ccess_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 825.899491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 825.901544] Call Trace: [ 825.902155] dump_stack+0x107/0x167 [ 825.903005] should_fail.cold+0x5/0xa [ 825.903888] ? create_object.isra.0+0x3a/0xa30 [ 825.904935] should_failslab+0x5/0x20 [ 825.905815] kmem_cache_alloc+0x5b/0x310 [ 825.906767] create_object.isra.0+0x3a/0xa30 [ 825.907779] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 825.908958] __kmalloc_track_caller+0x177/0x370 [ 825.910031] ? strndup_user+0x74/0xe0 [ 825.910919] memdup_user+0x22/0xd0 [ 825.911731] strndup_user+0x74/0xe0 [ 825.912557] __x64_sys_mount+0x133/0x300 [ 825.913472] ? copy_mnt_ns+0xa00/0xa00 [ 825.914355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 825.915547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 825.916715] do_syscall_64+0x33/0x40 [ 825.917554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 825.918714] RIP: 0033:0x7fc6f0a40b19 [ 825.919550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 825.923703] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 825.925412] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 825.927021] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 825.928627] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 825.930232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.931843] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:22:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2146e0, 0x102) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) openat(r0, &(0x7f0000000100)='./file0\x00', 0xa000, 0x188) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "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", "086c3a7236677faffb6042af30f57ccf5b6b5c6c1e11a675227b61ab4abbfb48b418b018112f465e1fa38e5c5f983ccfe483d586207688c1bdc0730d1bad208237e39bd1f96a84c77a444490acf11b422cf11a40925ee326a704a4d893a1e49cf043deb53a8becb80e7f06ef9bfbcbb6e84abf5e852635e86256351e55ec42f05da1270dcdee4414ffad16e54fcf5a04f48db35e4ce85f677f834d70b526b73acdbc2fe81ab1f617ff1ebf771167e4ad0e43d80ec3c5fe89297678c90271bc910f7664a17271ebdaff247800d276b0e91f9cd358ef74e862fed1c0e63acb2f51643cc9a629fdd6bc1f5b6d28b80d45dc75d2d4a55e57ad561d5719918e3d57c000bab0ffb0fb2c0fba53fee965c63ee76191e4065c4650aa24a1f9f3a4e32d446db94e9003b92490e1d87902e425d39bf005a8edc01f1c4362608f96cfda57cb57ae76aa3e7085acc8602806484c9a6af9a135f64cecae8a3544a402282d98f5d5ab6f44e84daf3c35d4ca92d300b4d60499039bdebd9b07ddceb490391c6bb2c3c58b198c36c4522ecf8e289e218a335295008c1bcbf7a4b89622c5d3a5fd65fe16f9446b4bc7d1f49cebb1a1c7cf20802ed7896c45c9412e78b5a4ca08927ef615ce2237d25857cef314cc6a4426b01445cbb236ed328c826c781f6bd1f1c25feaed7b6932256bbb515e85e1f1f640fa3067d033f01bf5dee6f10212c03b7278bbb1846f4d8fd66086a9ffd34d56084008daa9d8f09b7c436fc6cb27a361868a01f3db65866825cc6a99905c63c415c5cb1d45d18d38d883f86fa52cba115ead9210160e05e6ba8e38409c988c603f00e3fd8483d395518d7eb4ee71c487a2d633136c5dcb9ba9eb77f4d5f7a4fcf36132178e568ec3d2b89680144ece4868efb5b215ca241cbbab6c2b142875ec5035994bab8f14f88213a2ddaad5bea3c216ee66f9f79f9271e9fc26ceb6eee82a5619568ba24e716ed598747f538564c0635fe4121559fdd7c1346750a095be7ac9b67454496dbbbaad041269b8ad3584523b5398a17a0132399952c7efc6d6e55013483963c899a5ee09c214ac982bc4fd2919828129071a149e5e0369f76d49b650ca74496dd6b94dd850ab7090de657ea5aa4d1ac3ca9aa1bc6f9941d78c81225d5ae2504ee867f78c50d45c8bb429518e724742a8495833f02128b27197873182386e6ebc5c0312a7caced9ef4d61f9b0e3ad80b0e24fa58c6719b5aface933ba3970b2ad76bf4ae46b99b824e86aadb0c21b477a1fa5aa3299653a216a386d98a27235e7687e1b3a02faee804143feac448a1b15c0c0e23ca825f670299d634ce4b3e6a529c7b68dff4ffc4ee4bed5c65d3fd9528ba743a02b477f075c685a67fac3d0b061dba675c5a06c0c48823f54cf008a0dbfea8a3c2cb08b43e0881952c86e63981eb9c85b5e256ded2bd4fb4957b3852b9a8e41d9ba63db7bb9acf3d4b385c74a6b3593c942280bfc76645f84730147a1c4a5ac61a5bbf09741f3ab4a58e03a4c504d0619dbdb6a329aec6c10d9c31476b9a4b8561132c552ccaf59b95ea5385d9e283f24f334e8eee41042e206a7bbfe92bc89bba69d1c30f88e69d45abb9e1b2c26be6b578fbc173636ea26969ff61bd34229e374c8fc7c3aae36cbf594a98052a39e1ad7c51f4b8018cb7eaeb1781ba2f6b75bd79a874ebf4127fc31c75db1664e3f962b1ae97e12ffd177b8427e814e143eaa62f6f3f94245f0ed54b3ce9d24443dc4b57916c7704c1e0c7cc5e7ec6b0c47d189ee15585c7e1c8b005e14828fd38c67e7026f2f05f776804cbf0ef60a08b6ef2a1514551782ee52d5f902f79a7027b6580de93f3c1c0bd7e7c8dec5222c6afa1ae3beca76401ad3d9bd6e025c72a9beca5e68261b932ffee2f95b3c7f89e759e1cba14118eaffb4493d8cae1ba8ad7a6abdcaf016c9d8723be0ce3f78b2c69d275d2b56389a610c564f1492b7e095d967172efb9576331321747f69b5cde22e049866499859934409e7eedf82cace7ab7d053b0a58b3ca813383cf3d98694bf428a37b7d3b19a03ec1d6dd41eb49d812ab18ad5b0b9f20aaab1783f000bdba6b0e0c9966846ba0be76aeff44198f9aa431a1bdc63f0f5b3099c2eed42cf76d729f09a8000dde4c17fb2ac506b87464acc786e569c5b2a60151c74d543720f358cdd7298cc69435b33326438bdc095b53e2664f813ed484b92af4b8e9ede1052fed81445a89783069bb7793fa0c8a12f9b87ef064cb594e9d463ca2eede6afd66e56a148ae35e5f76d46917af647e5457e4eb8cc1613345768cf68263c5c8167de4639839d099e8cf8022b39750b7c09c63259a2ba971fd50e9ef1d93763413a9458ae6fee41c08bf45cc1cfb6bce7be0a6ecb003604696c081d5da8833b20dfac7d23205fff459a4d4b95da1b18aa87f42b781bc71594a0aba81b0091a870431f46e18263198d4cc648cda465bf7732356cf700cc526d51aade86c2366b7c6e723f97558a99bbeb47b21d8191e0ea4d9c483b1a99cb5c9372f8ce4f4622e31de554c72e98c3575b2872cddb2482093a4f765b85989de1fb9db2b3b34dfc6af7ac311fa73e04da9dff604d70d2dca2c6cb14a08591c7a400cb83a3e44ce89a2b1db1df4c8468419548e9e65a01794d96d9de85a74025b531b77b3c9c82ac360f5b93a4d04f04660a516bc602966313da75c78676a0a9e18554d7c84d65df0696ed84fccfe2d46bf9927da14d4ce1210c99fd7eca021e3fa385509840599d15c889abb0e3eb36b9b3a994cc785031b58b9d776e3aea3872817b1c8a0d8de2b5d1e51f81b0b62922ebf0c03ad2e02682d85a4d4277f9972daec046b1837248ee7bcb9cb690596097763899be088d05e5343fc6f03de1c641ce2384a5f60725a02dd7d4000fcc33cf48b0dfcced03e4a40dce702977e78ace010da0b2cee7ff28b91b190cc3cb53a8c9668da7f54c46a6ad11c70e829734b7e33a2e4e8f4049b3cbb66695a063758823b378d30f6c923366a48c087ca7afc956b1bcbe29cd11aeda744c7651108381e9631cb3fa5c17627536bf8bb7bd974ff8ba9cfa65e1a7b612b28a0d2e0d24af7c3ccd176816070fa11ddc8b498577be3f5c5cab8e33fbb790623a462cffe715ade916ca8e883ee394174278c6f7208d228212bb08d5d29994d1d6fb0b4389c46b84a655001909ec7b043ec23b47d6fe3189e19972362161163009bc31b8ba22220a811668405906f8ea969dec95c2cc9f9496414244aee492b162e6503c26618e1ab95ec10eb1ad945850efc82460d47af1cbe05e957427c454b0f38c9175d69549db44188d5e315e261319d91639a453a7ec50de60c9b419eda91d981c531fff9657afdf702b975014f2812f6cbf08fb1b81c719324fb019bb6bbaa040fe0bf1c97e98e3abd64cfe50d0d10feef27f1e9c17cf01f6c70f0ea75566cabc98354f58070dcc41836d8127520f9ff6b1247bffe0b26351b0332c52fd290fb2c70c072842b7ad078092916ee7e28651b519cc2826b34d3bbf4e3e27bb12c7ca5d2ade8d4915526ce9ad0e5b574c9bb5250e19424cf4bbdf1f9fd900010ea410b2cf90ae2a2ee653582efa13aed3bf4ff85ea872a3c26f0655228fa49a7a88224f757634600e9273f9398109209dd188afa7dcaaa4c7eca3c48393b4d900a6f1474cc43b2c9ec084174c82129627ed23bf2397dbfb5eb6607bd9fdfadca37339aeafddec65f5dde346fdf4dfdde6fe5f5d2243833b4eb60510586f2415014e633c08b9dbe86ecbfdd75c7f8ae4e3a22b0e0019917b4c7fe2d48f68175d949d6297bbe6ac430d1c479d7521d6b5d8fefe747c6f7da6964d16f54f24e8bcf372157ed5d7f4d3ef1ef68517d7b85a79d0bf7b1dbdc4e76b84bfb65a06dde539f30ad29f7de9dc200f659d3484feb373d05f1a55e47b87aff6f922fb6098688659bf65a24be659b50ac2efc0bcb68b4a941ccff22ced5ab861e20be9903559dad3a765a547bf3d314aadeaea39d11c6071a9b071f888ef69e4650c8e0b58042ce15a4d1a2b8300a5e0f5904088d27615477def78d5a5d59ed5e2e62e7d8ccec7dfa746e22e19f1649e106674c39498c93935064e44732ea8398cc8d8af56c62d2225c1ec3cfce2fc5c68b3a4b1bf14dd26ae37b6f985bb460340259bb12f7d71751702a44af4d693dadd1432b57b3136aad607ea63d3fc216de5fcb762caf44ef5511e7312c72c860778ad45631669ec5f311e79f058bbec226da79ed24373fbbacfca6de73c5cca175a0cb4abd6aef428e58af13b95b8dd17d774acdbda647d2f689469adeb8854f07967a422b3a8087c0be4e0a22c99bd06bbf51b13badf9bfd5b28d71b6fa407c0e2749c577817e02c88c032ce6e728b6d09fc2912f5e4e42aced38eff429e41d5cd121be962a4a0e10669665d7877bc85ff946a4089e01b26fa4d7f27ffd4bbf22d10e0422b5f8d17d805ee55d1db606af432f6185d0e21ec88ab7c82a482c11b33c54ae2d0f497b6d2cd9e97e1c3cea021ec46588bbfbace6efafcf225237bcb1b8ca8ad48576a95343b997f45528df456b6112d921fa4705986e4d7c8c9da04b4e3f0963fb0f2ae527361f64d15e38b17d11c697817b74f9b39d754d9c787eaf9ca2628b7261526c8d0e3ff6389dbadebe974cc096a4c57bfa0709e7ea2d525b54c958391b3627ba3e404e75382d66ae6c88b8cdfa61a1dfbe0bbd4751cb7b38cd3cdd46e33b05a7979e69b02da29c7763d7b7a3db10aeaff273e1baa8e82f00b3d8027c568b4434423b80a87f1943bf8c872b452e9fe6046a8b44db72d827f74c05120ccd47537f5ec796d81b8359dfd16a1159c0632357c7d4dad9203250e54df6cc734bd7fca9cfaa405710d662628c1d0a2e7fcd5f203ecf9219886a4c330617418cfa00638bee7d0a2c7c4f95db14909347c0f3612dc166ab370aaf19d5aca7aa5c55b58da76a7ca5806700366cd8d93475d6dd3186f3fb05dd949714b3ebc82db7d563e668652335c0f1fcac710947b56a6299b2d296d1ad8d5f763b8c21e9feffd4015225eaa03449a9f10ba226cae6077dfa8b49a17f6cb14d98a4f172b2ca2f6cb054c3b74d01490613e255b2ba6104769ed7f25e66122f8cdf284d32be9522932d9ef75f162d3d388a65965b8195a8c42981cd8aed0a392dce20ea29dea255c5a650944274be0e674343d748fd30b0067d1d15fcc08e812897817129a6e192d7c33bbf5ae4bbb201e702e0a7df161ac19e84d9d2bf9e6a3b3e3333943ab334787dddb5b6a4a7198540ba3589aa1fdf9eac701853d0ed07682b6266e918b35930a270f18cb6b3c8ed114e5d050e3d8b4e647e185f2296fdac78c362c176f633bf523a5e50dd69121a7ea933785150d9a3824ac6183"}) 03:22:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}]}}) 03:22:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 3) 03:22:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 2) 03:22:18 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:18 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:22:18 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 12) [ 840.167265] FAULT_INJECTION: forcing a failure. [ 840.167265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.169725] CPU: 0 PID: 6882 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 840.171158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 840.172894] Call Trace: [ 840.173459] dump_stack+0x107/0x167 [ 840.174219] should_fail.cold+0x5/0xa [ 840.175025] _copy_from_user+0x2e/0x1b0 [ 840.175863] memdup_user+0x65/0xd0 [ 840.176604] strndup_user+0x74/0xe0 [ 840.177367] __x64_sys_mount+0x133/0x300 [ 840.178207] ? copy_mnt_ns+0xa00/0xa00 [ 840.179039] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 840.180144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 840.181228] do_syscall_64+0x33/0x40 [ 840.182001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 840.183077] RIP: 0033:0x7fc6f0a40b19 [ 840.183852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 840.184352] FAULT_INJECTION: forcing a failure. [ 840.184352] name failslab, interval 1, probability 0, space 0, times 0 [ 840.187694] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 840.187714] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 840.187724] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 840.187734] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 840.187743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.187753] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 840.192742] FAULT_INJECTION: forcing a failure. [ 840.192742] name failslab, interval 1, probability 0, space 0, times 0 [ 840.193952] CPU: 1 PID: 6891 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 840.193972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 840.208831] Call Trace: [ 840.209479] dump_stack+0x107/0x167 [ 840.210370] should_fail.cold+0x5/0xa [ 840.211312] ? create_object.isra.0+0x3a/0xa30 [ 840.212418] should_failslab+0x5/0x20 [ 840.213354] kmem_cache_alloc+0x5b/0x310 [ 840.214347] create_object.isra.0+0x3a/0xa30 [ 840.215432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 840.216683] __kmalloc_track_caller+0x177/0x370 [ 840.217815] ? strndup_user+0x74/0xe0 [ 840.218758] memdup_user+0x22/0xd0 [ 840.219617] strndup_user+0x74/0xe0 [ 840.220509] __x64_sys_mount+0x133/0x300 [ 840.221506] ? copy_mnt_ns+0xa00/0xa00 [ 840.222464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 840.223765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 840.225030] do_syscall_64+0x33/0x40 [ 840.225948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 840.227205] RIP: 0033:0x7f5f5e955b19 [ 840.228114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 840.232597] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 840.234445] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 840.236192] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 840.237934] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 840.239668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.241394] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 840.243156] CPU: 0 PID: 6890 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 840.244591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 840.246344] Call Trace: [ 840.246911] dump_stack+0x107/0x167 [ 840.247669] should_fail.cold+0x5/0xa [ 840.248472] ? legacy_init_fs_context+0x44/0xe0 [ 840.249443] should_failslab+0x5/0x20 [ 840.250239] kmem_cache_alloc_trace+0x55/0x320 [ 840.251191] ? lockdep_init_map_type+0x2c7/0x780 [ 840.252174] legacy_init_fs_context+0x44/0xe0 [ 840.253105] ? generic_parse_monolithic+0x1f0/0x1f0 [ 840.254133] alloc_fs_context+0x4fd/0x840 [ 840.255011] path_mount+0xab1/0x21e0 [ 840.255790] ? strncpy_from_user+0x9e/0x470 [ 840.256689] ? finish_automount+0xa90/0xa90 [ 840.257588] ? getname_flags.part.0+0x1dd/0x4f0 [ 840.258551] ? _copy_from_user+0xfb/0x1b0 [ 840.259436] __x64_sys_mount+0x282/0x300 [ 840.260276] ? copy_mnt_ns+0xa00/0xa00 [ 840.261096] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 840.262185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 840.263269] do_syscall_64+0x33/0x40 [ 840.264041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 840.265109] RIP: 0033:0x7f2ae689eb19 [ 840.265876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 840.269726] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 840.271319] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 840.272807] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 840.274293] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 840.275788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 840.277279] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:22:19 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 840.297658] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:22:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4803c0, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) creat(&(0x7f0000000080)='./file0\x00', 0x20) r2 = open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x9, 0x8, 0x9, 0x0, 0x40, 0x64c21, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x44000, 0x5, 0x6, 0x3, 0x8, 0x20, 0x9, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x5, r2, 0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x80, &(0x7f00000005c0)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, '.]@@/'}}, {@fscache}, {@privport}, {@uname={'uname', 0x3d, '/dev/vcsa\x00'}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@cachetag={'cachetag', 0x3d, '\''}}, {@msize={'msize', 0x3d, 0x7}}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@access_any}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@pcr={'pcr', 0x3d, 0x16}}, {@measure}, {@dont_measure}, {@fowner_gt={'fowner>', r4}}, {@euid_lt={'euid<', r5}}]}}) 03:22:19 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:19 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 4) 03:22:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4856e2, 0x0) r1 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7, 0x6, &(0x7f0000001600)=[{&(0x7f0000000300)="9e7e1371662031a4811dbfa3af9ecad0e3392c478fee3c9e93698a737af56d97ed8bc7f201aaf96af018c06557f40c0ba165691ccf6c3b2b2c4f758c6c67258eacf3a34557e7d43d3d6ed3f0a24d47c661715248deeee396a2ce6d70037b06f03391f3cc318a47ae89dd66d5e2cf47079e80a1df514eb80e88c60daf805861a8ba252a11dc60b53d7f40064218f4a83da61d473a808240fa92d927c757604bbb0337a84a442f6a4d51bb9301cd026a2edf89c6f26dd528", 0xb7, 0x8890}, {&(0x7f00000003c0)="b4c54d9d497b969c333e2d9e4fa016eca4ad48c9dbe407b07ea29ba582e351680135782e9785cb3f1ede399b5b94f708ebd3d12c24c0908f3ca40764704b50824beddda802aafc15f5c922baaac410f275bc1b64d0eb0375", 0x58, 0xfffffffffffffffe}, {&(0x7f0000000440)="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", 0x1000, 0x57}, {&(0x7f0000000100)="66f3948ce9e7e25791e5a2d78c8b4fbf76341b81a5fb61fc75882e0340651b30e0186db1f667b83c9b76184ea47c08e0b6da3a259c281c35b0a56e7208", 0x3d, 0x6}, {&(0x7f0000001440)="3a1ecf9cf05b4b84445f8030ac79df6f21867a1a71736c0af426f98e528e2acf924f2ad3574a6ca44ee8ed144d0538e094179ddb9ee782e44b091430b11b379a6f72cf6778e918a28a0a482067ed01c97c248aaee790243cfc14846487c2f70caea13ed53217524d36054b9f4c34b01f0da8f270634d0fc863f075a65ccb74afe02e82ae70944c51303170c7be0d2037c066f66e77f7ddc1", 0x98}, {&(0x7f0000001500)="9216d5bb4657728cfedf2b439d7a130eb9f11e6e56b7cc2030920cc1cb0299745372bcd2ee794f29b1775bfa835722fa55f18edc72286e4a9b5234ee6f4a180da7344d148afd58f5b4e7a4bafea6f0d655f84b984b1f6c68f7d35dc96e499c7c2f71bde55c93ff3a08f123d23963b707355adacc9ef231e959379ca2bdb270623c15585d58050e0e9e7850d7a4ca09258b9596cc369a92f366f6061f435cdbb692b7a4b2e19a1d87d47b0ed09d0591ba36607bf2ab428d6c01afde4a67cabf0de1999e2be4c415a91c65aa9ecea5afd2e573e65cbf07dd2400a7381d3e61", 0xde, 0xffffffffffffffcf}], 0xa056, &(0x7f00000016c0)={[{'#'}, {'!'