3, 0x0, 0x1}, 0xee4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000000)=[r0]}, 0x1) 03:26:04 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:04 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182332, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182338, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3026.205341] ? _copy_from_user+0xfb/0x1b0 [ 3026.206426] kernel_clone+0xe7/0x980 [ 3026.207228] ? lock_acquire+0x197/0x470 [ 3026.208072] ? create_io_thread+0xf0/0xf0 [ 3026.208992] __do_sys_clone3+0x1e5/0x320 [ 3026.209860] ? __do_sys_clone+0x110/0x110 [ 3026.210745] ? lock_downgrade+0x6d0/0x6d0 [ 3026.211645] ? rcu_read_lock_any_held+0x75/0xa0 [ 3026.212650] ? vfs_write+0x354/0xb10 [ 3026.212678] ? ksys_write+0x1a9/0x260 [ 3026.212697] ? __ia32_sys_read+0xb0/0xb0 [ 3026.212721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3026.212741] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3026.212756] ? trace_hardirqs_on+0x5b/0x180 [ 3026.212778] do_syscall_64+0x33/0x40 [ 3026.212807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3026.212820] RIP: 0033:0x7fc070febb19 [ 3026.212838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3026.212849] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3026.212870] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 3026.212881] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 3026.212891] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 3026.212902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3026.212913] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 3026.224851] FAULT_INJECTION: forcing a failure. [ 3026.224851] name failslab, interval 1, probability 0, space 0, times 0 [ 3026.224889] CPU: 1 PID: 18443 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3026.224901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3026.224909] Call Trace: [ 3026.224932] dump_stack+0x107/0x167 [ 3026.224961] should_fail.cold+0x5/0xa [ 3026.224988] ? __kmem_cache_create+0x10e/0x520 [ 3026.225014] should_failslab+0x5/0x20 [ 3026.225034] kmem_cache_alloc_node+0x55/0x330 [ 3026.225073] __kmem_cache_create+0x10e/0x520 [ 3026.225107] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3026.225153] p9_client_create+0xc6a/0x1230 [ 3026.225200] ? p9_client_flush+0x430/0x430 [ 3026.225227] ? trace_hardirqs_on+0x5b/0x180 [ 3026.225254] ? lockdep_init_map_type+0x2c7/0x780 [ 3026.225290] ? __raw_spin_lock_init+0x36/0x110 [ 3026.225328] v9fs_session_init+0x1dd/0x1680 [ 3026.225378] ? kmem_cache_alloc_trace+0x151/0x320 [ 3026.225402] ? v9fs_show_options+0x690/0x690 [ 3026.225448] ? trace_hardirqs_on+0x5b/0x180 [ 3026.225475] ? kasan_unpoison_shadow+0x33/0x50 [ 3026.225496] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3026.225527] v9fs_mount+0x79/0x8f0 [ 3026.225554] ? v9fs_write_inode+0x60/0x60 [ 3026.225578] legacy_get_tree+0x105/0x220 [ 3026.225607] vfs_get_tree+0x8e/0x300 [ 3026.225630] path_mount+0x1429/0x2120 [ 3026.225663] ? strncpy_from_user+0x9e/0x470 [ 3026.225688] ? finish_automount+0xa90/0xa90 [ 3026.225712] ? getname_flags.part.0+0x1dd/0x4f0 [ 3026.225733] ? _copy_from_user+0xfb/0x1b0 [ 3026.225776] __x64_sys_mount+0x282/0x300 [ 3026.225799] ? copy_mnt_ns+0xa00/0xa00 [ 3026.225829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3026.225851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3026.225883] do_syscall_64+0x33/0x40 [ 3026.225904] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3026.225917] RIP: 0033:0x7f3eebf31b19 [ 3026.225937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3026.225948] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3026.225972] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3026.225985] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3026.225997] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3026.226009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3026.226021] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 3026.226209] kmem_cache_create(9p-fcall-cache-188) failed with error -22 [ 3026.226228] CPU: 1 PID: 18443 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3026.226239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3026.226246] Call Trace: [ 3026.226266] dump_stack+0x107/0x167 [ 3026.226297] kmem_cache_create_usercopy.cold+0x17/0x65 [ 3026.226334] p9_client_create+0xc6a/0x1230 [ 3026.226380] ? p9_client_flush+0x430/0x430 [ 3026.226407] ? trace_hardirqs_on+0x5b/0x180 [ 3026.226433] ? lockdep_init_map_type+0x2c7/0x780 [ 3026.226463] ? __raw_spin_lock_init+0x36/0x110 [ 3026.226498] v9fs_session_init+0x1dd/0x1680 [ 3026.226545] ? kmem_cache_alloc_trace+0x151/0x320 [ 3026.226569] ? v9fs_show_options+0x690/0x690 [ 3026.226614] ? trace_hardirqs_on+0x5b/0x180 [ 3026.226640] ? kasan_unpoison_shadow+0x33/0x50 [ 3026.226661] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3026.226690] v9fs_mount+0x79/0x8f0 [ 3026.226715] ? v9fs_write_inode+0x60/0x60 [ 3026.226738] legacy_get_tree+0x105/0x220 [ 3026.226770] vfs_get_tree+0x8e/0x300 [ 3026.226792] path_mount+0x1429/0x2120 [ 3026.226823] ? strncpy_from_user+0x9e/0x470 [ 3026.226847] ? finish_automount+0xa90/0xa90 [ 3026.226870] ? getname_flags.part.0+0x1dd/0x4f0 [ 3026.226890] ? _copy_from_user+0xfb/0x1b0 [ 3026.226943] __x64_sys_mount+0x282/0x300 [ 3026.226964] ? copy_mnt_ns+0xa00/0xa00 [ 3026.226994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3026.227015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3026.227046] do_syscall_64+0x33/0x40 [ 3026.227068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3026.323677] RIP: 0033:0x7f3eebf31b19 [ 