}, {}, {'\x89'}, {'\x8b\xba'}, {'{-:}*,'}], [{@euid_gt={'euid>', 0xee01}}, {@obj_role={'obj_role', 0x3d, '%]^$'}}, {@fowner_lt}, {@dont_hash}, {@dont_measure}, {@context={'context', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) statx(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x40, &(0x7f0000000200)) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) [ 840.482260] FAULT_INJECTION: forcing a failure. [ 840.482260] name failslab, interval 1, probability 0, space 0, times 0 [ 840.484359] loop2: detected capacity change from 0 to 8388096 [ 840.484941] CPU: 1 PID: 6908 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 840.487528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 840.489345] Call Trace: [ 840.489927] dump_stack+0x107/0x167 [ 840.490726] should_fail.cold+0x5/0xa [ 840.491578] ? copy_mount_options+0x55/0x180 [ 840.492545] should_failslab+0x5/0x20 [ 840.493377] kmem_cache_alloc_trace+0x55/0x320 [ 840.494375] ? _copy_from_user+0xfb/0x1b0 [ 840.495296] copy_mount_options+0x55/0x180 [ 840.496224] __x64_sys_mount+0x1a8/0x300 [ 840.497111] ? copy_mnt_ns+0xa00/0xa00 [ 840.497972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 840.499126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 840.500256] do_syscall_64+0x33/0x40 [ 840.501069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 840.502186] RIP: 0033:0x7fc6f0a40b19 [ 840.503005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 840.506988] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 840.508623] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 840.510157] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 840.511707] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 840.513247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.514799] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:22:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 5) 03:22:32 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {0x0, 0x0, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:22:32 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 13) 03:22:32 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}]}}) 03:22:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 3) 03:22:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) fcntl$dupfd(r1, 0x406, r0) [ 853.710788] FAULT_INJECTION: forcing a failure. [ 853.710788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.712414] CPU: 0 PID: 6925 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 853.713287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.714342] Call Trace: [ 853.714683] dump_stack+0x107/0x167 [ 853.715167] should_fail.cold+0x5/0xa [ 853.715658] _copy_from_user+0x2e/0x1b0 [ 853.716173] memdup_user+0x65/0xd0 [ 853.716630] strndup_user+0x74/0xe0 [ 853.717102] __x64_sys_mount+0x133/0x300 [ 853.717618] ? copy_mnt_ns+0xa00/0xa00 [ 853.718135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 853.718807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 853.719477] do_syscall_64+0x33/0x40 [ 853.719951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 853.720615] RIP: 0033:0x7f5f5e955b19 [ 853.721091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.723464] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 853.724433] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 853.725343] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 853.726256] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 853.727183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.728098] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 853.736654] FAULT_INJECTION: forcing a failure. [ 853.736654] name failslab, interval 1, probability 0, space 0, times 0 [ 853.738177] CPU: 0 PID: 6932 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 853.739058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.740102] Call Trace: [ 853.740448] dump_stack+0x107/0x167 [ 853.740909] should_fail.cold+0x5/0xa [ 853.741391] ? create_object.isra.0+0x3a/0xa30 [ 853.741968] should_failslab+0x5/0x20 [ 853.742448] kmem_cache_alloc+0x5b/0x310 [ 853.742970] create_object.isra.0+0x3a/0xa30 [ 853.743523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 853.744172] kmem_cache_alloc_trace+0x151/0x320 [ 853.744753] ? lockdep_init_map_type+0x2c7/0x780 [ 853.745352] legacy_init_fs_context+0x44/0xe0 [ 853.745914] ? generic_parse_monolithic+0x1f0/0x1f0 [ 853.746538] alloc_fs_context+0x4fd/0x840 [ 853.747113] path_mount+0xab1/0x21e0 [ 853.747587] ? strncpy_from_user+0x9e/0x470 [ 853.748131] ? finish_automount+0xa90/0xa90 [ 853.748675] ? getname_flags.part.0+0x1dd/0x4f0 [ 853.749263] ? _copy_from_user+0xfb/0x1b0 [ 853.749792] __x64_sys_mount+0x282/0x300 [ 853.750304] ? copy_mnt_ns+0xa00/0xa00 [ 853.750796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 853.751464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 853.752114] do_syscall_64+0x33/0x40 [ 853.752582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 853.753228] RIP: 0033:0x7f2ae689eb19 [ 853.753695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.756039] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 853.757000] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 853.757904] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 853.758815] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 853.759726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.760631] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 853.762359] FAULT_INJECTION: forcing a failure. [ 853.762359] name failslab, interval 1, probability 0, space 0, times 0 [ 853.763813] CPU: 0 PID: 6926 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 853.764676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.765713] Call Trace: [ 853.766053] dump_stack+0x107/0x167 [ 853.766515] should_fail.cold+0x5/0xa [ 853.767007] ? create_object.isra.0+0x3a/0xa30 [ 853.767585] should_failslab+0x5/0x20 [ 853.768062] kmem_cache_alloc+0x5b/0x310 [ 853.768579] create_object.isra.0+0x3a/0xa30 [ 853.769128] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 853.769776] kmem_cache_alloc_trace+0x151/0x320 [ 853.770369] copy_mount_options+0x55/0x180 [ 853.770906] __x64_sys_mount+0x1a8/0x300 [ 853.771422] ? copy_mnt_ns+0xa00/0xa00 [ 853.771920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 853.772578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 853.773224] do_syscall_64+0x33/0x40 [ 853.773693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 853.774338] RIP: 0033:0x7fc6f0a40b19 [ 853.774805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.777125] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 853.778097] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 853.778998] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 853.779888] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 853.780779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.781669] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 853.791825] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:22:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}]}}) [ 864.951430] sg_write: data in/out 196608/10 bytes for SCSI command 0xd2-- guessing data in; [ 864.951430] program syz-executor.2 not setting count and/or reply_len properly 03:22:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:22:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) writev(r3, &(0x7f00000003c0)=[{&(0x7f00000000c0)="0000abe02400030021206cda3b5e5672b89aeddb5fbd0706006dff0043a9d7cceb23726fd2e087c184147a5547a42fb81bf74ebdd05b7677", 0x38}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e00", 0x2a}], 0x2) sendfile(r0, r3, &(0x7f0000000080)=0x7b, 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x5) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 03:22:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 6) 03:22:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 4) 03:22:43 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:43 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {0x0, 0x0, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="17d8890007000000f05defc71402a8937adf1ee343ff0400a39d47735d31931898763772790000000000001b50c76b1069b134c4c27b05ac57286cb12984515ecdf8cabc3a9e9502375c6b9efe87aa35fd2e485fe34c0198998a4800253bc0270dcd41e817c9cb28b2cd5feadfbe6f90d27abb068c93be4d6af17548031f03e68ff0f79ac9257b019967e10a83f1e1d5270d35f89531470ef4844404000000000000c50900009d7e8455e26fb0d7a24f9a02da0a7039d40358b0a9fec1accc6e2272c87f93867ec21b5c42b9a848f823c9cc0f8e9e259a20b82cd0024053ff71a4c618629c4814f3a966670cd44c1dbda3098d936b8d4aae73d0a073837b6a8749827dcdfe9c68366b3f368af1bd1ab4917ab7007f2107058f93ca73a970b8b46f7421354eefe706c8f83f801a308f257a93380cc2"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:22:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 14) [ 864.955485] sg_write: data in/out 196608/10 bytes for SCSI command 0xd2-- guessing data in; [ 864.955485] program syz-executor.2 not setting count and/or reply_len properly [ 864.972130] FAULT_INJECTION: forcing a failure. [ 864.972130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.973528] CPU: 1 PID: 6957 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 864.974346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.975350] Call Trace: [ 864.975669] dump_stack+0x107/0x167 [ 864.976104] should_fail.cold+0x5/0xa [ 864.976564] _copy_from_user+0x2e/0x1b0 [ 864.977038] copy_mount_options+0x76/0x180 [ 864.977534] __x64_sys_mount+0x1a8/0x300 [ 864.978013] ? copy_mnt_ns+0xa00/0xa00 [ 864.978473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.979120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.979754] do_syscall_64+0x33/0x40 [ 864.980195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 864.980801] RIP: 0033:0x7fc6f0a40b19 [ 864.981239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.983426] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 864.984328] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 864.985165] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 864.986003] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 864.986844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.987716] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 864.993001] FAULT_INJECTION: forcing a failure. [ 864.993001] name failslab, interval 1, probability 0, space 0, times 0 [ 864.994335] CPU: 1 PID: 6958 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 864.995049] FAULT_INJECTION: forcing a failure. [ 864.995049] name failslab, interval 1, probability 0, space 0, times 0 [ 864.995153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.995165] Call Trace: [ 864.999025] dump_stack+0x107/0x167 [ 864.999467] should_fail.cold+0x5/0xa [ 864.999924] ? copy_mount_options+0x55/0x180 [ 865.000442] should_failslab+0x5/0x20 [ 865.000896] kmem_cache_alloc_trace+0x55/0x320 [ 865.001439] ? _copy_from_user+0xfb/0x1b0 [ 865.001935] copy_mount_options+0x55/0x180 [ 865.002436] __x64_sys_mount+0x1a8/0x300 [ 865.002918] ? copy_mnt_ns+0xa00/0xa00 [ 865.003402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 865.004021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 865.004633] do_syscall_64+0x33/0x40 [ 865.005073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 865.005680] RIP: 0033:0x7f5f5e955b19 [ 865.006119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 865.008329] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 865.009223] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 865.010057] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 865.010892] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 865.011753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.012596] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 865.013463] CPU: 0 PID: 6962 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 865.015060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 865.016986] Call Trace: [ 865.017599] dump_stack+0x107/0x167 [ 865.018445] should_fail.cold+0x5/0xa [ 865.019337] ? v9fs_mount+0x5a/0x8f0 [ 865.020195] should_failslab+0x5/0x20 [ 865.021068] kmem_cache_alloc_trace+0x55/0x320 [ 865.022126] ? v9fs_write_inode+0x60/0x60 [ 865.023085] v9fs_mount+0x5a/0x8f0 [ 865.023903] ? v9fs_write_inode+0x60/0x60 [ 865.024857] legacy_get_tree+0x105/0x220 [ 865.025793] vfs_get_tree+0x8e/0x300 [ 865.026652] path_mount+0x1490/0x21e0 [ 865.027537] ? strncpy_from_user+0x9e/0x470 [ 865.028520] ? finish_automount+0xa90/0xa90 [ 865.029505] ? getname_flags.part.0+0x1dd/0x4f0 [ 865.030565] ? _copy_from_user+0xfb/0x1b0 [ 865.031527] __x64_sys_mount+0x282/0x300 [ 865.032454] ? copy_mnt_ns+0xa00/0xa00 [ 865.032539] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 865.033355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 865.033377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 865.036796] do_syscall_64+0x33/0x40 [ 865.037652] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 865.038830] RIP: 0033:0x7f2ae689eb19 [ 865.039688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 865.043926] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 865.045669] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 865.047306] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 865.048926] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 865.050551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 865.052186] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:22:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:43 executing program 2: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x8000, 0xfffffff8, 0x4, 0x8}}}}, 0x30}}, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) 03:22:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 5) 03:22:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 15) [ 865.133736] FAULT_INJECTION: forcing a failure. [ 865.133736] name failslab, interval 1, probability 0, space 0, times 0 [ 865.135257] CPU: 1 PID: 6973 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 865.136114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 865.137154] Call Trace: [ 865.137492] dump_stack+0x107/0x167 [ 865.137965] should_fail.cold+0x5/0xa [ 865.138461] ? create_object.isra.0+0x3a/0xa30 [ 865.139063] should_failslab+0x5/0x20 [ 865.139549] kmem_cache_alloc+0x5b/0x310 [ 865.140077] create_object.isra.0+0x3a/0xa30 [ 865.140636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 865.141287] kmem_cache_alloc_trace+0x151/0x320 [ 865.141883] copy_mount_options+0x55/0x180 [ 865.142440] __x64_sys_mount+0x1a8/0x300 [ 865.142951] ? copy_mnt_ns+0xa00/0xa00 [ 865.143458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 865.144117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 865.144767] do_syscall_64+0x33/0x40 [ 865.145241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 865.145915] RIP: 0033:0x7f5f5e955b19 [ 865.146526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 865.149524] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 865.150496] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 865.151414] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 865.152324] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 865.153299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.154198] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:22:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40, 0x180, 0x8}, 0x18) 03:22:44 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {0x0, 0x0, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 865.201767] FAULT_INJECTION: forcing a failure. [ 865.201767] name failslab, interval 1, probability 0, space 0, times 0 [ 865.204589] CPU: 0 PID: 6976 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 865.206186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 865.208059] Call Trace: [ 865.208679] dump_stack+0x107/0x167 [ 865.209529] should_fail.cold+0x5/0xa [ 865.210428] ? create_object.isra.0+0x3a/0xa30 [ 865.211508] should_failslab+0x5/0x20 [ 865.212395] kmem_cache_alloc+0x5b/0x310 [ 865.213342] ? cred_has_capability.isra.0+0x152/0x2b0 [ 865.214549] create_object.isra.0+0x3a/0xa30 [ 865.215533] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 865.216701] kmem_cache_alloc_trace+0x151/0x320 [ 865.217800] ? v9fs_write_inode+0x60/0x60 [ 865.218772] v9fs_mount+0x5a/0x8f0 [ 865.219614] ? v9fs_write_inode+0x60/0x60 [ 865.220583] legacy_get_tree+0x105/0x220 [ 865.221538] vfs_get_tree+0x8e/0x300 [ 865.222370] path_mount+0x1490/0x21e0 [ 865.223247] ? strncpy_from_user+0x9e/0x470 [ 865.224269] ? finish_automount+0xa90/0xa90 [ 865.225289] ? getname_flags.part.0+0x1dd/0x4f0 [ 865.226344] ? _copy_from_user+0xfb/0x1b0 [ 865.227301] __x64_sys_mount+0x282/0x300 [ 865.228264] ? copy_mnt_ns+0xa00/0xa00 [ 865.229166] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 865.230355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 865.231604] do_syscall_64+0x33/0x40 [ 865.232494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 865.233720] RIP: 0033:0x7f2ae689eb19 [ 865.234542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 865.238854] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 865.240709] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 865.242336] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 865.244077] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 865.245806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 865.247416] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 865.256733] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:22:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 865.315365] 9pnet: Insufficient options for proto=fd 03:22:57 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000), 0x0, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:22:57 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:22:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 16) 03:22:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 6) 03:22:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x8000, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000240)="b4f33cfd6e8692ca76d795552f1622f7cd34b1202d6c3e45d63d038fc7dc5a2d0522930b80317f447746507400728aab21c19ddbd5a4c44bb52436f7dbcd9fa06399a6e4557aa30ef5181532cf368808592097a059b54b3d4fda3d73988749c8c1fb699f5c0a970adc2676e33f83d04e4f3768fa58e7ba9ac816f177f9a5d707ab00bc6065bd9aa68e84957691bfbc432cff0a00fdb2d81fa0cd6594d226977a06", 0xa1, 0x8}, {&(0x7f0000000300)="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", 0x1000, 0x7}, {&(0x7f0000001300)="e27361288b8150d08a11efc56cde5c2e0b2f8adb0fe55ef289783381b35b8703b01b913fc9cacf8a9d37d63a4db1733bfae7b616c6b30e1f7d8a5e90f01074d41add8fd7f8bd4a6348eb67cb487b8fe0a90cc068067d1f1b6b1bf78b757e5e5bfa73d195eb006cc5c98059e0bafd5162dba07eaae31072b51b4539376d675c5067a3a4100c708522dba6ea64b70fdf7548ee3d5f419a2d8a76a9c3a4301fe6e2a2c8f36eca1c2601e2a3cfc507897ec4b0cc0754dfb030a20ec91d3d", 0xbc, 0x4}, {&(0x7f00000013c0)="70b2b3ff063d52abe760d54bb9844f259ff90caaade7a160225717701c1109b604545b5e4003d486b934b50a68c17391ff0070f55660db4b9c222454e7ae9a8d454daab9720047509558362c1c330ff4", 0x50, 0x20}, {&(0x7f0000001440)="7ab5d830439dea1f6c91ef04", 0xc, 0x3}, {&(0x7f0000001480)="daa4add6d9b6f97f6c4120e9d47f2b2a8c0a6c030aa2189641b0b45089f0", 0x1e, 0x4}], 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2c5c2c5b292a2d2c293a2c736d61636b6673726f6f743d2f5d2c686173682c7065726d69745f646972656374696f2c66756e633d4b455845435f4b45524e454c5f434845434b2c00a147f16da04aae6d01976ce77f54c598814629bad37dbc47af8ca4ac9f5c6d54c1a225a6ed113d7ff6b39c8795391ff15168bf43317cab1755cbf30053099351ab5cf41e15c634fc2dd4896e448fe8f70dd1ee891ae92b64e7d0a5a079ce878f5205cd31c07de6b6701b1fc6fce2499fc95dfedf5aee0655d28121db32ad1908b7ea59c1b7b8651d21d329f85400ae098357159e9d03d246fd57463e03659864debd3f0961c7c2d4124673e996dbe7f4cf17f1f0dfbd23a8bb696e076c43f88b5aa29ffad1cdb4c8c9fb6cc1b068c57d0c3b1c7efbbbf25ccdf47b9e1313ec5315"]) renameat(r1, &(0x7f0000001880)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001640)='./file0\x00') openat(r0, &(0x7f0000000100)='./file0\x00', 0x4080, 0xa0) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000001580)="7fd41c04550300020000000000b0844f80f4b777bf2d3d450947f7d2616f72657d044129471d4fd47924fd0900e09e00", 0x30}], 0x2) r5 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2201) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = fcntl$dupfd(r5, 0x0, r6) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e00", 0x2a}], 0x2) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) sendfile(0xffffffffffffffff, r8, &(0x7f0000001840)=0x657b, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001600)={{0x1, 0x1, 0x18, r9, {0x5}}, './file0/file0\x00'}) openat(r4, &(0x7f0000001680)='./file0\x00', 0x8ca43, 0x110) 03:22:57 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 878.714557] 9pnet: Insufficient options for proto=fd 03:22:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 7) 03:22:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 878.728764] FAULT_INJECTION: forcing a failure. [ 878.728764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.731307] CPU: 1 PID: 6999 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 878.732162] loop2: detected capacity change from 0 to 32768 [ 878.732767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.732778] Call Trace: [ 878.734082] nfs4: Unknown parameter '\' [ 878.735472] dump_stack+0x107/0x167 [ 878.735493] should_fail.cold+0x5/0xa [ 878.738283] _copy_from_user+0x2e/0x1b0 [ 878.739144] copy_mount_options+0x76/0x180 [ 878.740067] __x64_sys_mount+0x1a8/0x300 [ 878.740944] ? copy_mnt_ns+0xa00/0xa00 [ 878.741787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.742911] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.744030] do_syscall_64+0x33/0x40 [ 878.744839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.745945] RIP: 0033:0x7f5f5e955b19 [ 878.746748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.750739] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 878.752391] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 878.753935] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 878.755480] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 878.757021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.758564] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 878.781605] loop2: detected capacity change from 0 to 32768 [ 878.783815] FAULT_INJECTION: forcing a failure. [ 878.783815] name failslab, interval 1, probability 0, space 0, times 0 [ 878.785521] CPU: 0 PID: 7012 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 878.786537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.787784] Call Trace: [ 878.788191] dump_stack+0x107/0x167 [ 878.788730] should_fail.cold+0x5/0xa [ 878.789294] ? getname_flags.part.0+0x50/0x4f0 [ 878.789965] should_failslab+0x5/0x20 [ 878.790524] kmem_cache_alloc+0x5b/0x310 [ 878.791121] getname_flags.part.0+0x50/0x4f0 [ 878.791775] ? _copy_from_user+0xfb/0x1b0 [ 878.792384] user_path_at_empty+0xa1/0x100 [ 878.793006] __x64_sys_mount+0x1e9/0x300 [ 878.793597] ? copy_mnt_ns+0xa00/0xa00 [ 878.794170] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.794919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.795669] do_syscall_64+0x33/0x40 [ 878.796217] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.796987] RIP: 0033:0x7fc6f0a40b19 [ 878.797535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.800241] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 878.801355] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 878.802401] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 878.803464] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 878.804516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.805572] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 878.808479] FAULT_INJECTION: forcing a failure. [ 878.808479] name failslab, interval 1, probability 0, space 0, times 0 [ 878.810199] CPU: 0 PID: 7013 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 878.811203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.812414] Call Trace: [ 878.812799] dump_stack+0x107/0x167 [ 878.813332] should_fail.cold+0x5/0xa [ 878.813893] should_failslab+0x5/0x20 [ 878.814448] __kmalloc_track_caller+0x79/0x370 [ 878.815117] ? v9fs_session_init+0xa7/0x1680 [ 878.815766] ? kernel_text_address+0xf2/0x120 [ 878.816424] kstrdup+0x36/0x70 [ 878.816896] v9fs_session_init+0xa7/0x1680 [ 878.817522] ? lock_release+0x680/0x680 [ 878.818102] ? find_held_lock+0x2c/0x110 [ 878.818701] ? kmem_cache_alloc_trace+0x151/0x320 [ 878.819412] ? v9fs_show_options+0x690/0x690 [ 878.820067] ? trace_hardirqs_on+0x5b/0x180 [ 878.820698] ? kasan_unpoison_shadow+0x33/0x50 [ 878.821364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 878.822110] v9fs_mount+0x79/0x8f0 [ 878.822631] ? v9fs_write_inode+0x60/0x60 [ 878.823242] legacy_get_tree+0x105/0x220 [ 878.823839] vfs_get_tree+0x8e/0x300 [ 878.824381] path_mount+0x1490/0x21e0 [ 878.824940] ? strncpy_from_user+0x9e/0x470 [ 878.825569] ? finish_automount+0xa90/0xa90 [ 878.826196] ? getname_flags.part.0+0x1dd/0x4f0 [ 878.826872] ? _copy_from_user+0xfb/0x1b0 [ 878.827488] __x64_sys_mount+0x282/0x300 [ 878.828080] ? copy_mnt_ns+0xa00/0xa00 [ 878.828653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.829412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.830160] do_syscall_64+0x33/0x40 [ 878.830702] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.831456] RIP: 0033:0x7f2ae689eb19 [ 878.831995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.834673] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 878.835786] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 878.836821] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 878.837855] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 878.838887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.839932] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 878.858426] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:22:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:22:57 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 878.905487] 9pnet: Insufficient options for proto=fd [ 878.909608] 9pnet: Insufficient options for proto=fd 03:22:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 17) 03:22:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 8) 03:22:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)=')\\:\xf0^', &(0x7f00000000c0)='/:\x00', &(0x7f0000000100)='-[]\x00', &(0x7f0000000180)='\']\x00'], &(0x7f0000000280)=[&(0x7f0000000240)='\x00'], 0x1000) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000300)={r1, r2+10000000}, 0x1, 0x0, 0x1}, 0x3) 03:22:57 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:22:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 878.988962] FAULT_INJECTION: forcing a failure. [ 878.988962] name failslab, interval 1, probability 0, space 0, times 0 [ 878.990630] CPU: 0 PID: 7024 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 878.991590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.992743] Call Trace: [ 878.993112] dump_stack+0x107/0x167 [ 878.993619] should_fail.cold+0x5/0xa [ 878.994155] ? create_object.isra.0+0x3a/0xa30 [ 878.994787] should_failslab+0x5/0x20 [ 878.995324] kmem_cache_alloc+0x5b/0x310 [ 878.995891] create_object.isra.0+0x3a/0xa30 [ 878.996502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 878.997210] kmem_cache_alloc+0x159/0x310 [ 878.997788] getname_flags.part.0+0x50/0x4f0 [ 878.998402] ? _copy_from_user+0xfb/0x1b0 [ 878.998980] user_path_at_empty+0xa1/0x100 [ 878.999577] __x64_sys_mount+0x1e9/0x300 [ 879.000136] ? copy_mnt_ns+0xa00/0xa00 [ 879.000680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 879.001412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 879.002128] do_syscall_64+0x33/0x40 [ 879.002643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 879.003363] RIP: 0033:0x7fc6f0a40b19 03:22:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 7) [ 879.003880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.006529] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.007567] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 879.008521] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 879.009475] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 879.010433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.011107] FAULT_INJECTION: forcing a failure. [ 879.011107] name failslab, interval 1, probability 0, space 0, times 0 [ 879.011403] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 879.015351] CPU: 1 PID: 7026 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 879.016843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 879.018590] Call Trace: [ 879.019156] dump_stack+0x107/0x167 [ 879.019941] should_fail.cold+0x5/0xa [ 879.020743] ? create_object.isra.0+0x3a/0xa30 [ 879.021704] should_failslab+0x5/0x20 [ 879.022510] kmem_cache_alloc+0x5b/0x310 [ 879.023379] create_object.isra.0+0x3a/0xa30 [ 879.024300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 879.025376] __kmalloc_track_caller+0x177/0x370 [ 879.026353] ? v9fs_session_init+0xa7/0x1680 [ 879.027281] ? kernel_text_address+0xf2/0x120 [ 879.028224] kstrdup+0x36/0x70 [ 879.028901] v9fs_session_init+0xa7/0x1680 [ 879.029791] ? lock_release+0x680/0x680 [ 879.030629] ? find_held_lock+0x2c/0x110 [ 879.031494] ? kmem_cache_alloc_trace+0x151/0x320 [ 879.032509] ? v9fs_show_options+0x690/0x690 [ 879.033435] ? trace_hardirqs_on+0x5b/0x180 [ 879.034338] ? kasan_unpoison_shadow+0x33/0x50 [ 879.035302] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 879.036368] v9fs_mount+0x79/0x8f0 [ 879.037111] ? v9fs_write_inode+0x60/0x60 [ 879.037981] legacy_get_tree+0x105/0x220 [ 879.038206] 9pnet: Insufficient options for proto=fd [ 879.038834] vfs_get_tree+0x8e/0x300 [ 879.038855] path_mount+0x1490/0x21e0 [ 879.041121] ? strncpy_from_user+0x9e/0x470 [ 879.042027] ? finish_automount+0xa90/0xa90 [ 879.042929] ? getname_flags.part.0+0x1dd/0x4f0 [ 879.043913] ? _copy_from_user+0xfb/0x1b0 [ 879.044794] __x64_sys_mount+0x282/0x300 [ 879.045648] ? copy_mnt_ns+0xa00/0xa00 [ 879.046470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 879.047587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 879.048672] do_syscall_64+0x33/0x40 [ 879.049452] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 879.050529] RIP: 0033:0x7f2ae689eb19 [ 879.051322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.055210] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.056807] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 879.058297] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 879.059788] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 879.061333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 879.062937] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 879.102505] FAULT_INJECTION: forcing a failure. [ 879.102505] name failslab, interval 1, probability 0, space 0, times 0 [ 879.104076] CPU: 0 PID: 7033 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 879.104952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 879.106031] Call Trace: [ 879.106386] dump_stack+0x107/0x167 [ 879.106858] should_fail.cold+0x5/0xa [ 879.107381] ? getname_flags.part.0+0x50/0x4f0 [ 879.107966] should_failslab+0x5/0x20 [ 879.108458] kmem_cache_alloc+0x5b/0x310 [ 879.108979] getname_flags.part.0+0x50/0x4f0 [ 879.109554] ? _copy_from_user+0xfb/0x1b0 [ 879.110091] user_path_at_empty+0xa1/0x100 [ 879.110646] __x64_sys_mount+0x1e9/0x300 [ 879.111178] ? copy_mnt_ns+0xa00/0xa00 [ 879.111688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 879.112369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 879.113042] do_syscall_64+0x33/0x40 [ 879.113522] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 879.114182] RIP: 0033:0x7f5f5e955b19 [ 879.114653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.117019] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.118001] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 879.118923] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 879.119835] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 879.120752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.121671] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 893.280537] 9pnet: Insufficient options for proto=fd [ 893.287900] FAULT_INJECTION: forcing a failure. [ 893.287900] name failslab, interval 1, probability 0, space 0, times 0 [ 893.290312] CPU: 1 PID: 7042 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 893.291775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.293543] Call Trace: [ 893.294105] dump_stack+0x107/0x167 [ 893.294886] should_fail.cold+0x5/0xa [ 893.295706] should_failslab+0x5/0x20 [ 893.296516] __kmalloc_track_caller+0x79/0x370 [ 893.297491] ? v9fs_session_init+0xe9/0x1680 [ 893.298416] ? kernel_text_address+0xf2/0x120 [ 893.299376] kstrdup+0x36/0x70 [ 893.300049] v9fs_session_init+0xe9/0x1680 [ 893.300691] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 893.300938] ? lock_release+0x680/0x680 [ 893.300955] ? find_held_lock+0x2c/0x110 [ 893.300980] ? kmem_cache_alloc_trace+0x151/0x320 [ 893.304716] ? v9fs_show_options+0x690/0x690 [ 893.305644] ? trace_hardirqs_on+0x5b/0x180 [ 893.306545] ? kasan_unpoison_shadow+0x33/0x50 [ 893.307491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 893.308554] v9fs_mount+0x79/0x8f0 [ 893.309302] ? v9fs_write_inode+0x60/0x60 [ 893.310151] legacy_get_tree+0x105/0x220 [ 893.310993] vfs_get_tree+0x8e/0x300 [ 893.311759] path_mount+0x1490/0x21e0 [ 893.312564] ? strncpy_from_user+0x9e/0x470 03:23:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 18) 03:23:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 8) 03:23:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) recvmmsg$unix(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000600)=""/236, 0xec}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/18, 0x12}], 0xa, &(0x7f00000008c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)}, {&(0x7f00000009c0)=""/71, 0x47}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/67, 0x43}, {&(0x7f0000000c00)=""/163, 0xa3}, {&(0x7f0000000cc0)=""/130, 0x82}, {&(0x7f0000000d80)=""/161, 0xa1}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x5, &(0x7f0000004e00)=ANY=[@ANYBLOB="300000000000000001000000010000000c85a02cae7ac0b80a68274fa6f52b4c3bbf1683d275651e5ac38369adc97ae49a3cd003159934f98241b5b056c9d3d94719a9", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}}, {{&(0x7f0000001f00)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001f80)=""/4096, 0x1000}], 0x1, &(0x7f0000002fc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000003040)=@abs, 0x6e, &(0x7f00000032c0)=[{&(0x7f00000030c0)=""/227, 0xe3}, {&(0x7f00000031c0)=""/238, 0xee}], 0x2, &(0x7f0000003300)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000003440)=@abs, 0x6e, &(0x7f0000004840)=[{&(0x7f00000034c0)=""/51, 0x33}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/143, 0x8f}, {&(0x7f00000045c0)=""/226, 0xe2}, {&(0x7f00000046c0)=""/254, 0xfe}, {&(0x7f00000047c0)=""/23, 0x17}, {&(0x7f0000004800)=""/53, 0x35}], 0x7, &(0x7f00000048c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000004980), 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004a00)=""/240, 0xf0}, {&(0x7f0000004b00)=""/105, 0x69}], 0x2}}], 0x7, 0x120, &(0x7f0000004d80)={0x77359400}) openat$incfs(r2, &(0x7f0000004dc0)='.pending_reads\x00', 0x400, 0x189) connect$unix(r1, &(0x7f0000004e80)=@abs={0x2, 0x0, 0x4e20}, 0x6e) 03:23:12 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:12 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000), 0x0, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="17d8890007000000f05defc71402a8937adf1ee343ff0400a39d47735d31931898763772790000000000001b50c76b1069b134c4c27b05ac57286cb12984515ecdf8cabc3a9e9502375c6b9efe87aa35fd2e485fe34c0198998a4800253bc0270dcd41e817c9cb28b2cd5feadfbe6f90d27abb068c93be4d6af17548031f03e68ff0f79ac9257b019967e10a83f1e1d5270d35f89531470ef4844404000000000000c50900009d7e8455e26fb0d7a24f9a02da0a7039d40358b0a9fec1accc6e2272c87f93867ec21b5c42b9a848f823c9cc0f8e9e259a20b82cd0024053ff71a4c618629c4814f3a966670cd44c1dbda3098d936b8d4aae73d0a073837b6a8749827dcdfe9c68366b3f368af1bd1ab4917ab7007f2107058f93ca73a970b8b46f7421354eefe706c8f83f801a308f257a93380cc2"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:23:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:23:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 9) [ 893.313722] ? finish_automount+0xa90/0xa90 [ 893.314753] ? getname_flags.part.0+0x1dd/0x4f0 [ 893.315728] ? _copy_from_user+0xfb/0x1b0 [ 893.316586] __x64_sys_mount+0x282/0x300 [ 893.317431] ? copy_mnt_ns+0xa00/0xa00 [ 893.318244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.319307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.320389] do_syscall_64+0x33/0x40 [ 893.321151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.322205] RIP: 0033:0x7f2ae689eb19 [ 893.322972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.326766] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 893.327545] FAULT_INJECTION: forcing a failure. [ 893.327545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.328339] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 893.328349] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 893.328359] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 893.328369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.328383] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 893.337044] CPU: 0 PID: 7054 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 893.337871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.338855] Call Trace: [ 893.339167] dump_stack+0x107/0x167 [ 893.339606] should_fail.cold+0x5/0xa [ 893.340064] strncpy_from_user+0x34/0x470 [ 893.340554] getname_flags.part.0+0x95/0x4f0 [ 893.341073] ? _copy_from_user+0xfb/0x1b0 [ 893.341571] user_path_at_empty+0xa1/0x100 [ 893.342077] __x64_sys_mount+0x1e9/0x300 [ 893.342557] ? copy_mnt_ns+0xa00/0xa00 [ 893.343020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.343644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.344255] do_syscall_64+0x33/0x40 [ 893.344694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.345298] RIP: 0033:0x7fc6f0a40b19 [ 893.345738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.347923] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 893.348823] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 893.349666] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 893.350509] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 893.351355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.352200] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 893.362324] FAULT_INJECTION: forcing a failure. [ 893.362324] name failslab, interval 1, probability 0, space 0, times 0 [ 893.364985] CPU: 1 PID: 7056 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 893.366562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.368484] Call Trace: [ 893.369093] dump_stack+0x107/0x167 [ 893.369934] should_fail.cold+0x5/0xa [ 893.370816] ? create_object.isra.0+0x3a/0xa30 [ 893.371914] should_failslab+0x5/0x20 [ 893.372791] kmem_cache_alloc+0x5b/0x310 [ 893.373755] create_object.isra.0+0x3a/0xa30 [ 893.374795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 893.375990] kmem_cache_alloc+0x159/0x310 [ 893.376964] getname_flags.part.0+0x50/0x4f0 [ 893.377995] ? _copy_from_user+0xfb/0x1b0 [ 893.378966] user_path_at_empty+0xa1/0x100 [ 893.379976] __x64_sys_mount+0x1e9/0x300 [ 893.380932] ? copy_mnt_ns+0xa00/0xa00 [ 893.381852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.383089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.384300] do_syscall_64+0x33/0x40 [ 893.385163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.386374] RIP: 0033:0x7f5f5e955b19 [ 893.387246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.391485] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 893.393242] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 893.394893] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 893.396549] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 893.398200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.399878] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:23:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 19) 03:23:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 10) 03:23:12 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 893.472038] FAULT_INJECTION: forcing a failure. [ 893.472038] name failslab, interval 1, probability 0, space 0, times 0 [ 893.473374] CPU: 0 PID: 7061 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 893.474142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.475075] Call Trace: [ 893.475385] dump_stack+0x107/0x167 [ 893.475793] should_fail.cold+0x5/0xa [ 893.476220] ? create_object.isra.0+0x3a/0xa30 [ 893.476733] should_failslab+0x5/0x20 [ 893.477161] kmem_cache_alloc+0x5b/0x310 [ 893.477618] create_object.isra.0+0x3a/0xa30 [ 893.478110] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 893.478688] __kmalloc_track_caller+0x177/0x370 [ 893.479209] ? v9fs_session_init+0xe9/0x1680 [ 893.479709] ? kernel_text_address+0xf2/0x120 [ 893.480214] kstrdup+0x36/0x70 [ 893.480577] v9fs_session_init+0xe9/0x1680 [ 893.481055] ? lock_release+0x680/0x680 [ 893.481506] ? find_held_lock+0x2c/0x110 [ 893.481964] ? kmem_cache_alloc_trace+0x151/0x320 [ 893.482500] ? v9fs_show_options+0x690/0x690 [ 893.482996] ? trace_hardirqs_on+0x5b/0x180 [ 893.483493] ? kasan_unpoison_shadow+0x33/0x50 [ 893.484003] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 893.484578] v9fs_mount+0x79/0x8f0 [ 893.484979] ? v9fs_write_inode+0x60/0x60 [ 893.485442] legacy_get_tree+0x105/0x220 [ 893.485899] vfs_get_tree+0x8e/0x300 [ 893.486322] path_mount+0x1490/0x21e0 [ 893.486752] ? strncpy_from_user+0x9e/0x470 [ 893.487241] ? finish_automount+0xa90/0xa90 [ 893.487734] ? getname_flags.part.0+0x1dd/0x4f0 [ 893.488254] ? _copy_from_user+0xfb/0x1b0 [ 893.488721] __x64_sys_mount+0x282/0x300 [ 893.489174] ? copy_mnt_ns+0xa00/0xa00 [ 893.489611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.490205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.490784] do_syscall_64+0x33/0x40 [ 893.491200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.491779] RIP: 0033:0x7f2ae689eb19 [ 893.492197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.494269] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 893.495123] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 893.495931] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 893.496731] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 893.497533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.498341] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:23:12 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=""/55, 0x37) [ 893.510166] FAULT_INJECTION: forcing a failure. [ 893.510166] name failslab, interval 1, probability 0, space 0, times 0 [ 893.511500] CPU: 0 PID: 7065 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 893.512264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.513192] Call Trace: [ 893.513489] dump_stack+0x107/0x167 [ 893.513897] should_fail.cold+0x5/0xa [ 893.514323] ? alloc_fs_context+0x57/0x840 [ 893.514797] should_failslab+0x5/0x20 [ 893.515226] kmem_cache_alloc_trace+0x55/0x320 [ 893.515752] alloc_fs_context+0x57/0x840 [ 893.516212] path_mount+0xab1/0x21e0 [ 893.516637] ? strncpy_from_user+0x9e/0x470 [ 893.517118] ? finish_automount+0xa90/0xa90 [ 893.517601] ? getname_flags.part.0+0x1dd/0x4f0 [ 893.518120] ? _copy_from_user+0xfb/0x1b0 [ 893.518590] __x64_sys_mount+0x282/0x300 [ 893.519042] ? copy_mnt_ns+0xa00/0xa00 [ 893.519497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.520083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.520662] do_syscall_64+0x33/0x40 [ 893.521078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.521655] RIP: 0033:0x7fc6f0a40b19 [ 893.522070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.524140] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 893.524989] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 893.525790] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 893.526590] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 893.527396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.528194] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:23:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 9) 03:23:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 893.564601] FAULT_INJECTION: forcing a failure. [ 893.564601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.565970] CPU: 0 PID: 7072 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 893.566741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.567681] Call Trace: [ 893.567981] dump_stack+0x107/0x167 [ 893.568393] should_fail.cold+0x5/0xa [ 893.568827] strncpy_from_user+0x34/0x470 [ 893.569297] getname_flags.part.0+0x95/0x4f0 [ 893.569788] ? _copy_from_user+0xfb/0x1b0 [ 893.570258] user_path_at_empty+0xa1/0x100 [ 893.570734] __x64_sys_mount+0x1e9/0x300 [ 893.571189] ? copy_mnt_ns+0xa00/0xa00 [ 893.571645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.572241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.572820] do_syscall_64+0x33/0x40 [ 893.573240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.573818] RIP: 0033:0x7f5f5e955b19 [ 893.574239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.576315] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 893.577170] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 893.577970] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 893.578768] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 893.579577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.580383] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:23:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 11) [ 893.618990] FAULT_INJECTION: forcing a failure. [ 893.618990] name failslab, interval 1, probability 0, space 0, times 0 [ 893.620285] CPU: 0 PID: 7074 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 893.621047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.621979] Call Trace: [ 893.622279] dump_stack+0x107/0x167 [ 893.622688] should_fail.cold+0x5/0xa [ 893.623119] ? alloc_fs_context+0x57/0x840 [ 893.623606] should_failslab+0x5/0x20 [ 893.624036] kmem_cache_alloc_trace+0x55/0x320 [ 893.624551] alloc_fs_context+0x57/0x840 [ 893.625011] path_mount+0xab1/0x21e0 [ 893.625433] ? strncpy_from_user+0x9e/0x470 [ 893.625914] ? finish_automount+0xa90/0xa90 [ 893.626399] ? getname_flags.part.0+0x1dd/0x4f0 [ 893.626920] ? _copy_from_user+0xfb/0x1b0 [ 893.627395] __x64_sys_mount+0x282/0x300 [ 893.627847] ? copy_mnt_ns+0xa00/0xa00 [ 893.628288] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.628878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.629463] do_syscall_64+0x33/0x40 [ 893.629880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.630455] RIP: 0033:0x7fc6f0a40b19 [ 893.630870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.632941] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 893.633792] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 893.634591] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 893.635392] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 893.636193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.636991] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:23:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x46e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000200)={{r1}, "a1344fe9e219e64f8f4ec23b81bfa0c26a3063bf71c52af9ce54e79bdc7a921bcb67063f7c9aef168cbc426e229ad00780f0ce56cc402578441d9eef997237309414da401b33404b72de6fb856ec8df4c62e6511ba4b8e6e9469ed5d90049ef103c1a47fe473da5a1d3e6cd5e2ec8664807775d6074d734bbde777de13cd71abf9f08dbaabdf04508d04f02e801b6ca95f062b723e9585dc928ffd0e599fe81f7d10531286f020da04fde3ddc654fad60c3e0438fc141b7971a06fa30601588e4f52e222f9cf6ed86d13fd67290bc7298535a1863f390df33d243684209e2608d530b1d9dff117c22f0095615458dfcb58ac771f025112392f43a40fd043011b08f0e314a8344125ded6ddcbdaed095d33b0282dd610d8cb11d760dff1e19ae2bf970e302ec17a77a2165c00a98c4c8477a24a54e81e3f33689960cc9da5ea2da8e1ab01db28b1226f8b7325a8044a29bef8821ec900c04457e22c0b6717f0701d281da8672cfadc3dcd48c61841c2d043f6db30bc673f0deea4701473711b2e46ed2e7385f565a904f373274d49f53d43a2fbc1a536375fd6bb435b1fff65d5874b507b4dcbb432abd238161f46a8f4e17efedb8e147e69c0b2f8be9ea4378b7a92b4d81476fdd12eb238df7b1387f8bbfecca3db03379627130929b365cbddad57aa07a49afc905deaedb169bbdaf60beac9e5d36132cc7286c9683a9c7288b26de1e790a99e731ba4fa5517ca14412e3b2824b205285b850eed04c568b0fa73b73ed4736a30f72cd3238f175544a88ad4845573ddb8a2b79353f27472821678a231e51eb8888f5c58d833d4c1c8905bb73d879a6fc7885ca14771385a75ec5e0de26537af4f4f921a1daecb07da5aa180e78f6d9225c83125692441ab5c8d37493557caab7dcbca301393ae44799b1e1543fab3aa6ea9c7a3e20d9a857a89511ee316f4e681aa3e45739947adf42c04ec5d0bc6db3a489b9930c81bbe38acb586fee34e686f9ca82d87daab2508b702ef69bc2688c1bbb9a6904cadecbf81e948b87882e053c49b17428a44200e2be3d9cae99c2a778e205af9465151db58065efd4fd6f43c37ca566390bd35737ec7b7a5ddfcab2310138a47015770596493115d21f320de956e837517108d923630153e7d0d815e6e1b6357432e3d5d19d83cae64468ba0e8a24cf4a84b533edbc2f0c2333631f1b8d20168a977d6dcd1813ecce5bbdb94a65f3a6d215f42b8a99c863bb8760f7b6127f2f90e8f65ea99f2b0b11650e80ac7de8d2512b08d30d330829e1d7509dfe5652afcb0389971227dca161f2365ccdd353ac88a12e5af3982d43cac16b52bd98c6b50dab1381e11552195c437c0b87816e45f4909de8e7ba290b7ba4a8d755d401841fa4cc6534fa43162eeb28c31c6ae2dcedd96a22a0223e40a5eaeba402a80df72618aaaf69577345417b4505c22615971198dfa45bdd7043a8b64555dfce9c2140234f4c0ee107c90ba53f97d51c24c6ac314df6914625fb439242bb706a978ac297cdb6a408ddb1ce2180a11bb590815c0ff09336904a22281c67957126e6bb52e45bddcf048a4d852ddd5a40c5ccd5780748c170a0ca9637eebe4371ab44c3f328a103d2c61db5aae22a707a7344a821064d30e746e760525f3098bc25a32809a8533a4a8756268bcd5fe993b3e3d5ed172012accd9ba51b08eeaed297e7cac01e587d10d46643a745c6605bdf4a9191ce28b92bf923cb003575d89e99d7f08a1f4666bc6c5d7e78266c859408e54acf03ec5627264e72c16982035f969903a6863112b7c2106fbff4430647e6ff479ba0e7ed6fa82d4401bf3ef99f8bb92218dd8c6a6fb43d5e788f3d4f2062a709dbf273cabc3dd7938b64215b537f8529917b0d460525d1bd8371978f0521deb02f1498b074e1957c5b90d8f993216534f6712da613ac802f1f87602b02269d1fc7264b83ba4a8ee81d5fe00e5b897a4ceaff0cdf1ab1b6acb579eca79a69d2a634fc01d466e419f59682f8116220a8b8eb04ec2ede6b01ddb4cb093f12d0f4edacbeec30e669937959fedc7b66c3da6e7d6a84ed3ac0ba5a00d8c23904c64eb9e0c439d316d94821cb083d7c72db0edb8a881cc248570445301ec62246876c292b92e24399c4964f55d8c45aebe6b8a05e589b0e8df3c7b074f7b65fe6b33321a4c4d124aae515db312b46f0af1e9c0ce2af22c902b1b189978dbab67b0dc1bdb2b6b6642488cfb8f32166931331f6b6bea857b8b50f44068eb4374dc6364c62f2fb9dad78437677986f159a37031904c8c9b3f217e836d6f790a6ab2fb8b886cdd615797383e028e564ed4ff9ae57dd3306625a74c2038a8d5cf7c52a7050167e38e5ae2530bd0a3ef8256d0231e4a54e02b2a5dd4495e827173413c6f2b1f4c8eb9812bf288d29fa1c608a66099c47d2088cbb3570b728a737492d3133995275b62bf59e0556f238cf2c33e4598a31e291c80c99349ee303f588b7efb7833fe1d7b904193fc7569470a77247f9af65d17ecd2cdaffeb221ca5b2581ecfcca5c77e7b47dc19a8e2b9539688f7ce7e033ffd41e2091128bd10f78ba2dfe9b02dcb1b585ec2368cc1cf0d56595042fe5bcd091d72d0820737df5fb70aabf87cb5ba9b0e8edef382057000c786e46f39f2e9340e556f88a3266bdb756d81264aa4a5b0b713aa452c4896269a4636d8dad1644a30753db0d268b822a40da290a823dfb6c12e884c659efebeb84b44af99e1818b7efad406fe307bc6873a8ee0e203b9d6c3279772c0e1790010d7353c37a875e691bbcf3f47acb15a3762a10319537e2d8c46f5c458d4789745a4b6bb807441828536b744a20c6c2566b69dc70fcf3de4763ee0b33a25760c06ead898707e34cdf6876f2b1d7c21adbfca534ce75c14bdafb3967e793520f911291be93e3a004c5ba6088673b9cb8b9cab5f36886ec779c068cb4132f3c55e640e7deec53ab5e7eda0a5c67bbcd0953facd0cc7c29eebf5cb73776c15d1093ba92f164a8cb1e55998c7296a3f6fd3660ae3a1780deb7ba58a93a7553e441b2dc247c1d233d43d889b9d56bceb3c650ed054408969d882abe54fdfd69d59a2eb5c73f994756dc376f862dcc52e443260c7e7181029cdd2f28e73e4a7e86af9160be3da7f5aadd6dd8db0fde59c8821fbb308ffdc2f57e8b60153fbf682d01ae9a311108e05c59e0780119094ee621606c601516c20ebd2720ba77644ee104918278f8726c4dd1e09a4383869b614cba1fdded8a9d3959dce0a5afec550798823815c3ff84c954a168e5244d97107c7a16526cb53ba3e02c41e9ab6f88ac78e7cf8104d9787b009f86699d5a2446f94e0653c5f11ea7126eec06e07d2d103d881777a670225d98bbec27a712a8ddf2d2fbc962ce0a7039899d65a62b896d5a93bf587cb82ac0cc099c51ca632274dbdd65ac0e2c4afe48ac275be0622d9dc12caa4d5842546396a59d9ed6f5354935413961cfbc5f01f1dab63e89bfd1c2f51abce0edab73fbc0eb84886fe160ea6224fee1e4785cab6b848183103c16efef2c55e2196acf374fbef09dc61218104fb5bc4cc1c92cb0032b1ef04d8ea83da4e9bba11faef8538a2c21f4b16594caa79bcc1159da862624a51831c6447814615d81551a1533031ffb88afe4f7891661dff4e918ed4302e6e0f86ea98d120fb7b21edd1ded398d267562f93e5d6be4d1efae5d4804a8a65f76de772cd78faa430028eeec366f537508f64b21fde94ecded526ab48dcc470b386f72a61057c9c7140c07b2a0f81abc952fa5fc19d544f8e73f0e9ef526e24a9c726792fd66e7d34fdbd38ac366f0d6364cdd126c2f0e22f0c97b09d46c4312e35cd515a85245ecefe42ac668776d679b5738d53da6def965b8e7086e8a3ba62994cf0dc3c5a2ad3e496b0f17b5a073e53e66eeeeefdd30dc21a9eaa00857520e13fe8b3fe7b24f057cfbe6192ff8f762b14ccca062fb63b1682d22224bd582a303504f3fec445c185a09c94f7553840d702800100d0a341c8e1142ed1aa18e7000c85f4d249ac4fc0105e20939ace35ee20177e8634370142233e3dffbe6b4573fda5d8d3e7086645896dfa4427a96f9ca51fdb838cc5462ee0679897fc92065bea63786f571c0f603165a495720f8742d93c03d30d433ed7668bcfe54e846fe7edb0584b65e2cb87833e817702771c1061fc1c7446035e9a391d4a97a796fc23d2d4a4f7c5c863a787ffb2c22050eff1b03f7be765528d8b956e8d0e8b0e704f0fd545e9af162b8ce25af333f4645428b5f222038a18002ea47974a05fe4cab312ec91c7cb109db1989ec4f039efcffacfaf3c0892d0378773ca8351b11d3ada13afc9e73680610a245d8a61e0cb1073b7331a02a5e694afa3e7215ead0d81580905416fffc269a0e977c02146a508f1dd6da775d74507148c2cf1eb94cd8025f3f801026182d3bb531d2ec337602d65be13ff247e61c5275b26165ca672faf2b80a675dc9a19e5b8082bac8c9fb4b90593adc09d5741b5ef2bf3ad5c4e01e0d2c710e24ce88652ca8455f67b8b6da9f7bd387179983ddb05b04890cdcf9e503822e7417187605ec88fd843fcef72660d6f1b338e4a39d8953d0dc7732d3d6e71b1245f783d6924d07bf7e0fb954616aafd1729a393e8a1c75d2ac61579e2b7ba1e5c99181be15be6751afe4aec349978538ae81a9fb1c346235e5892268259d4b2934606660ce7a34da52fa282ad3ae68668937d6ccdbf07bab452e1c43655c639370752c79ca2b5f95637b66ec6167c6f8f43f420d85833e94774697678747da916c2399c79cd6d2edbef17a0af894f1bdff30b89c98558e7642eb1b62916269b112c3693fe665c3ef1e6c95e649fc72b90b38000b6a7f70ae5364e1b1fb57164d0c26b625352cbd1253d4a4face3f24abf8425cd0ca886be6451dd2fd29d84553a66f1fffc9661e5648b0b54c958a235eb100dd5ea4e653219480d1d45210c44e610b55f403cfeff8654e87b916af241fe6523bc2aef9d9d6a4cc93293c4f1b081dd77d04c50e5bf749aed974ae8c77be590f95df594fdcb1e9567aaae61b6c2930744a0da2a43414f705d91259d6dcc61099b3f3ec63e9c1e8dd09987ae383ae50384d0258be4a6ede3a92716b1b4f8697fa8d2da86fa4d435c260309f745357bfbf4fe0bf1d220385b136676156f61699fff3d14f10a0563f700eb5e50b43bba436b01aa7bdb319d723b72bd6489683b3b8a9feef8a4de54ecc7a163e5302b4280afa69ab54f731d09a0ae9a2d9c5bec3e36bbd3ac158aefde7a1241fc13825ae59c52f8c1ea699a97d7dff62e7ec447725d0e427248c35b3ef22b03e4d948abb7ba27bba24690de95e7c1d65ab4aa15837807152f58f29cd292ea5c743213243b5daa1ee563f383e5c836ec9b722a21fb65b5ab52012e40326a8be7730bbebd672859acbe14d60f0b84ea00bbc0d1f621517e896f574108c2ad9b0fa75e921be94704641f32267d1a2326a032ab4f6488977d81fce90f7cf36d8beec0d00181818b9a3ec0fc154b8e386a9c724ad02d969ba6c152152078ca7195c04ad7f2a77ff60c14b83ebf250679ae1634d72cdf37b028c0a2268f847f4661c8839db06f9e031742a4e1fb061b4b8db7e054bf6f46b1880edeae86f77680191307c6a32e15dab08930caf179f78f29ab8117f385667f65e851a94e884c5e00f62cc99fe08e164b74aeb14aba149d66cadb106a0c2bb870dfa2ad3bd72ca0f78757cf957c70e5db59d0f07e2fe"}) 03:23:12 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 10) [ 893.691580] FAULT_INJECTION: forcing a failure. [ 893.691580] name failslab, interval 1, probability 0, space 0, times 0 [ 893.692911] CPU: 0 PID: 7080 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 893.693676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.694609] Call Trace: [ 893.694911] dump_stack+0x107/0x167 [ 893.695317] should_fail.cold+0x5/0xa [ 893.695753] ? alloc_fs_context+0x57/0x840 [ 893.696227] should_failslab+0x5/0x20 [ 893.696657] kmem_cache_alloc_trace+0x55/0x320 [ 893.697171] alloc_fs_context+0x57/0x840 [ 893.697633] path_mount+0xab1/0x21e0 [ 893.698056] ? strncpy_from_user+0x9e/0x470 [ 893.698540] ? finish_automount+0xa90/0xa90 [ 893.699024] ? getname_flags.part.0+0x1dd/0x4f0 [ 893.699559] ? _copy_from_user+0xfb/0x1b0 [ 893.700029] __x64_sys_mount+0x282/0x300 [ 893.700485] ? copy_mnt_ns+0xa00/0xa00 [ 893.700926] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 893.701515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.702093] do_syscall_64+0x33/0x40 [ 893.702514] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 893.703089] RIP: 0033:0x7f5f5e955b19 [ 893.703519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.705580] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 893.706434] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 893.707235] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 893.708041] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 893.708843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.709644] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:23:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 11) 03:23:24 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:24 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000), 0x0, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:23:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 20) 03:23:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 12) 03:23:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1050e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) openat(r0, &(0x7f0000000040)='./file1\x00', 0x6080, 0x0) 03:23:24 executing program 6: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {0x0, 0x0, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 905.300544] FAULT_INJECTION: forcing a failure. [ 905.300544] name failslab, interval 1, probability 0, space 0, times 0 [ 905.301924] CPU: 1 PID: 7108 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 905.302731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.303714] Call Trace: [ 905.304033] dump_stack+0x107/0x167 [ 905.304465] should_fail.cold+0x5/0xa [ 905.304913] ? create_object.isra.0+0x3a/0xa30 [ 905.305461] should_failslab+0x5/0x20 [ 905.305908] kmem_cache_alloc+0x5b/0x310 [ 905.306387] create_object.isra.0+0x3a/0xa30 [ 905.306902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 905.307507] kmem_cache_alloc_trace+0x151/0x320 [ 905.308055] alloc_fs_context+0x57/0x840 [ 905.308547] path_mount+0xab1/0x21e0 [ 905.308988] ? strncpy_from_user+0x9e/0x470 [ 905.309499] ? finish_automount+0xa90/0xa90 [ 905.310005] ? getname_flags.part.0+0x1dd/0x4f0 [ 905.310552] ? _copy_from_user+0xfb/0x1b0 [ 905.311041] __x64_sys_mount+0x282/0x300 [ 905.311529] ? copy_mnt_ns+0xa00/0xa00 [ 905.311990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 905.312606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 905.313223] do_syscall_64+0x33/0x40 [ 905.313662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 905.314264] RIP: 0033:0x7f5f5e955b19 [ 905.314716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.316889] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 905.317778] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 905.318612] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 905.319460] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 905.320309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.321075] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 905.321139] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 905.326838] FAULT_INJECTION: forcing a failure. [ 905.326838] name failslab, interval 1, probability 0, space 0, times 0 [ 905.327499] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 905.329502] CPU: 0 PID: 7104 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 905.332159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.334139] Call Trace: [ 905.334762] dump_stack+0x107/0x167 [ 905.335645] should_fail.cold+0x5/0xa [ 905.336547] ? legacy_init_fs_context+0x44/0xe0 [ 905.337644] should_failslab+0x5/0x20 [ 905.338547] kmem_cache_alloc_trace+0x55/0x320 [ 905.339638] ? lockdep_init_map_type+0x2c7/0x780 [ 905.340755] legacy_init_fs_context+0x44/0xe0 [ 905.341805] ? generic_parse_monolithic+0x1f0/0x1f0 [ 905.342973] alloc_fs_context+0x4fd/0x840 [ 905.343964] path_mount+0xab1/0x21e0 [ 905.344832] ? strncpy_from_user+0x9e/0x470 [ 905.345848] ? finish_automount+0xa90/0xa90 [ 905.346842] ? getname_flags.part.0+0x1dd/0x4f0 [ 905.347934] ? _copy_from_user+0xfb/0x1b0 [ 905.348900] __x64_sys_mount+0x282/0x300 [ 905.349845] ? copy_mnt_ns+0xa00/0xa00 [ 905.350755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 905.351986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 905.352316] FAULT_INJECTION: forcing a failure. [ 905.352316] name failslab, interval 1, probability 0, space 0, times 0 [ 905.353194] do_syscall_64+0x33/0x40 [ 905.353214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 905.353229] RIP: 0033:0x7fc6f0a40b19 [ 905.357347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.361551] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 905.363296] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 905.364938] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 905.366577] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 905.368219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.369856] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 905.371523] CPU: 1 PID: 7105 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 905.372314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.373266] Call Trace: [ 905.373568] dump_stack+0x107/0x167 [ 905.373982] should_fail.cold+0x5/0xa [ 905.374418] ? p9_client_create+0xaf/0x1230 [ 905.374908] should_failslab+0x5/0x20 03:23:24 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x9, 0x10000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e00", 0x2a}], 0x2) openat(r2, &(0x7f0000000040)='./file0\x00', 0x4046e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) rmdir(&(0x7f0000000000)='./file0\x00') [ 905.375342] kmem_cache_alloc_trace+0x55/0x320 [ 905.376044] ? find_held_lock+0x2c/0x110 [ 905.376531] p9_client_create+0xaf/0x1230 [ 905.377014] ? lock_downgrade+0x6d0/0x6d0 [ 905.377499] ? p9_client_flush+0x430/0x430 [ 905.377980] ? trace_hardirqs_on+0x5b/0x180 [ 905.378479] ? lockdep_init_map_type+0x2c7/0x780 [ 905.379017] ? __raw_spin_lock_init+0x36/0x110 [ 905.379555] v9fs_session_init+0x1dd/0x1680 [ 905.380043] ? lock_release+0x680/0x680 [ 905.380501] ? kmem_cache_alloc_trace+0x151/0x320 [ 905.381055] ? v9fs_show_options+0x690/0x690 [ 905.381555] ? trace_hardirqs_on+0x5b/0x180 [ 905.382042] ? kasan_unpoison_shadow+0x33/0x50 [ 905.382566] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 905.383141] v9fs_mount+0x79/0x8f0 [ 905.383549] ? v9fs_write_inode+0x60/0x60 [ 905.384034] legacy_get_tree+0x105/0x220 [ 905.384497] vfs_get_tree+0x8e/0x300 [ 905.384926] path_mount+0x1490/0x21e0 [ 905.385363] ? strncpy_from_user+0x9e/0x470 [ 905.385853] ? finish_automount+0xa90/0xa90 [ 905.386342] ? getname_flags.part.0+0x1dd/0x4f0 [ 905.386892] ? _copy_from_user+0xfb/0x1b0 [ 905.387368] __x64_sys_mount+0x282/0x300 [ 905.387844] ? copy_mnt_ns+0xa00/0xa00 [ 905.388299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 905.388901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 905.389500] do_syscall_64+0x33/0x40 [ 905.389919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 905.390504] RIP: 0033:0x7f2ae689eb19 [ 905.390924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.393031] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 905.393897] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 905.394697] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 905.395512] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 905.396312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.397122] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:23:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:24 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13", 0x20, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:23:24 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 13) 03:23:24 executing program 6: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {0x0, 0x0, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 905.507289] FAULT_INJECTION: forcing a failure. [ 905.507289] name failslab, interval 1, probability 0, space 0, times 0 [ 905.508623] CPU: 1 PID: 7126 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 905.509394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.510322] Call Trace: [ 905.510627] dump_stack+0x107/0x167 [ 905.511044] should_fail.cold+0x5/0xa [ 905.511483] ? create_object.isra.0+0x3a/0xa30 [ 905.511998] should_failslab+0x5/0x20 [ 905.512428] kmem_cache_alloc+0x5b/0x310 [ 905.512889] create_object.isra.0+0x3a/0xa30 [ 905.513384] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 905.513956] kmem_cache_alloc_trace+0x151/0x320 [ 905.514482] ? lockdep_init_map_type+0x2c7/0x780 [ 905.515014] legacy_init_fs_context+0x44/0xe0 [ 905.515526] ? generic_parse_monolithic+0x1f0/0x1f0 [ 905.516085] alloc_fs_context+0x4fd/0x840 [ 905.516558] path_mount+0xab1/0x21e0 [ 905.516982] ? strncpy_from_user+0x9e/0x470 [ 905.517470] ? finish_automount+0xa90/0xa90 [ 905.517958] ? getname_flags.part.0+0x1dd/0x4f0 [ 905.518483] ? _copy_from_user+0xfb/0x1b0 [ 905.518951] __x64_sys_mount+0x282/0x300 [ 905.519409] ? copy_mnt_ns+0xa00/0xa00 [ 905.519858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 03:23:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 905.520555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 905.521187] do_syscall_64+0x33/0x40 [ 905.521609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 905.522185] RIP: 0033:0x7fc6f0a40b19 [ 905.522601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.524682] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 905.525543] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 905.526346] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 905.527144] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 905.527958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.528763] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 905.537300] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:23:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 12) 03:23:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r1, 0x0, r2) r3 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffff8, 0x1, &(0x7f0000000100)=[{&(0x7f0000000200)="3355d326a77f60a4e21321930aadd872023a752fde2933ccaab0ab7eca8f78c4bc1cef6ecf817eb9bd08a9e665122cace7d6e6e14a0eefaf9ce083de41884aa3c57ed5ebc5f8c0e60a809d3cdde75303fc32eddb70d130b58840e75ab312b663c3000cd86cbb8706de4f75cc355b8c7b609c3207ba2e5fa846f853b68c726b4d7a3a4dbf9c46d76f43bcae09fef7f899fc03439ea26021bd4e09fa4f2290f0204385fffacb043b2d9f2f14419edfec8455ced3339a81a1ccf90bbb7c2d3379b69bc9d5372de3d70f4a93ee9855f6c5ba145fb2166313df00e137a225bad46cc63127", 0xe2, 0x5}], 0x880010, &(0x7f0000000300)={[{'(&\''}, {}, {':.'