3026.324474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3026.328393] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3026.330035] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3026.330048] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3026.330067] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3026.330080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3026.330093] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:26:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 54) 03:26:19 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) 03:26:19 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182315, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000480)={'U+', 0xfffffffffffffffa}, 0x16, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:26:19 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x4018233a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:19 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182338, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r0, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2, 0x1f, 0x7f, 0x80, 0x0, 0x80, 0x26814, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xca, 0x0, @perf_config_ext={0x7ff, 0x1}, 0x40000, 0x56, 0x7, 0x5, 0x5, 0x50505b6b, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0xffffffffffffffff, 0x8, r0, 0xa) pipe(0x0) [ 3041.092643] FAULT_INJECTION: forcing a failure. [ 3041.092643] name failslab, interval 1, probability 0, space 0, times 0 [ 3041.094183] CPU: 1 PID: 18576 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3041.095107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.096236] Call Trace: [ 3041.096588] dump_stack+0x107/0x167 [ 3041.097059] should_fail.cold+0x5/0xa [ 3041.097546] ? create_object.isra.0+0x3a/0xa20 [ 3041.098132] should_failslab+0x5/0x20 [ 3041.098611] kmem_cache_alloc+0x5b/0x310 [ 3041.099138] create_object.isra.0+0x3a/0xa20 [ 3041.099693] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3041.100344] kmem_cache_alloc_node+0x169/0x330 [ 3041.100938] __kmem_cache_create+0x10e/0x520 [ 3041.101532] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3041.102173] p9_client_create+0xc6a/0x1230 [ 3041.102725] ? p9_client_flush+0x430/0x430 [ 3041.103268] ? trace_hardirqs_on+0x5b/0x180 [ 3041.103812] ? lockdep_init_map_type+0x2c7/0x780 [ 3041.104422] ? __raw_spin_lock_init+0x36/0x110 [ 3041.105011] v9fs_session_init+0x1dd/0x1680 [ 3041.105553] ? lock_release+0x680/0x680 [ 3041.105871] FAULT_INJECTION: forcing a failure. [ 3041.105871] name failslab, interval 1, probability 0, space 0, times 0 [ 3041.106067] ? kmem_cache_alloc_trace+0x151/0x320 [ 3041.109016] ? v9fs_show_options+0x690/0x690 [ 3041.109581] ? trace_hardirqs_on+0x5b/0x180 [ 3041.110115] ? kasan_unpoison_shadow+0x33/0x50 [ 3041.110681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3041.111313] v9fs_mount+0x79/0x8f0 [ 3041.111761] ? v9fs_write_inode+0x60/0x60 [ 3041.112278] legacy_get_tree+0x105/0x220 [ 3041.112783] vfs_get_tree+0x8e/0x300 [ 3041.113265] path_mount+0x1429/0x2120 [ 3041.113742] ? strncpy_from_user+0x9e/0x470 [ 3041.114274] ? finish_automount+0xa90/0xa90 [ 3041.114807] ? getname_flags.part.0+0x1dd/0x4f0 [ 3041.115411] ? _copy_from_user+0xfb/0x1b0 [ 3041.115969] __x64_sys_mount+0x282/0x300 [ 3041.116476] ? copy_mnt_ns+0xa00/0xa00 [ 3041.116967] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.117618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.118265] do_syscall_64+0x33/0x40 [ 3041.118727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3041.119361] RIP: 0033:0x7f3eebf31b19 [ 3041.119817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.122062] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3041.122995] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3041.123867] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3041.124737] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3041.125616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3041.126494] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 3041.127414] CPU: 0 PID: 18578 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3041.128923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.130705] Call Trace: [ 3041.131271] dump_stack+0x107/0x167 [ 3041.132057] should_fail.cold+0x5/0xa [ 3041.132872] ? copy_process+0x1add/0x7800 [ 3041.133762] should_failslab+0x5/0x20 [ 3041.134573] kmem_cache_alloc+0x5b/0x310 [ 3041.135443] copy_process+0x1add/0x7800 [ 3041.136295] ? mark_lock+0xf5/0x2df0 [ 3041.137105] ? lock_acquire+0x197/0x470 [ 3041.137949] ? find_held_lock+0x2c/0x110 [ 3041.138828] ? __cleanup_sighand+0xb0/0xb0 [ 3041.139745] ? _copy_from_user+0xfb/0x1b0 [ 3041.140628] kernel_clone+0xe7/0x980 [ 3041.141441] ? lock_acquire+0x197/0x470 [ 3041.142287] ? create_io_thread+0xf0/0xf0 [ 3041.143204] __do_sys_clone3+0x1e5/0x320 [ 3041.144070] ? __do_sys_clone+0x110/0x110 [ 3041.144976] ? lock_downgrade+0x6d0/0x6d0 [ 3041.145887] ? rcu_read_lock_any_held+0x75/0xa0 [ 3041.146874] ? vfs_write+0x354/0xb10 [ 3041.147672] ? ksys_write+0x1a9/0x260 [ 3041.148482] ? __ia32_sys_read+0xb0/0xb0 [ 3041.149352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.150468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.151559] ? trace_hardirqs_on+0x5b/0x180 [ 3041.152472] do_syscall_64+0x33/0x40 [ 3041.153271] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3041.154345] RIP: 0033:0x7fc070febb19 [ 3041.155132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.159088] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3041.160696] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 3041.162214] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 3041.163728] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 3041.165257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3041.166766] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:26:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x60000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r1, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3f, 0xd, 0x0, 0x80, 0x0, 0x1, 0x20400, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffff801, 0x1}, 0x120, 0x8, 0x7fffffff, 0x6, 0xac, 0x200, 0xff, 0x0, 0x9, 0x0, 0x3000}, 0x0, 0x6, r1, 0x0) ftruncate(r0, 0xffffffff) 03:26:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 55) [ 3041.263860] FAULT_INJECTION: forcing a failure. [ 3041.263860] name failslab, interval 1, probability 0, space 0, times 0 [ 3041.265368] CPU: 1 PID: 18592 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3041.266222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.267243] Call Trace: [ 3041.267587] dump_stack+0x107/0x167 [ 3041.268055] should_fail.cold+0x5/0xa [ 3041.268540] ? create_object.isra.0+0x3a/0xa20 [ 3041.269123] should_failslab+0x5/0x20 [ 3041.269602] kmem_cache_alloc+0x5b/0x310 [ 3041.270143] create_object.isra.0+0x3a/0xa20 [ 3041.270734] kmemleak_alloc_percpu+0xa0/0x100 [ 3041.271308] pcpu_alloc+0x4e2/0x1240 [ 3041.271807] __kmem_cache_create+0x35a/0x520 [ 3041.272371] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3041.273013] p9_client_create+0xc6a/0x1230 [ 3041.273566] ? p9_client_flush+0x430/0x430 [ 3041.274101] ? trace_hardirqs_on+0x5b/0x180 [ 3041.274651] ? lockdep_init_map_type+0x2c7/0x780 [ 3041.275244] ? __raw_spin_lock_init+0x36/0x110 [ 3041.275835] v9fs_session_init+0x1dd/0x1680 [ 3041.276386] ? lock_release+0x680/0x680 [ 3041.276925] ? kmem_cache_alloc_trace+0x151/0x320 [ 3041.277528] ? v9fs_show_options+0x690/0x690 [ 3041.278116] ? trace_hardirqs_on+0x5b/0x180 [ 3041.278660] ? kasan_unpoison_shadow+0x33/0x50 [ 3041.279238] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3041.279878] v9fs_mount+0x79/0x8f0 [ 3041.280331] ? v9fs_write_inode+0x60/0x60 [ 3041.280853] legacy_get_tree+0x105/0x220 [ 3041.281373] vfs_get_tree+0x8e/0x300 [ 3041.281835] path_mount+0x1429/0x2120 [ 3041.282312] ? strncpy_from_user+0x9e/0x470 [ 3041.282845] ? finish_automount+0xa90/0xa90 [ 3041.283382] ? getname_flags.part.0+0x1dd/0x4f0 [ 3041.283958] ? _copy_from_user+0xfb/0x1b0 [ 3041.284467] __x64_sys_mount+0x282/0x300 [ 3041.284977] ? copy_mnt_ns+0xa00/0xa00 [ 3041.285449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.286090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.286743] do_syscall_64+0x33/0x40 [ 3041.286758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3041.286767] RIP: 0033:0x7f3eebf31b19 [ 3041.286783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:26:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x3224) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r1, 0x0, 0x4) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x31, 0xb, 0x4, 0x9, 0x1, 0x1ff, 0x6, 0xc6}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x15, 0x2f, 0x0, 0x11, 0x1, 0x8000, 0x4, 0x9}}) [ 3041.286795] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3041.286820] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3041.286829] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3041.286839] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3041.286847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3041.286855] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:26:19 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:19 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x4, 0x10, 0x0, 0x1b0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = getpgrp(0x0) r6 = getpgrp(0x0) r7 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000001580)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000840e}, 0xc, &(0x7f0000001500)={&(0x7f0000001340)=ANY=[@ANYBLOB="ac0100002400040027bd7000fbdbdf251d000000970146808e8720f1ea960031e5c0c8b04b1047bfa0ad0a3baabd437909de66e6576c8492431b53326015caebdb4920e6ddb439626ec72a944eff723016b4997aaf6b2bfc765d1b79b630b075cd4ae3c95d15a1811d4308002600", @ANYRES32, @ANYBLOB="a2af8a685efc298fb89b410aefb4a49de948e26bdde6f17e8902b8023bf02e760c5d3d46e9de9e520d68df1c58c9e58fbea8b5e17a4d71e80723bfaa2c5197bf34b33a7e9840cb5d95b121dd675b8acc42ffae686e514a9411fbc54d1e01af532a361776e10971147850a1bf345f03ee4e549d84d9a9f28632a898c6eca0ef8a76260f1fe2832b6e4db70a64712b04a5593b9851ce5fcea68ed84bcbffac71e5830e6e855432eaa50cb9077fcd0d4844a2c7da2025e3e4af8e486435177660800308002200", @ANYRES32=r7, @ANYBLOB="b130733cb4a4b0007b70d184408f7ac25461c44eb880b7c0b51159b2369faec986aaa583408db1c5929181d48b5d598fdaf55831a125974883d7d51169079f96014ab8fa889817810c7ac095d4537c21bc64649aeca910e335f9a21a5e963a4c3cef404800"/113], 0x1ac}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) io_uring_enter(0xffffffffffffffff, 0x1c55, 0xe82a, 0x1, &(0x7f0000001240)={[0x6]}, 0x8) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000140)={r4}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r9 = getpgrp(0x0) r10 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x655d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001280), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r9, 0x0, 0x7, r10, &(0x7f0000000140)={r8}) clone3(&(0x7f00000011c0)={0x101008000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3c}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/152, &(0x7f0000001180)=[r2, 0x0, 0xffffffffffffffff, r6, 0x0, 0xffffffffffffffff, 0x0, r9, 0x0], 0x9}, 0x58) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000003, 0x20010, r10, 0x8000000) 03:26:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 56) 03:26:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000480)='jffs2\x00', 