}, {'*'}, {'+'}, {'\'^),*'}, {'){'}, {}, {'{'}, {}], [{@dont_measure}, {@smackfsfloor}, {@smackfsfloor={'smackfsfloor', 0x3d, '\''}}]}) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r5) poll(&(0x7f0000000180)=[{r2, 0x1}, {r3, 0x84}, {r0, 0x4000}, {r5, 0x5020}], 0x4, 0x100) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) chdir(&(0x7f0000000000)='./file0\x00') [ 905.576205] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:23:24 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) [ 905.587546] loop2: detected capacity change from 0 to 135266304 [ 905.612859] FAULT_INJECTION: forcing a failure. [ 905.612859] name failslab, interval 1, probability 0, space 0, times 0 [ 905.614171] CPU: 1 PID: 7139 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 905.614951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.615849] Call Trace: [ 905.616143] dump_stack+0x107/0x167 [ 905.616533] should_fail.cold+0x5/0xa [ 905.616941] ? legacy_init_fs_context+0x44/0xe0 [ 905.617439] should_failslab+0x5/0x20 [ 905.617848] kmem_cache_alloc_trace+0x55/0x320 [ 905.618342] ? lockdep_init_map_type+0x2c7/0x780 [ 905.618848] legacy_init_fs_context+0x44/0xe0 [ 905.619354] ? generic_parse_monolithic+0x1f0/0x1f0 [ 905.619900] alloc_fs_context+0x4fd/0x840 [ 905.620373] path_mount+0xab1/0x21e0 [ 905.620802] ? strncpy_from_user+0x9e/0x470 [ 905.621286] ? finish_automount+0xa90/0xa90 [ 905.621774] ? getname_flags.part.0+0x1dd/0x4f0 [ 905.622298] ? _copy_from_user+0xfb/0x1b0 [ 905.622768] __x64_sys_mount+0x282/0x300 [ 905.623232] ? copy_mnt_ns+0xa00/0xa00 [ 905.623744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 905.624338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 905.624917] do_syscall_64+0x33/0x40 [ 905.625336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 905.625911] RIP: 0033:0x7f5f5e955b19 [ 905.626314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.628384] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 905.629207] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 905.630003] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 905.630802] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 905.631610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.632411] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 905.863835] loop2: detected capacity change from 0 to 135266304 03:23:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e00", 0x2a}], 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000080)={'nat\x00', 0x0, [0x7ff, 0xd1, 0x3, 0x1f, 0x401]}, &(0x7f0000000100)=0x54) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x10400, 0x82) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x0) r5 = syz_io_uring_setup(0x1c28, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x121100, 0x0) openat(r9, &(0x7f0000000480)='./file0\x00', 0x480, 0xd0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000180)={0x0, 0x989680}}, 0x5) 03:23:38 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13", 0x20, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:23:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 13) 03:23:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 03:23:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 21) 03:23:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 14) [ 919.583549] FAULT_INJECTION: forcing a failure. [ 919.583549] name failslab, interval 1, probability 0, space 0, times 0 [ 919.586157] CPU: 0 PID: 7157 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 919.587717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 919.589583] Call Trace: [ 919.590176] dump_stack+0x107/0x167 [ 919.591000] should_fail.cold+0x5/0xa [ 919.591867] ? create_object.isra.0+0x3a/0xa30 [ 919.592898] should_failslab+0x5/0x20 [ 919.593757] kmem_cache_alloc+0x5b/0x310 [ 919.594675] create_object.isra.0+0x3a/0xa30 [ 919.595673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 919.596826] kmem_cache_alloc_trace+0x151/0x320 [ 919.597870] ? find_held_lock+0x2c/0x110 [ 919.598784] p9_client_create+0xaf/0x1230 [ 919.599721] ? lock_downgrade+0x6d0/0x6d0 [ 919.600651] ? p9_client_flush+0x430/0x430 [ 919.601603] ? trace_hardirqs_on+0x5b/0x180 [ 919.602566] ? lockdep_init_map_type+0x2c7/0x780 [ 919.603634] ? __raw_spin_lock_init+0x36/0x110 [ 919.604660] v9fs_session_init+0x1dd/0x1680 [ 919.605626] ? lock_release+0x680/0x680 [ 919.606523] ? kmem_cache_alloc_trace+0x151/0x320 [ 919.607599] ? v9fs_show_options+0x690/0x690 [ 919.608603] ? trace_hardirqs_on+0x5b/0x180 [ 919.609570] ? kasan_unpoison_shadow+0x33/0x50 03:23:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 03:23:38 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400240, 0xe4) creat(&(0x7f0000000080)='./file0\x00', 0x1) close(0xffffffffffffffff) 03:23:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) [ 919.610590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 919.611880] v9fs_mount+0x79/0x8f0 [ 919.612680] ? v9fs_write_inode+0x60/0x60 [ 919.613600] legacy_get_tree+0x105/0x220 [ 919.614508] vfs_get_tree+0x8e/0x300 [ 919.615336] path_mount+0x1490/0x21e0 [ 919.616203] ? strncpy_from_user+0x9e/0x470 [ 919.617165] ? finish_automount+0xa90/0xa90 [ 919.618133] ? getname_flags.part.0+0x1dd/0x4f0 [ 919.619169] ? _copy_from_user+0xfb/0x1b0 [ 919.620110] __x64_sys_mount+0x282/0x300 [ 919.621016] ? copy_mnt_ns+0xa00/0xa00 [ 919.621897] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 919.623069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 919.624227] do_syscall_64+0x33/0x40 [ 919.625054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 919.626198] RIP: 0033:0x7f2ae689eb19 [ 919.627028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 919.631140] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 919.632835] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 919.634424] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 919.636038] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 919.637630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.639222] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:23:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) [ 919.657783] FAULT_INJECTION: forcing a failure. [ 919.657783] name failslab, interval 1, probability 0, space 0, times 0 [ 919.659113] CPU: 1 PID: 7169 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 919.659906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 919.660848] Call Trace: [ 919.661025] FAULT_INJECTION: forcing a failure. [ 919.661025] name failslab, interval 1, probability 0, space 0, times 0 [ 919.661166] dump_stack+0x107/0x167 [ 919.664040] should_fail.cold+0x5/0xa [ 919.664469] ? v9fs_mount+0x5a/0x8f0 [ 919.664891] should_failslab+0x5/0x20 [ 919.665320] kmem_cache_alloc_trace+0x55/0x320 [ 919.665839] ? v9fs_write_inode+0x60/0x60 [ 919.666305] v9fs_mount+0x5a/0x8f0 [ 919.666702] ? v9fs_write_inode+0x60/0x60 [ 919.667166] legacy_get_tree+0x105/0x220 [ 919.667637] vfs_get_tree+0x8e/0x300 [ 919.668063] path_mount+0x1490/0x21e0 [ 919.668492] ? strncpy_from_user+0x9e/0x470 [ 919.668975] ? finish_automount+0xa90/0xa90 [ 919.669461] ? getname_flags.part.0+0x1dd/0x4f0 [ 919.669986] ? _copy_from_user+0xfb/0x1b0 [ 919.670454] __x64_sys_mount+0x282/0x300 [ 919.670906] ? copy_mnt_ns+0xa00/0xa00 [ 919.671352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 919.671967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 919.672548] do_syscall_64+0x33/0x40 [ 919.672965] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 919.673539] RIP: 0033:0x7fc6f0a40b19 [ 919.673956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 919.676037] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 919.676886] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 919.677687] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 919.678485] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 919.679288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.680103] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 919.680932] CPU: 0 PID: 7171 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 919.682480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 919.684359] Call Trace: [ 919.684950] dump_stack+0x107/0x167 [ 919.685768] should_fail.cold+0x5/0xa [ 919.686631] ? create_object.isra.0+0x3a/0xa30 [ 919.687658] should_failslab+0x5/0x20 [ 919.688511] kmem_cache_alloc+0x5b/0x310 [ 919.689422] create_object.isra.0+0x3a/0xa30 [ 919.690404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 919.691542] kmem_cache_alloc_trace+0x151/0x320 [ 919.692589] ? lockdep_init_map_type+0x2c7/0x780 [ 919.693656] legacy_init_fs_context+0x44/0xe0 [ 919.694654] ? generic_parse_monolithic+0x1f0/0x1f0 [ 919.695771] alloc_fs_context+0x4fd/0x840 [ 919.696705] path_mount+0xab1/0x21e0 [ 919.697537] ? strncpy_from_user+0x9e/0x470 [ 919.698502] ? finish_automount+0xa90/0xa90 [ 919.699469] ? getname_flags.part.0+0x1dd/0x4f0 [ 919.700516] ? _copy_from_user+0xfb/0x1b0 [ 919.701459] __x64_sys_mount+0x282/0x300 [ 919.702372] ? copy_mnt_ns+0xa00/0xa00 [ 919.703254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 919.704437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 919.705590] do_syscall_64+0x33/0x40 [ 919.706420] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 919.707565] RIP: 0033:0x7f5f5e955b19 [ 919.708408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 919.712527] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 919.714221] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 919.715844] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 919.717443] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 919.719053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.720667] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 919.732291] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:23:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 14) 03:23:50 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 03:23:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 15) 03:23:50 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r1) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e00", 0x2a}], 0x2) sendfile(r0, r4, &(0x7f0000000000)=0x63ceac1c, 0x5) 03:23:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 1) 03:23:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 22) 03:23:50 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13", 0x20, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 932.168819] FAULT_INJECTION: forcing a failure. [ 932.168819] name failslab, interval 1, probability 0, space 0, times 0 [ 932.171257] CPU: 1 PID: 7184 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 932.172728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.174480] Call Trace: [ 932.175040] dump_stack+0x107/0x167 [ 932.175841] should_fail.cold+0x5/0xa [ 932.176654] should_failslab+0x5/0x20 [ 932.177459] __kmalloc_track_caller+0x79/0x370 [ 932.178421] ? strndup_user+0x74/0xe0 [ 932.179230] memdup_user+0x22/0xd0 [ 932.180006] strndup_user+0x74/0xe0 [ 932.180773] __x64_sys_mount+0x133/0x300 [ 932.181628] ? copy_mnt_ns+0xa00/0xa00 [ 932.182448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.183555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.184696] do_syscall_64+0x33/0x40 [ 932.185493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.186588] RIP: 0033:0x7fd388488b19 [ 932.187371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.191272] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.192877] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 932.194401] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 932.195915] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 932.197351] FAULT_INJECTION: forcing a failure. [ 932.197351] name failslab, interval 1, probability 0, space 0, times 0 [ 932.197426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.197437] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 932.203004] CPU: 0 PID: 7193 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 932.204452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.206188] Call Trace: [ 932.206743] dump_stack+0x107/0x167 [ 932.207512] should_fail.cold+0x5/0xa [ 932.208333] ? create_object.isra.0+0x3a/0xa30 [ 932.209292] should_failslab+0x5/0x20 [ 932.210091] kmem_cache_alloc+0x5b/0x310 [ 932.210959] create_object.isra.0+0x3a/0xa30 [ 932.211887] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 932.212961] __kmalloc_track_caller+0x177/0x370 [ 932.213947] ? v9fs_session_init+0xe9/0x1680 [ 932.214858] ? kernel_text_address+0xf2/0x120 [ 932.215671] 9pnet: Insufficient options for proto=fd [ 932.215816] kstrdup+0x36/0x70 [ 932.217575] v9fs_session_init+0xe9/0x1680 [ 932.218462] ? lock_release+0x680/0x680 [ 932.219301] ? find_held_lock+0x2c/0x110 [ 932.220169] ? kmem_cache_alloc_trace+0x151/0x320 [ 932.221024] FAULT_INJECTION: forcing a failure. [ 932.221024] name failslab, interval 1, probability 0, space 0, times 0 [ 932.221190] ? v9fs_show_options+0x690/0x690 [ 932.224419] ? trace_hardirqs_on+0x5b/0x180 [ 932.225330] ? kasan_unpoison_shadow+0x33/0x50 [ 932.226293] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 932.227361] v9fs_mount+0x79/0x8f0 [ 932.228115] ? v9fs_write_inode+0x60/0x60 [ 932.228984] legacy_get_tree+0x105/0x220 [ 932.229842] vfs_get_tree+0x8e/0x300 [ 932.230630] path_mount+0x1490/0x21e0 [ 932.231436] ? strncpy_from_user+0x9e/0x470 [ 932.232355] ? finish_automount+0xa90/0xa90 [ 932.233262] ? getname_flags.part.0+0x1dd/0x4f0 [ 932.234238] ? _copy_from_user+0xfb/0x1b0 [ 932.235114] __x64_sys_mount+0x282/0x300 [ 932.235976] ? copy_mnt_ns+0xa00/0xa00 [ 932.236801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.237905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.238995] do_syscall_64+0x33/0x40 [ 932.239797] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.240873] RIP: 0033:0x7f2ae689eb19 [ 932.241659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.245525] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.247109] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 932.248602] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 932.250077] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 932.251571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.253053] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 932.254572] CPU: 1 PID: 7198 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 932.256042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.257799] Call Trace: [ 932.258362] dump_stack+0x107/0x167 [ 932.259138] should_fail.cold+0x5/0xa [ 932.259965] ? create_object.isra.0+0x3a/0xa30 [ 932.260931] should_failslab+0x5/0x20 [ 932.261741] kmem_cache_alloc+0x5b/0x310 [ 932.262037] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 932.262599] ? cred_has_capability.isra.0+0x152/0x2b0 [ 932.262627] create_object.isra.0+0x3a/0xa30 [ 932.266522] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 932.267601] kmem_cache_alloc_trace+0x151/0x320 [ 932.268593] ? v9fs_write_inode+0x60/0x60 [ 932.269468] v9fs_mount+0x5a/0x8f0 [ 932.270223] ? v9fs_write_inode+0x60/0x60 [ 932.271096] legacy_get_tree+0x105/0x220 [ 932.271964] vfs_get_tree+0x8e/0x300 [ 932.272753] path_mount+0x1490/0x21e0 [ 932.273564] ? strncpy_from_user+0x9e/0x470 [ 932.274474] ? finish_automount+0xa90/0xa90 [ 932.275386] ? getname_flags.part.0+0x1dd/0x4f0 [ 932.276375] ? _copy_from_user+0xfb/0x1b0 [ 932.277257] __x64_sys_mount+0x282/0x300 [ 932.278116] ? copy_mnt_ns+0xa00/0xa00 [ 932.278943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.280071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.281155] do_syscall_64+0x33/0x40 [ 932.281944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.283019] RIP: 0033:0x7fc6f0a40b19 [ 932.283808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.287903] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.289506] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 932.291009] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 932.292524] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 932.294030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.295525] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 932.302353] FAULT_INJECTION: forcing a failure. [ 932.302353] name failslab, interval 1, probability 0, space 0, times 0 [ 932.304771] CPU: 1 PID: 7191 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 932.306219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.307985] Call Trace: [ 932.308539] dump_stack+0x107/0x167 [ 932.309312] should_fail.cold+0x5/0xa [ 932.310113] ? v9fs_mount+0x5a/0x8f0 [ 932.310896] should_failslab+0x5/0x20 [ 932.311707] kmem_cache_alloc_trace+0x55/0x320 [ 932.312726] ? v9fs_write_inode+0x60/0x60 [ 932.313608] v9fs_mount+0x5a/0x8f0 [ 932.314363] ? v9fs_write_inode+0x60/0x60 [ 932.315218] legacy_get_tree+0x105/0x220 [ 932.316090] vfs_get_tree+0x8e/0x300 [ 932.316876] path_mount+0x1490/0x21e0 [ 932.317691] ? strncpy_from_user+0x9e/0x470 [ 932.318607] ? finish_automount+0xa90/0xa90 [ 932.319519] ? getname_flags.part.0+0x1dd/0x4f0 [ 932.320510] ? _copy_from_user+0xfb/0x1b0 [ 932.321391] __x64_sys_mount+0x282/0x300 [ 932.322250] ? copy_mnt_ns+0xa00/0xa00 [ 932.323078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.324239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.325404] do_syscall_64+0x33/0x40 [ 932.326244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.327391] RIP: 0033:0x7f5f5e955b19 [ 932.328238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.332367] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.334073] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 932.335675] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 932.337295] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 932.338895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.340502] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:23:51 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 2) 03:23:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 932.392360] 9pnet: Insufficient options for proto=fd [ 932.392617] FAULT_INJECTION: forcing a failure. [ 932.392617] name failslab, interval 1, probability 0, space 0, times 0 [ 932.395897] CPU: 0 PID: 7203 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 932.397258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.398914] Call Trace: [ 932.399446] dump_stack+0x107/0x167 [ 932.400181] should_fail.cold+0x5/0xa [ 932.400943] ? create_object.isra.0+0x3a/0xa30 [ 932.401852] should_failslab+0x5/0x20 [ 932.402608] kmem_cache_alloc+0x5b/0x310 [ 932.403419] create_object.isra.0+0x3a/0xa30 [ 932.404295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 932.405304] __kmalloc_track_caller+0x177/0x370 [ 932.406214] ? strndup_user+0x74/0xe0 [ 932.406967] memdup_user+0x22/0xd0 [ 932.407661] strndup_user+0x74/0xe0 [ 932.408384] __x64_sys_mount+0x133/0x300 [ 932.409180] ? copy_mnt_ns+0xa00/0xa00 [ 932.409947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.410984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.412003] do_syscall_64+0x33/0x40 [ 932.412735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.413744] RIP: 0033:0x7fd388488b19 [ 932.414486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.418116] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.419617] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 932.421022] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 932.422426] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 932.423835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.425238] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:23:51 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 1) 03:23:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 23) 03:23:51 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6a", 0x30, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:23:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 932.474503] FAULT_INJECTION: forcing a failure. [ 932.474503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.476797] CPU: 0 PID: 7206 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 932.478100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.479674] Call Trace: [ 932.480189] dump_stack+0x107/0x167 [ 932.480892] should_fail.cold+0x5/0xa [ 932.481629] _copy_from_user+0x2e/0x1b0 [ 932.482402] __copy_msghdr_from_user+0x91/0x4b0 [ 932.483292] ? __ia32_sys_shutdown+0x80/0x80 [ 932.484162] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 932.485119] sendmsg_copy_msghdr+0xa1/0x160 [ 932.485943] ? do_recvmmsg+0x6d0/0x6d0 [ 932.486693] ? perf_trace_lock+0x2bd/0x490 [ 932.487511] ? __lockdep_reset_lock+0x180/0x180 [ 932.488418] ___sys_sendmsg+0xc6/0x170 [ 932.489164] ? sendmsg_copy_msghdr+0x160/0x160 [ 932.490037] ? __fget_files+0x2cf/0x520 [ 932.490794] ? lock_downgrade+0x6d0/0x6d0 [ 932.491575] ? find_held_lock+0x2c/0x110 [ 932.492376] ? __fget_files+0x2f8/0x520 [ 932.493143] ? __fget_light+0xea/0x290 [ 932.493899] __sys_sendmsg+0xe5/0x1b0 [ 932.494623] ? __sys_sendmsg_sock+0x40/0x40 [ 932.495433] ? rcu_read_lock_any_held+0x75/0xa0 [ 932.496325] ? fput_many+0x2f/0x1a0 [ 932.497024] ? ksys_write+0x1a9/0x260 [ 932.497746] ? __ia32_sys_read+0xb0/0xb0 [ 932.498521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.499522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.500504] ? trace_hardirqs_on+0x5b/0x180 [ 932.500888] 9pnet: Insufficient options for proto=fd [ 932.501327] do_syscall_64+0x33/0x40 [ 932.503195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.504199] RIP: 0033:0x7f5452beab19 [ 932.504909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.508475] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.509894] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 932.511218] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 932.512543] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 932.513869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.515186] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 [ 932.528370] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 932.534713] 9pnet: Insufficient options for proto=fd [ 932.549708] FAULT_INJECTION: forcing a failure. [ 932.549708] name failslab, interval 1, probability 0, space 0, times 0 [ 932.553427] CPU: 1 PID: 7216 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 932.554939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.556782] Call Trace: [ 932.557380] dump_stack+0x107/0x167 [ 932.558190] should_fail.cold+0x5/0xa [ 932.559034] ? create_object.isra.0+0x3a/0xa30 [ 932.560053] should_failslab+0x5/0x20 [ 932.560900] kmem_cache_alloc+0x5b/0x310 [ 932.561806] ? lock_downgrade+0x6d0/0x6d0 [ 932.562846] create_object.isra.0+0x3a/0xa30 [ 932.563976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 932.565106] __kmalloc_track_caller+0x177/0x370 [ 932.566137] ? p9_client_create+0x41d/0x1230 [ 932.567114] kstrdup+0x36/0x70 [ 932.567842] p9_client_create+0x41d/0x1230 [ 932.568779] ? lock_downgrade+0x6d0/0x6d0 [ 932.569700] ? p9_client_flush+0x430/0x430 [ 932.570632] ? trace_hardirqs_on+0x5b/0x180 [ 932.571592] ? lockdep_init_map_type+0x2c7/0x780 [ 932.572653] ? __raw_spin_lock_init+0x36/0x110 [ 932.573676] v9fs_session_init+0x1dd/0x1680 [ 932.574635] ? lock_release+0x680/0x680 [ 932.575525] ? kmem_cache_alloc_trace+0x151/0x320 [ 932.576604] ? v9fs_show_options+0x690/0x690 [ 932.577604] ? trace_hardirqs_on+0x5b/0x180 [ 932.578557] ? kasan_unpoison_shadow+0x33/0x50 [ 932.579563] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 932.580704] v9fs_mount+0x79/0x8f0 [ 932.581490] ? v9fs_write_inode+0x60/0x60 [ 932.582404] legacy_get_tree+0x105/0x220 [ 932.583303] vfs_get_tree+0x8e/0x300 [ 932.584135] path_mount+0x1490/0x21e0 [ 932.584985] ? strncpy_from_user+0x9e/0x470 [ 932.585938] ? finish_automount+0xa90/0xa90 [ 932.586890] ? getname_flags.part.0+0x1dd/0x4f0 [ 932.587933] ? _copy_from_user+0xfb/0x1b0 [ 932.588862] __x64_sys_mount+0x282/0x300 [ 932.589758] ? copy_mnt_ns+0xa00/0xa00 [ 932.590626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.591796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.592935] do_syscall_64+0x33/0x40 [ 932.593760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.594907] RIP: 0033:0x7f2ae689eb19 [ 932.595724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.599787] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.601494] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 932.603065] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 932.604646] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 932.606215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.607792] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:23:51 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 2) 03:23:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 15) 03:23:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 16) [ 932.657681] FAULT_INJECTION: forcing a failure. [ 932.657681] name failslab, interval 1, probability 0, space 0, times 0 [ 932.660123] CPU: 0 PID: 7221 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 932.661550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.663303] Call Trace: [ 932.663868] dump_stack+0x107/0x167 [ 932.664627] should_fail.cold+0x5/0xa [ 932.665423] ? create_object.isra.0+0x3a/0xa30 [ 932.666376] should_failslab+0x5/0x20 [ 932.667180] kmem_cache_alloc+0x5b/0x310 [ 932.668046] ? cred_has_capability.isra.0+0x152/0x2b0 [ 932.669134] create_object.isra.0+0x3a/0xa30 [ 932.670055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 932.671116] kmem_cache_alloc_trace+0x151/0x320 [ 932.672096] ? v9fs_write_inode+0x60/0x60 [ 932.672959] v9fs_mount+0x5a/0x8f0 [ 932.673700] ? v9fs_write_inode+0x60/0x60 [ 932.674563] legacy_get_tree+0x105/0x220 [ 932.675409] vfs_get_tree+0x8e/0x300 [ 932.676190] path_mount+0x1490/0x21e0 [ 932.676987] ? strncpy_from_user+0x9e/0x470 [ 932.677884] ? finish_automount+0xa90/0xa90 [ 932.678780] ? getname_flags.part.0+0x1dd/0x4f0 [ 932.679754] ? _copy_from_user+0xfb/0x1b0 [ 932.680633] __x64_sys_mount+0x282/0x300 [ 932.681484] ? copy_mnt_ns+0xa00/0xa00 [ 932.682306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.683408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.684516] do_syscall_64+0x33/0x40 [ 932.685296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.686371] RIP: 0033:0x7f5f5e955b19 [ 932.687153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.691003] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.692604] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 932.694092] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 932.695574] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 932.697072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.698556] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 932.711244] 9pnet: Insufficient options for proto=fd 03:23:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 932.718878] FAULT_INJECTION: forcing a failure. [ 932.718878] name failslab, interval 1, probability 0, space 0, times 0 [ 932.721334] CPU: 0 PID: 7225 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 932.722764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.724521] Call Trace: [ 932.725078] dump_stack+0x107/0x167 [ 932.725844] should_fail.cold+0x5/0xa [ 932.726648] ? create_object.isra.0+0x3a/0xa30 [ 932.727604] should_failslab+0x5/0x20 [ 932.728414] kmem_cache_alloc+0x5b/0x310 [ 932.729244] ? cred_has_capability.isra.0+0x152/0x2b0 [ 932.730304] create_object.isra.0+0x3a/0xa30 [ 932.731237] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 932.732311] kmem_cache_alloc_trace+0x151/0x320 [ 932.733289] ? v9fs_write_inode+0x60/0x60 [ 932.734151] v9fs_mount+0x5a/0x8f0 [ 932.734904] ? v9fs_write_inode+0x60/0x60 [ 932.735783] legacy_get_tree+0x105/0x220 [ 932.736646] vfs_get_tree+0x8e/0x300 [ 932.737424] path_mount+0x1490/0x21e0 [ 932.738228] ? strncpy_from_user+0x9e/0x470 [ 932.739136] ? finish_automount+0xa90/0xa90 [ 932.740066] ? getname_flags.part.0+0x1dd/0x4f0 [ 932.741045] ? _copy_from_user+0xfb/0x1b0 [ 932.741918] __x64_sys_mount+0x282/0x300 [ 932.742771] ? copy_mnt_ns+0xa00/0xa00 [ 932.743591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.744703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.745778] do_syscall_64+0x33/0x40 [ 932.746563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.747638] RIP: 0033:0x7fc6f0a40b19 [ 932.748432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.752284] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.753870] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 932.755361] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 932.756885] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 932.758377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.759877] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:23:51 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6a", 0x30, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 932.773822] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:23:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 932.806064] FAULT_INJECTION: forcing a failure. [ 932.806064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.808770] CPU: 1 PID: 7222 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 932.810299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.812160] Call Trace: [ 932.812754] dump_stack+0x107/0x167 [ 932.813565] should_fail.cold+0x5/0xa [ 932.814416] _copy_from_user+0x2e/0x1b0 [ 932.815303] iovec_from_user+0x141/0x400 [ 932.816165] 9pnet: Insufficient options for proto=fd [ 932.816220] __import_iovec+0x67/0x590 [ 932.818150] ? __ia32_sys_shutdown+0x80/0x80 [ 932.819124] ? perf_trace_lock+0xac/0x490 [ 932.820065] import_iovec+0x83/0xb0 [ 932.820878] sendmsg_copy_msghdr+0x131/0x160 [ 932.821855] ? do_recvmmsg+0x6d0/0x6d0 [ 932.822718] ? lock_downgrade+0x6d0/0x6d0 [ 932.823638] ? __lockdep_reset_lock+0x180/0x180 [ 932.824690] ___sys_sendmsg+0xc6/0x170 [ 932.825556] ? sendmsg_copy_msghdr+0x160/0x160 [ 932.826575] ? __fget_files+0x2cf/0x520 [ 932.827461] ? lock_downgrade+0x6d0/0x6d0 [ 932.828392] ? find_held_lock+0x2c/0x110 [ 932.829305] ? __fget_files+0x2f8/0x520 [ 932.830188] ? __fget_light+0xea/0x290 [ 932.831074] __sys_sendmsg+0xe5/0x1b0 [ 932.831923] ? __sys_sendmsg_sock+0x40/0x40 [ 932.832879] ? rcu_read_lock_any_held+0x75/0xa0 [ 932.833929] ? fput_many+0x2f/0x1a0 [ 932.834740] ? ksys_write+0x1a9/0x260 [ 932.835604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.836803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.837956] ? trace_hardirqs_on+0x5b/0x180 [ 932.838925] do_syscall_64+0x33/0x40 [ 932.839779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.840925] RIP: 0033:0x7f5452beab19 [ 932.841766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.845904] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.847581] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 932.849172] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 932.850761] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 932.852342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.853918] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 [ 932.906957] 9pnet: Insufficient options for proto=fd 03:23:51 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 3) 03:23:51 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 3) 03:23:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:23:51 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6a", 0x30, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 932.952407] FAULT_INJECTION: forcing a failure. [ 932.952407] name failslab, interval 1, probability 0, space 0, times 0 [ 932.955171] CPU: 0 PID: 7235 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 932.956623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.958367] Call Trace: [ 932.958928] dump_stack+0x107/0x167 [ 932.959720] should_fail.cold+0x5/0xa [ 932.960543] ? tcp_sendmsg_locked+0x1eb3/0x2f30 [ 932.961526] should_failslab+0x5/0x20 [ 932.962328] kmem_cache_alloc_trace+0x55/0x320 [ 932.963314] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 932.964433] tcp_sendmsg_locked+0x1eb3/0x2f30 [ 932.965401] ? tcp_sendmsg+0x1d/0x50 [ 932.966204] ? lock_downgrade+0x6d0/0x6d0 [ 932.967084] ? tcp_sendpage+0xd0/0xd0 [ 932.967914] ? mark_held_locks+0x9e/0xe0 [ 932.968790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.969888] ? __local_bh_enable_ip+0x9d/0x100 [ 932.970855] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 932.971856] tcp_sendmsg+0x2b/0x50 [ 932.972622] inet6_sendmsg+0xb5/0x140 [ 932.973433] ? inet6_compat_ioctl+0x320/0x320 [ 932.974377] __sock_sendmsg+0xf2/0x190 [ 932.975211] ____sys_sendmsg+0x70d/0x870 [ 932.976093] ? sock_write_iter+0x3d0/0x3d0 [ 932.976988] ? do_recvmmsg+0x6d0/0x6d0 [ 932.977820] ? perf_trace_lock+0x2bd/0x490 [ 932.978733] ? __lockdep_reset_lock+0x180/0x180 [ 932.979728] ___sys_sendmsg+0xf3/0x170 [ 932.980565] ? sendmsg_copy_msghdr+0x160/0x160 [ 932.981538] ? __fget_files+0x2cf/0x520 [ 932.982378] ? lock_downgrade+0x6d0/0x6d0 [ 932.983265] ? find_held_lock+0x2c/0x110 [ 932.984167] ? __fget_files+0x2f8/0x520 [ 932.985028] ? __fget_light+0xea/0x290 [ 932.985877] __sys_sendmsg+0xe5/0x1b0 [ 932.986685] ? __sys_sendmsg_sock+0x40/0x40 [ 932.987597] ? rcu_read_lock_any_held+0x75/0xa0 [ 932.988621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.989734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.990813] ? trace_hardirqs_on+0x5b/0x180 [ 932.991245] FAULT_INJECTION: forcing a failure. [ 932.991245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.991728] do_syscall_64+0x33/0x40 [ 