0x20a0, &(0x7f00000015c0)='net/snmp\x00') [ 3041.490946] FAULT_INJECTION: forcing a failure. [ 3041.490946] name failslab, interval 1, probability 0, space 0, times 0 [ 3041.492295] CPU: 1 PID: 18708 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3041.493095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.494056] Call Trace: [ 3041.494378] dump_stack+0x107/0x167 [ 3041.494812] should_fail.cold+0x5/0xa [ 3041.495268] ? create_object.isra.0+0x3a/0xa20 [ 3041.495799] should_failslab+0x5/0x20 [ 3041.496238] kmem_cache_alloc+0x5b/0x310 [ 3041.496700] ? mark_held_locks+0x9e/0xe0 [ 3041.497173] create_object.isra.0+0x3a/0xa20 [ 3041.497680] kmemleak_alloc_percpu+0xa0/0x100 [ 3041.498191] pcpu_alloc+0x4e2/0x1240 [ 3041.498638] __kmem_cache_create+0x35a/0x520 [ 3041.499142] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3041.499720] p9_client_create+0xc6a/0x1230 [ 3041.500213] ? p9_client_flush+0x430/0x430 [ 3041.500698] ? trace_hardirqs_on+0x5b/0x180 [ 3041.501200] ? lockdep_init_map_type+0x2c7/0x780 [ 3041.501740] ? __raw_spin_lock_init+0x36/0x110 [ 3041.502268] v9fs_session_init+0x1dd/0x1680 [ 3041.502760] ? lock_release+0x680/0x680 [ 3041.503221] ? kmem_cache_alloc_trace+0x151/0x320 [ 3041.503765] ? v9fs_show_options+0x690/0x690 [ 3041.504278] ? trace_hardirqs_on+0x5b/0x180 [ 3041.504771] ? kasan_unpoison_shadow+0x33/0x50 [ 3041.505297] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3041.505876] v9fs_mount+0x79/0x8f0 [ 3041.506279] ? v9fs_write_inode+0x60/0x60 [ 3041.506749] legacy_get_tree+0x105/0x220 [ 3041.507214] vfs_get_tree+0x8e/0x300 [ 3041.507639] path_mount+0x1429/0x2120 [ 3041.508079] ? strncpy_from_user+0x9e/0x470 [ 3041.508570] ? finish_automount+0xa90/0xa90 [ 3041.509072] ? getname_flags.part.0+0x1dd/0x4f0 [ 3041.509601] ? _copy_from_user+0xfb/0x1b0 [ 3041.510084] __x64_sys_mount+0x282/0x300 [ 3041.510547] ? copy_mnt_ns+0xa00/0xa00 [ 3041.510998] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3041.511603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.512205] do_syscall_64+0x33/0x40 [ 3041.512631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3041.513220] RIP: 0033:0x7f3eebf31b19 [ 3041.513630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.515713] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3041.516580] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3041.517364] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3041.518131] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3041.518898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3041.519667] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:26:34 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) 03:26:34 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = syz_io_uring_setup(0x4d52, &(0x7f00000002c0)={0x0, 0x8000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = getpgrp(0x0) r5 = getpgrp(0x0) r6 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000140)={r3}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x4, 0x20, 0x0, 0x0, 0x0, 0x5, 0x800, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x10081, 0x2, 0x0, 0x2, 0xb54d, 0x200, 0x2, 0x0, 0x5, 0x0, 0xd0a}, r5, 0x4, r0, 0xa) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)) lseek(r0, 0x0, 0x4) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0xffffffffefffffff, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbb83, 0x1}, 0x4383, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x0, 0x0, r0, 0x0) pipe(0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r10, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x5}}, 0x80000001) 03:26:34 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) 03:26:34 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018233a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:34 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182338, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:34 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x4018233e, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:34 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 57) [ 3056.856502] FAULT_INJECTION: forcing a failure. [ 3056.856502] name failslab, interval 1, probability 0, space 0, times 0 [ 3056.859365] CPU: 1 PID: 18822 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3056.861028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3056.863018] Call Trace: [ 3056.863674] dump_stack+0x107/0x167 [ 3056.864567] should_fail.cold+0x5/0xa [ 3056.865508] ? create_object.isra.0+0x3a/0xa20 [ 3056.866622] should_failslab+0x5/0x20 [ 3056.867554] kmem_cache_alloc+0x5b/0x310 [ 3056.868556] create_object.isra.0+0x3a/0xa20 [ 3056.869658] kmemleak_alloc_percpu+0xa0/0x100 [ 3056.870760] pcpu_alloc+0x4e2/0x1240 [ 3056.871718] __kmem_cache_create+0x35a/0x520 [ 3056.872797] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3056.874039] p9_client_create+0xc6a/0x1230 [ 3056.875313] ? p9_client_flush+0x430/0x430 [ 3056.876357] ? trace_hardirqs_on+0x5b/0x180 [ 3056.877629] ? lockdep_init_map_type+0x2c7/0x780 [ 3056.878814] ? __raw_spin_lock_init+0x36/0x110 [ 3056.879944] v9fs_session_init+0x1dd/0x1680 [ 3056.881006] ? lock_release+0x680/0x680 [ 3056.881995] ? kmem_cache_alloc_trace+0x151/0x320 [ 3056.883153] ? v9fs_show_options+0x690/0x690 [ 3056.884242] ? trace_hardirqs_on+0x5b/0x180 [ 3056.885300] ? kasan_unpoison_shadow+0x33/0x50 [ 3056.886393] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3056.887622] v9fs_mount+0x79/0x8f0 [ 3056.888487] ? v9fs_write_inode+0x60/0x60 [ 3056.889502] legacy_get_tree+0x105/0x220 [ 3056.890488] vfs_get_tree+0x8e/0x300 [ 3056.891575] path_mount+0x1429/0x2120 [ 3056.892507] ? strncpy_from_user+0x9e/0x470 [ 3056.893778] ? finish_automount+0xa90/0xa90 [ 3056.895047] ? getname_flags.part.0+0x1dd/0x4f0 [ 3056.896156] ? _copy_from_user+0xfb/0x1b0 [ 3056.897386] __x64_sys_mount+0x282/0x300 [ 3056.898358] ? copy_mnt_ns+0xa00/0xa00 [ 3056.899503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3056.900758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3056.902015] do_syscall_64+0x33/0x40 [ 3056.902911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3056.904147] RIP: 0033:0x7f3eebf31b19 [ 3056.905048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3056.909356] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3056.911154] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3056.912846] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3056.914538] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3056.916218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3056.917906] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 03:26:35 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:35 executing program 1: ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000040)={@msf={0x3d, 0x49, 0x20}, 0x2, 0x1d, &(0x7f0000000000)=""/29}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x800000, 0xffffffffffffffff, 0x0) pipe(0x0) [ 3056.959848] FAULT_INJECTION: forcing a failure. [ 3056.959848] name failslab, interval 1, probability 0, space 0, times 0 [ 3056.963081] CPU: 1 PID: 18841 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3056.964670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3056.966565] Call Trace: [ 3056.967176] dump_stack+0x107/0x167 [ 3056.968006] should_fail.cold+0x5/0xa [ 3056.968875] ? create_object.isra.0+0x3a/0xa20 [ 3056.969920] should_failslab+0x5/0x20 [ 3056.970778] kmem_cache_alloc+0x5b/0x310 [ 3056.971698] create_object.isra.0+0x3a/0xa20 [ 3056.972691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3056.973848] kmem_cache_alloc+0x159/0x310 [ 3056.974790] copy_process+0x1add/0x7800 [ 3056.975701] ? mark_lock+0xf5/0x2df0 [ 3056.976557] ? lock_acquire+0x197/0x470 [ 3056.977489] ? find_held_lock+0x2c/0x110 [ 3056.978447] ? __cleanup_sighand+0xb0/0xb0 [ 3056.979442] ? _copy_from_user+0xfb/0x1b0 [ 3056.980406] kernel_clone+0xe7/0x980 [ 3056.981270] ? lock_acquire+0x197/0x470 [ 3056.982198] ? create_io_thread+0xf0/0xf0 [ 3056.983174] __do_sys_clone3+0x1e5/0x320 [ 3056.984110] ? __do_sys_clone+0x110/0x110 [ 3056.985060] ? lock_downgrade+0x6d0/0x6d0 [ 3056.986031] ? rcu_read_lock_any_held+0x75/0xa0 [ 3056.987097] ? vfs_write+0x354/0xb10 [ 3056.987954] ? ksys_write+0x1a9/0x260 [ 3056.988814] ? __ia32_sys_read+0xb0/0xb0 [ 3056.989753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3056.990949] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3056.992117] ? trace_hardirqs_on+0x5b/0x180 [ 3056.993109] do_syscall_64+0x33/0x40 [ 3056.993961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3056.995129] RIP: 0033:0x7fc070febb19 [ 3056.995977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.000697] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3057.002519] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 3057.004055] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 3057.005607] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 [ 3057.007119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3057.008645] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 03:26:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3954, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) 03:26:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x400, 0x4d, 0x3e7, 0x7, 0xe5e}) 03:26:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x63, 0x2023c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 03:26:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3, 0x80, 0x3, 0x8, 0x2, 0x3, 0xfff, 0xfd, 0x40, 0x336, 0x0, 0x6, 0x38, 0x2, 0x80, 0x3, 0xff81}, [{0x2, 0x9, 0x200, 0x5, 0x5, 0x3ff, 0x10001, 0x3}, {0x6474e551, 0x9, 0x8, 0x10000, 0x2, 0x1, 0x8, 0xfffffffffffffff7}], "f34537671b0b120ef1c782eae5f30f953af6e78b21fc36062550f401c8e3e8ca82b236e20f12a8e7f8d23159d1c307e00738397e85a807f6d042da4baa588d0106779d59a3e0cb66a3aab53ebaed7f143def92caed", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x605) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pipe(0x0) 03:26:35 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file1\x00', 0x1f, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000480), 0x2, 0x0) unshare(0x48020200) 03:26:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) 03:26:50 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:50 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000740)={0x40182348, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:50 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018233e, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 58) 03:26:50 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) 03:26:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x4, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32, @ANYBLOB="00ed04000041899b09e5cd54b9d40a39fe4423ce044ef83b3696bb9a713c70dd5d985e32d20000000000000000"]) clock_gettime(0x0, &(0x7f0000000100)) timer_create(0x9, &(0x7f0000000080)={0x0, 0x22, 0x1}, &(0x7f0000000380)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x4018233a, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3072.267333] FAULT_INJECTION: forcing a failure. [ 3072.267333] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.269169] CPU: 1 PID: 19076 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3072.270228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.271478] Call Trace: [ 3072.271889] dump_stack+0x107/0x167 [ 3072.272453] should_fail.cold+0x5/0xa [ 3072.273046] ? create_object.isra.0+0x3a/0xa20 [ 3072.273066] should_failslab+0x5/0x20 [ 3072.273081] kmem_cache_alloc+0x5b/0x310 [ 3072.273105] ? lock_release+0x680/0x680 [ 3072.273130] create_object.isra.0+0x3a/0xa20 [ 3072.273142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.273167] __kmalloc_track_caller+0x177/0x370 [ 3072.273182] ? kstrdup_const+0x53/0x80 [ 3072.273210] kstrdup+0x36/0x70 [ 3072.273228] kstrdup_const+0x53/0x80 [ 3072.273247] kvasprintf_const+0x10c/0x1a0 [ 3072.273267] kobject_set_name_vargs+0x56/0x150 [ 3072.273285] kobject_init_and_add+0xc9/0x160 [ 3072.273303] ? kobject_create_and_add+0xb0/0xb0 [ 3072.273324] ? wait_for_completion_io+0x270/0x270 [ 3072.273341] ? kernfs_name_hash+0xe7/0x110 [ 3072.273364] ? kernfs_find_ns+0x256/0x380 [ 3072.273394] sysfs_slab_add+0x172/0x200 [ 3072.273416] __kmem_cache_create+0x3db/0x520 [ 3072.273440] kmem_cache_create_usercopy+0x1db/0x2f0 03:26:50 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r0}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) [ 3072.273470] p9_client_create+0xc6a/0x1230 [ 3072.273503] ? p9_client_flush+0x430/0x430 [ 3072.273524] ? trace_hardirqs_on+0x5b/0x180 [ 3072.273543] ? lockdep_init_map_type+0x2c7/0x780 [ 3072.273565] ? __raw_spin_lock_init+0x36/0x110 [ 3072.273592] v9fs_session_init+0x1dd/0x1680 [ 3072.273610] ? lock_release+0x680/0x680 [ 3072.273640] ? kmem_cache_alloc_trace+0x151/0x320 [ 3072.273658] ? v9fs_show_options+0x690/0x690 [ 3072.273691] ? trace_hardirqs_on+0x5b/0x180 [ 3072.273710] ? kasan_unpoison_shadow+0x33/0x50 [ 3072.273726] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 03:26:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 59) [ 3072.273748] v9fs_mount+0x79/0x8f0 [ 3072.273767] ? v9fs_write_inode+0x60/0x60 [ 3072.273786] legacy_get_tree+0x105/0x220 [ 3072.273807] vfs_get_tree+0x8e/0x300 [ 3072.273824] path_mount+0x1429/0x2120 [ 3072.273848] ? strncpy_from_user+0x9e/0x470 [ 3072.273866] ? finish_automount+0xa90/0xa90 [ 3072.273884] ? getname_flags.part.0+0x1dd/0x4f0 [ 3072.273899] ? _copy_from_user+0xfb/0x1b0 [ 3072.273931] __x64_sys_mount+0x282/0x300 [ 3072.273947] ? copy_mnt_ns+0xa00/0xa00 [ 3072.273970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.273987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.274010] do_syscall_64+0x33/0x40 [ 3072.274026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.274036] RIP: 0033:0x7f3eebf31b19 [ 3072.274051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.274060] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3072.274077] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3072.274086] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3072.274095] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3072.274104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.274113] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 3072.316751] FAULT_INJECTION: forcing a failure. [ 3072.316751] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.316774] CPU: 0 PID: 19082 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3072.316785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 03:26:50 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:26:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40b4}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',he=none,\x00'/24]) (fail_nth: 60) [ 3072.316790] Call Trace: [ 3072.316816] dump_stack+0x107/0x167 [ 3072.316837] should_fail.cold+0x5/0xa 03:26:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) [ 3072.316858] ? copy_process+0x1c5b/0x7800 [ 3072.316882] should_failslab+0x5/0x20 [ 3072.316901] kmem_cache_alloc+0x5b/0x310 [ 3072.316921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.316944] copy_process+0x1c5b/0x7800 [ 3072.316965] ? mark_lock+0xf5/0x2df0 [ 3072.316991] ? lock_acquire+0x197/0x470 03:26:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x7f, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0x3) pipe(0x0) [ 3072.317008] ? find_held_lock+0x2c/0x110 [ 3072.317041] ? __cleanup_sighand+0xb0/0xb0 [ 3072.317075] ? _copy_from_user+0xfb/0x1b0 [ 3072.317117] kernel_clone+0xe7/0x980 [ 3072.317137] ? lock_acquire+0x197/0x470 [ 3072.317155] ? create_io_thread+0xf0/0xf0 [ 3072.317197] __do_sys_clone3+0x1e5/0x320 [ 3072.317215] ? __do_sys_clone+0x110/0x110 [ 3072.317233] ? lock_downgrade+0x6d0/0x6d0 [ 3072.317268] ? rcu_read_lock_any_held+0x75/0xa0 [ 3072.317287] ? vfs_write+0x354/0xb10 [ 3072.317313] ? ksys_write+0x1a9/0x260 [ 3072.317332] ? __ia32_sys_read+0xb0/0xb0 [ 3072.317355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.317375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.317391] ? trace_hardirqs_on+0x5b/0x180 [ 3072.317412] do_syscall_64+0x33/0x40 [ 3072.317431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.317443] RIP: 0033:0x7fc070febb19 03:26:50 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 3072.317461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.317472] RSP: 002b:00007fc06e561188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3072.317492] RAX: ffffffffffffffda RBX: 00007fc0710fef60 RCX: 00007fc070febb19 [ 3072.317502] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 3072.317512] RBP: 00007fc06e5611d0 R08: 0000000000000000 R09: 0000000000000000 03:26:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) lseek(r0, 0x7d, 0x1) [ 3072.317522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.317533] R13: 00007ffd23c78ecf R14: 00007fc06e561300 R15: 0000000000022000 [ 3072.419855] FAULT_INJECTION: forcing a failure. [ 3072.419855] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.419873] CPU: 1 PID: 19150 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3072.419881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.419887] Call Trace: [ 3072.419907] dump_stack+0x107/0x167 [ 3072.419927] should_fail.cold+0x5/0xa [ 3072.419953] should_failslab+0x5/0x20 [ 3072.419968] __kmalloc_track_caller+0x79/0x370 [ 3072.419982] ? kstrdup_const+0x53/0x80 [ 3072.420013] kstrdup+0x36/0x70 [ 3072.420030] kstrdup_const+0x53/0x80 [ 3072.420048] __kernfs_new_node+0x9d/0x860 [ 3072.420073] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3072.420109] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3072.420122] ? SOFTIRQ_verbose+0x10/0x10 [ 3072.420138] ? lock_release+0x680/0x680 [ 3072.420152] ? find_held_lock+0x2c/0x110 [ 3072.420175] kernfs_new_node+0x18d/0x250 [ 3072.420200] kernfs_create_dir_ns+0x49/0x160 [ 3072.420222] sysfs_create_dir_ns+0x127/0x290 [ 3072.420239] ? sysfs_create_mount_point+0xb0/0xb0 [ 3072.420253] ? rwlock_bug.part.0+0x90/0x90 [ 3072.420275] ? do_raw_spin_unlock+0x4f/0x220 [ 3072.420297] kobject_add_internal+0x25e/0xa30 [ 3072.420327] kobject_init_and_add+0x101/0x160 [ 3072.420344] ? kobject_create_and_add+0xb0/0xb0 [ 3072.420364] ? wait_for_completion_io+0x270/0x270 [ 3072.420378] ? kernfs_name_hash+0xe7/0x110 [ 3072.420400] ? kernfs_find_ns+0x256/0x380 [ 3072.420428] sysfs_slab_add+0x172/0x200 [ 3072.420449] __kmem_cache_create+0x3db/0x520 [ 3072.420472] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3072.420500] p9_client_create+0xc6a/0x1230 [ 3072.420532] ? p9_client_flush+0x430/0x430 [ 3072.420551] ? trace_hardirqs_on+0x5b/0x180 [ 3072.420569] ? lockdep_init_map_type+0x2c7/0x780 [ 3072.420590] ? __raw_spin_lock_init+0x36/0x110 [ 3072.420615] v9fs_session_init+0x1dd/0x1680 [ 3072.420632] ? lock_release+0x680/0x680 [ 3072.420660] ? kmem_cache_alloc_trace+0x151/0x320 [ 3072.420676] ? v9fs_show_options+0x690/0x690 [ 3072.420707] ? trace_hardirqs_on+0x5b/0x180 [ 3072.420725] ? kasan_unpoison_shadow+0x33/0x50 [ 3072.420739] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.420760] v9fs_mount+0x79/0x8f0 [ 3072.420778] ? v9fs_write_inode+0x60/0x60 [ 3072.420796] legacy_get_tree+0x105/0x220 [ 3072.420816] vfs_get_tree+0x8e/0x300 [ 3072.420832] path_mount+0x1429/0x2120 [ 3072.420854] ? strncpy_from_user+0x9e/0x470 [ 3072.420871] ? finish_automount+0xa90/0xa90 [ 3072.420887] ? getname_flags.part.0+0x1dd/0x4f0 [ 3072.420902] ? _copy_from_user+0xfb/0x1b0 [ 3072.420932] __x64_sys_mount+0x282/0x300 [ 3072.420947] ? copy_mnt_ns+0xa00/0xa00 [ 3072.420968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.420984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.421005] do_syscall_64+0x33/0x40 [ 3072.421020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.421030] RIP: 0033:0x7f3eebf31b19 [ 3072.421044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.421053] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3072.421070] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3072.421078] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3072.421095] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3072.421104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.421112] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 3072.421353] kobject_add_internal failed for 9p-fcall-cache-194 (error: -12 parent: slab) [ 3072.421421] kmem_cache_create(9p-fcall-cache-194) failed with error -12 [ 3072.421435] CPU: 1 PID: 19150 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3072.421455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.421467] Call Trace: [ 3072.421485] dump_stack+0x107/0x167 [ 3072.421508] kmem_cache_create_usercopy.cold+0x17/0x65 [ 3072.421535] p9_client_create+0xc6a/0x1230 [ 3072.421572] ? p9_client_flush+0x430/0x430 [ 3072.421590] ? trace_hardirqs_on+0x5b/0x180 [ 3072.421609] ? lockdep_init_map_type+0x2c7/0x780 [ 3072.421634] ? __raw_spin_lock_init+0x36/0x110 [ 3072.421660] v9fs_session_init+0x1dd/0x1680 [ 3072.421678] ? lock_release+0x680/0x680 [ 3072.421712] ? kmem_cache_alloc_trace+0x151/0x320 [ 3072.421727] ? v9fs_show_options+0x690/0x690 [ 3072.421762] ? trace_hardirqs_on+0x5b/0x180 [ 3072.421781] ? kasan_unpoison_shadow+0x33/0x50 [ 3072.421798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.421822] v9fs_mount+0x79/0x8f0 [ 3072.421841] ? v9fs_write_inode+0x60/0x60 [ 3072.421859] legacy_get_tree+0x105/0x220 [ 3072.421879] vfs_get_tree+0x8e/0x300 [ 3072.421893] path_mount+0x1429/0x2120 [ 3072.421921] ? strncpy_from_user+0x9e/0x470 [ 3072.421938] ? finish_automount+0xa90/0xa90 [ 3072.421955] ? getname_flags.part.0+0x1dd/0x4f0 [ 3072.421973] ? _copy_from_user+0xfb/0x1b0 [ 3072.422007] __x64_sys_mount+0x282/0x300 [ 3072.422023] ? copy_mnt_ns+0xa00/0xa00 [ 3072.422045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.422064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.422089] do_syscall_64+0x33/0x40 [ 3072.422107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.422127] RIP: 0033:0x7f3eebf31b19 [ 3072.422139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.422147] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3072.422169] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3072.422183] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3072.422196] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3072.422209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.422223] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 3072.562852] FAULT_INJECTION: forcing a failure. [ 3072.562852] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.562877] CPU: 0 PID: 19198 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3072.562889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.562897] Call Trace: [ 3072.562925] dump_stack+0x107/0x167 [ 3072.562956] should_fail.cold+0x5/0xa [ 3072.562985] ? create_object.isra.0+0x3a/0xa20 [ 3072.563013] should_failslab+0x5/0x20 [ 3072.563034] kmem_cache_alloc+0x5b/0x310 [ 3072.563072] create_object.isra.0+0x3a/0xa20 [ 3072.563090] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.563134] __kmalloc_track_caller+0x177/0x370 [ 3072.563156] ? kstrdup_const+0x53/0x80 [ 3072.563195] kstrdup+0x36/0x70 [ 3072.563222] kstrdup_const+0x53/0x80 [ 3072.563249] __kernfs_new_node+0x9d/0x860 [ 3072.563287] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3072.563342] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3072.563363] ? SOFTIRQ_verbose+0x10/0x10 [ 3072.563387] ? lock_release+0x680/0x680 [ 3072.563408] ? find_held_lock+0x2c/0x110 [ 3072.563444] kernfs_new_node+0x18d/0x250 [ 3072.563482] kernfs_create_dir_ns+0x49/0x160 [ 3072.563515] sysfs_create_dir_ns+0x127/0x290 [ 3072.563541] ? sysfs_create_mount_point+0xb0/0xb0 [ 3072.563562] ? rwlock_bug.part.0+0x90/0x90 [ 3072.563596] ? do_raw_spin_unlock+0x4f/0x220 [ 3072.563628] kobject_add_internal+0x25e/0xa30 [ 3072.563675] kobject_init_and_add+0x101/0x160 [ 3072.563702] ? kobject_create_and_add+0xb0/0xb0 [ 3072.563732] ? wait_for_completion_io+0x270/0x270 [ 3072.563752] ? kernfs_name_hash+0xe7/0x110 [ 3072.563789] ? kernfs_find_ns+0x256/0x380 [ 3072.563833] sysfs_slab_add+0x172/0x200 [ 3072.563866] __kmem_cache_create+0x3db/0x520 [ 3072.563902] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3072.563942] p9_client_create+0xc6a/0x1230 [ 3072.563991] ? p9_client_flush+0x430/0x430 [ 3072.564020] ? trace_hardirqs_on+0x5b/0x180 [ 3072.564047] ? lockdep_init_map_type+0x2c7/0x780 [ 3072.564079] ? __raw_spin_lock_init+0x36/0x110 [ 3072.564119] v9fs_session_init+0x1dd/0x1680 [ 3072.564145] ? lock_release+0x680/0x680 [ 3072.564187] ? kmem_cache_alloc_trace+0x151/0x320 [ 3072.564212] ? v9fs_show_options+0x690/0x690 [ 3072.564259] ? trace_hardirqs_on+0x5b/0x180 [ 3072.564288] ? kasan_unpoison_shadow+0x33/0x50 [ 3072.564310] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.564341] v9fs_mount+0x79/0x8f0 [ 3072.564368] ? v9fs_write_inode+0x60/0x60 [ 3072.564394] legacy_get_tree+0x105/0x220 [ 3072.564424] vfs_get_tree+0x8e/0x300 [ 3072.564447] path_mount+0x1429/0x2120 [ 3072.564482] ? strncpy_from_user+0x9e/0x470 [ 3072.564508] ? finish_automount+0xa90/0xa90 [ 3072.564533] ? getname_flags.part.0+0x1dd/0x4f0 [ 3072.564556] ? _copy_from_user+0xfb/0x1b0 [ 3072.564601] __x64_sys_mount+0x282/0x300 [ 3072.564624] ? copy_mnt_ns+0xa00/0xa00 [ 3072.564657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.564680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.564713] do_syscall_64+0x33/0x40 [ 3072.564736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.564752] RIP: 0033:0x7f3eebf31b19 [ 3072.564774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.564788] RSP: 002b:00007f3ee94a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3072.564815] RAX: ffffffffffffffda RBX: 00007f3eec044f60 RCX: 00007f3eebf31b19 [ 3072.564827] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3072.564840] RBP: 00007f3ee94a71d0 R08: 0000000020000140 R09: 0000000000000000 [ 3072.564853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.564866] R13: 00007fffb5b5b48f R14: 00007f3ee94a7300 R15: 0000000000022000 [ 3084.828614] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800913fb80 (size 32): comm "syz-executor.0", pid 19150, jiffies 4297739263 (age 20.350s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 31 9p-fcall-cache-1 39 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 94.............. backtrace: [<000000008d021132>] kstrdup+0x36/0x70 [<000000008ccec707>] kstrdup_const+0x53/0x80 [<000000008ba700f6>] kvasprintf_const+0x10c/0x1a0 [<000000002fd17f75>] kobject_set_name_vargs+0x56/0x150 [<0000000021b6f060>] kobject_init_and_add+0xc9/0x160 [<000000000a3637d0>] sysfs_slab_add+0x172/0x200 [<000000005e5f6738>] __kmem_cache_create+0x3db/0x520 [<0000000019bd3198>] kmem_cache_create_usercopy+0x1db/0x2f0 [<00000000cbe1154b>] p9_client_create+0xc6a/0x1230 [<00000000e88b1098>] v9fs_session_init+0x1dd/0x1680 [<0000000096247327>] v9fs_mount+0x79/0x8f0 [<00000000cf5e6be6>] legacy_get_tree+0x105/0x220 [<00000000ad30de5a>] vfs_get_tree+0x8e/0x300 [<00000000ba71b79c>] path_mount+0x1429/0x2120 [<00000000faf356b6>] __x64_sys_mount+0x282/0x300 [<00000000c33a938e>] do_syscall_64+0x33/0x40 BUG: leak checking failed VM DIAGNOSIS: 03:27:11 Registers: info registers vcpu 0 RAX=ffffffff83e91390 RBX=0000000000000000 RCX=ffffffff83e78f2c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e91998 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85678748 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9139e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffeb9a5e0d0 CR3=0000000004e26000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000000000000000ff00 XMM01=25252525252525252525252525252525 XMM02=20646970202c22302e726f7475636578 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=39303038383866666666783020746365 XMM06=29323320657a69732820303862663331 XMM07=78652d7a797322206d6d6f6320200a3a XMM08=0a303478302f333378302b34365f6c6c XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e91390 RBX=0000000000000001 RCX=ffffffff83e78f2c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e91998 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85678748 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9139e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f54e18ae3b8 CR3=000000001ad56000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004139b31800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000