932.994912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 932.995995] RIP: 0033:0x7f5452beab19 [ 932.996775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.000636] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.002247] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 933.003741] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 933.005238] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 933.006742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.008242] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 [ 933.009788] CPU: 1 PID: 7238 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 933.011248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 933.012991] Call Trace: [ 933.013549] dump_stack+0x107/0x167 [ 933.014325] should_fail.cold+0x5/0xa [ 933.015126] _copy_from_user+0x2e/0x1b0 [ 933.015977] memdup_user+0x65/0xd0 [ 933.016716] strndup_user+0x74/0xe0 [ 933.017474] __x64_sys_mount+0x133/0x300 [ 933.018330] ? copy_mnt_ns+0xa00/0xa00 [ 933.019157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 933.020277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 933.021365] do_syscall_64+0x33/0x40 [ 933.022137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 933.023212] RIP: 0033:0x7fd388488b19 [ 933.024012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.027844] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 933.029425] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 933.030937] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 933.032419] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 933.033918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.035398] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 933.049408] 9pnet: Insufficient options for proto=fd [ 933.116638] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 947.340718] FAULT_INJECTION: forcing a failure. [ 947.340718] name failslab, interval 1, probability 0, space 0, times 0 [ 947.343619] CPU: 0 PID: 7253 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 947.345355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 947.347463] Call Trace: [ 947.348141] dump_stack+0x107/0x167 [ 947.349062] should_fail.cold+0x5/0xa [ 947.350023] ? copy_mount_options+0x55/0x180 [ 947.351135] should_failslab+0x5/0x20 [ 947.352112] kmem_cache_alloc_trace+0x55/0x320 [ 947.353267] ? _copy_from_user+0xfb/0x1b0 [ 947.354329] copy_mount_options+0x55/0x180 [ 947.355411] __x64_sys_mount+0x1a8/0x300 [ 947.356459] ? copy_mnt_ns+0xa00/0xa00 [ 947.357451] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 947.358545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 947.359842] do_syscall_64+0x33/0x40 [ 947.360802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 947.362101] RIP: 0033:0x7fd388488b19 [ 947.363047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 947.367704] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 947.369906] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 947.371728] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 947.373562] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 947.375368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.377189] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:24:06 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 4) 03:24:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 24) 03:24:06 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd", 0x38, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:24:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 17) 03:24:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:24:06 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:24:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 16) 03:24:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 4) [ 947.389163] FAULT_INJECTION: forcing a failure. [ 947.389163] name failslab, interval 1, probability 0, space 0, times 0 [ 947.391988] CPU: 0 PID: 7254 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 947.392492] 9pnet: Insufficient options for proto=fd [ 947.393704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 947.393713] Call Trace: [ 947.393746] dump_stack+0x107/0x167 [ 947.393773] should_fail.cold+0x5/0xa [ 947.393799] should_failslab+0x5/0x20 [ 947.395797] FAULT_INJECTION: forcing a failure. [ 947.395797] name failslab, interval 1, probability 0, space 0, times 0 [ 947.397240] __kmalloc_track_caller+0x79/0x370 [ 947.397261] ? v9fs_session_init+0xa7/0x1680 [ 947.397285] ? kernel_text_address+0xf2/0x120 [ 947.397315] kstrdup+0x36/0x70 [ 947.407605] v9fs_session_init+0xa7/0x1680 [ 947.408510] ? lock_release+0x680/0x680 [ 947.409518] ? find_held_lock+0x2c/0x110 [ 947.410543] ? kmem_cache_alloc_trace+0x151/0x320 [ 947.411790] ? v9fs_show_options+0x690/0x690 [ 947.412943] ? trace_hardirqs_on+0x5b/0x180 [ 947.414033] ? kasan_unpoison_shadow+0x33/0x50 [ 947.415197] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.416515] v9fs_mount+0x79/0x8f0 [ 947.417418] ? v9fs_write_inode+0x60/0x60 [ 947.418483] legacy_get_tree+0x105/0x220 [ 947.419344] vfs_get_tree+0x8e/0x300 [ 947.420316] path_mount+0x1490/0x21e0 [ 947.421281] ? strncpy_from_user+0x9e/0x470 [ 947.422370] ? finish_automount+0xa90/0xa90 [ 947.423466] ? getname_flags.part.0+0x1dd/0x4f0 [ 947.424633] ? _copy_from_user+0xfb/0x1b0 [ 947.425722] __x64_sys_mount+0x282/0x300 [ 947.426761] ? copy_mnt_ns+0xa00/0xa00 [ 947.427757] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 947.429110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 947.430403] do_syscall_64+0x33/0x40 [ 947.431358] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 947.432662] RIP: 0033:0x7f5f5e955b19 [ 947.433613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 947.438257] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 947.440174] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 947.442002] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 947.443789] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 947.445620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 947.447366] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 947.449120] CPU: 1 PID: 7262 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 947.450862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 947.452972] Call Trace: [ 947.453640] dump_stack+0x107/0x167 [ 947.454553] should_fail.cold+0x5/0xa [ 947.455512] ? create_object.isra.0+0x3a/0xa30 [ 947.456680] should_failslab+0x5/0x20 [ 947.457651] kmem_cache_alloc+0x5b/0x310 [ 947.458689] create_object.isra.0+0x3a/0xa30 [ 947.459480] 9pnet: Insufficient options for proto=fd [ 947.459805] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.462118] __kmalloc_track_caller+0x177/0x370 [ 947.463135] FAULT_INJECTION: forcing a failure. [ 947.463135] name failslab, interval 1, probability 0, space 0, times 0 [ 947.463295] ? v9fs_session_init+0xa7/0x1680 [ 947.466732] ? kernel_text_address+0xf2/0x120 [ 947.467865] kstrdup+0x36/0x70 [ 947.468671] v9fs_session_init+0xa7/0x1680 [ 947.469739] ? lock_release+0x680/0x680 [ 947.470740] ? find_held_lock+0x2c/0x110 [ 947.471771] ? kmem_cache_alloc_trace+0x151/0x320 [ 947.473000] ? v9fs_show_options+0x690/0x690 [ 947.474115] ? trace_hardirqs_on+0x5b/0x180 [ 947.475198] ? kasan_unpoison_shadow+0x33/0x50 [ 947.476356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.477639] v9fs_mount+0x79/0x8f0 [ 947.478557] ? v9fs_write_inode+0x60/0x60 [ 947.479619] legacy_get_tree+0x105/0x220 [ 947.480686] vfs_get_tree+0x8e/0x300 [ 947.481646] path_mount+0x1490/0x21e0 [ 947.482628] ? strncpy_from_user+0x9e/0x470 [ 947.483732] ? finish_automount+0xa90/0xa90 [ 947.484863] ? getname_flags.part.0+0x1dd/0x4f0 [ 947.486063] ? _copy_from_user+0xfb/0x1b0 [ 947.487142] __x64_sys_mount+0x282/0x300 [ 947.488203] ? copy_mnt_ns+0xa00/0xa00 [ 947.489210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 947.490543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 947.491881] do_syscall_64+0x33/0x40 [ 947.492858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 947.494171] RIP: 0033:0x7fc6f0a40b19 [ 947.495117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 947.499834] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 947.501774] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 947.503588] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 947.505392] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 947.507207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 947.509024] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 947.510871] CPU: 0 PID: 7265 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 947.512365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 947.514122] Call Trace: [ 947.514677] dump_stack+0x107/0x167 [ 947.515466] should_fail.cold+0x5/0xa [ 947.516296] should_failslab+0x5/0x20 [ 947.517107] __kmalloc_track_caller+0x79/0x370 [ 947.518080] ? p9_client_create+0x51e/0x1230 [ 947.519057] kmemdup_nul+0x2d/0xa0 [ 947.519820] p9_client_create+0x51e/0x1230 [ 947.520759] ? p9_client_flush+0x430/0x430 [ 947.521690] ? trace_hardirqs_on+0x5b/0x180 [ 947.521971] FAULT_INJECTION: forcing a failure. [ 947.521971] name failslab, interval 1, probability 0, space 0, times 0 [ 947.522610] ? lockdep_init_map_type+0x2c7/0x780 [ 947.522633] ? __raw_spin_lock_init+0x36/0x110 [ 947.522662] v9fs_session_init+0x1dd/0x1680 [ 947.528278] ? lock_release+0x680/0x680 [ 947.529139] ? kmem_cache_alloc_trace+0x151/0x320 [ 947.530168] ? v9fs_show_options+0x690/0x690 [ 947.531118] ? trace_hardirqs_on+0x5b/0x180 [ 947.532061] ? kasan_unpoison_shadow+0x33/0x50 [ 947.533024] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.534100] v9fs_mount+0x79/0x8f0 [ 947.534853] ? v9fs_write_inode+0x60/0x60 [ 947.535742] legacy_get_tree+0x105/0x220 [ 947.536647] vfs_get_tree+0x8e/0x300 [ 947.537448] path_mount+0x1490/0x21e0 [ 947.538267] ? strncpy_from_user+0x9e/0x470 [ 947.539180] ? finish_automount+0xa90/0xa90 [ 947.540122] ? getname_flags.part.0+0x1dd/0x4f0 [ 947.541114] ? _copy_from_user+0xfb/0x1b0 [ 947.542001] __x64_sys_mount+0x282/0x300 [ 947.542860] ? copy_mnt_ns+0xa00/0xa00 [ 947.543692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 947.544832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 947.545952] do_syscall_64+0x33/0x40 [ 947.546733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 947.547812] RIP: 0033:0x7f2ae689eb19 [ 947.548628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 947.552568] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 947.554198] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 947.555715] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 947.557258] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 947.558766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 947.560304] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 947.561850] CPU: 1 PID: 7261 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 947.563571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 947.565595] Call Trace: [ 947.566253] dump_stack+0x107/0x167 [ 947.567162] should_fail.cold+0x5/0xa [ 947.568122] ? create_object.isra.0+0x3a/0xa30 [ 947.569258] should_failslab+0x5/0x20 [ 947.570188] kmem_cache_alloc+0x5b/0x310 [ 947.571190] ? __lock_acquire+0x1657/0x5b00 [ 947.572276] create_object.isra.0+0x3a/0xa30 [ 947.573359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.574618] kmem_cache_alloc_trace+0x151/0x320 [ 947.575177] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 947.575773] tcp_sendmsg_locked+0x1eb3/0x2f30 [ 947.578845] ? tcp_sendmsg+0x1d/0x50 [ 947.579771] ? lock_downgrade+0x6d0/0x6d0 [ 947.580814] ? tcp_sendpage+0xd0/0xd0 [ 947.581742] ? mark_held_locks+0x9e/0xe0 [ 947.582741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 947.584023] ? __local_bh_enable_ip+0x9d/0x100 [ 947.585143] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 947.586266] tcp_sendmsg+0x2b/0x50 [ 947.587135] inet6_sendmsg+0xb5/0x140 [ 947.588059] ? inet6_compat_ioctl+0x320/0x320 [ 947.589157] __sock_sendmsg+0xf2/0x190 [ 947.590107] ____sys_sendmsg+0x70d/0x870 [ 947.591106] ? sock_write_iter+0x3d0/0x3d0 [ 947.592146] ? do_recvmmsg+0x6d0/0x6d0 [ 947.593108] ? lock_downgrade+0x6d0/0x6d0 [ 947.594084] ? __lockdep_reset_lock+0x180/0x180 [ 947.595182] ___sys_sendmsg+0xf3/0x170 [ 947.596113] ? sendmsg_copy_msghdr+0x160/0x160 [ 947.597210] ? __fget_files+0x2cf/0x520 [ 947.598145] ? lock_downgrade+0x6d0/0x6d0 [ 947.599133] ? find_held_lock+0x2c/0x110 [ 947.600110] ? __fget_files+0x2f8/0x520 [ 947.601057] ? __fget_light+0xea/0x290 [ 947.601980] __sys_sendmsg+0xe5/0x1b0 [ 947.602860] ? __sys_sendmsg_sock+0x40/0x40 [ 947.603873] ? rcu_read_lock_any_held+0x75/0xa0 [ 947.604992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 947.606199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 947.607422] ? trace_hardirqs_on+0x5b/0x180 [ 947.608442] do_syscall_64+0x33/0x40 [ 947.609312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 947.610495] RIP: 0033:0x7f5452beab19 [ 947.611352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 947.615602] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.617402] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 947.619036] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 947.620681] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 947.622318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.623959] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 03:24:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 5) 03:24:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:24:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 25) [ 947.693505] FAULT_INJECTION: forcing a failure. [ 947.693505] name failslab, interval 1, probability 0, space 0, times 0 03:24:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 17) [ 947.696583] CPU: 1 PID: 7274 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 947.698542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 947.700798] Call Trace: [ 947.701512] dump_stack+0x107/0x167 [ 947.702502] should_fail.cold+0x5/0xa [ 947.703508] ? create_object.isra.0+0x3a/0xa30 [ 947.704732] should_failslab+0x5/0x20 [ 947.705740] kmem_cache_alloc+0x5b/0x310 [ 947.706823] create_object.isra.0+0x3a/0xa30 [ 947.707998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.709342] kmem_cache_alloc_trace+0x151/0x320 [ 947.710584] copy_mount_options+0x55/0x180 [ 947.711708] __x64_sys_mount+0x1a8/0x300 [ 947.712790] ? copy_mnt_ns+0xa00/0xa00 [ 947.713828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 947.715218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 947.716578] do_syscall_64+0x33/0x40 [ 947.717571] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 947.718908] RIP: 0033:0x7fd388488b19 [ 947.719877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 947.724691] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 947.726673] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 947.728544] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 947.730409] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 947.732257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.734091] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 947.740561] 9pnet: Insufficient options for proto=fd [ 947.783859] FAULT_INJECTION: forcing a failure. [ 947.783859] name failslab, interval 1, probability 0, space 0, times 0 [ 947.786760] CPU: 1 PID: 7278 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 947.788498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 947.790458] FAULT_INJECTION: forcing a failure. [ 947.790458] name failslab, interval 1, probability 0, space 0, times 0 [ 947.790585] Call Trace: [ 947.790624] dump_stack+0x107/0x167 [ 947.794540] should_fail.cold+0x5/0xa [ 947.795489] ? create_object.isra.0+0x3a/0xa30 [ 947.796640] should_failslab+0x5/0x20 [ 947.797584] kmem_cache_alloc+0x5b/0x310 [ 947.798594] create_object.isra.0+0x3a/0xa30 [ 947.799686] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.800965] __kmalloc_track_caller+0x177/0x370 [ 947.802123] ? p9_client_create+0x51e/0x1230 [ 947.803227] kmemdup_nul+0x2d/0xa0 [ 947.804109] p9_client_create+0x51e/0x1230 [ 947.805164] ? p9_client_flush+0x430/0x430 [ 947.806219] ? trace_hardirqs_on+0x5b/0x180 [ 947.807288] ? lockdep_init_map_type+0x2c7/0x780 [ 947.808472] ? __raw_spin_lock_init+0x36/0x110 [ 947.809608] v9fs_session_init+0x1dd/0x1680 [ 947.810673] ? lock_release+0x680/0x680 [ 947.811657] ? kmem_cache_alloc_trace+0x151/0x320 [ 947.812854] ? v9fs_show_options+0x690/0x690 [ 947.813941] ? trace_hardirqs_on+0x5b/0x180 [ 947.815006] ? kasan_unpoison_shadow+0x33/0x50 [ 947.816142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.817370] v9fs_mount+0x79/0x8f0 [ 947.818217] ? v9fs_write_inode+0x60/0x60 [ 947.819203] legacy_get_tree+0x105/0x220 [ 947.820184] vfs_get_tree+0x8e/0x300 [ 947.821105] path_mount+0x1490/0x21e0 [ 947.822036] ? strncpy_from_user+0x9e/0x470 [ 947.823084] ? finish_automount+0xa90/0xa90 [ 947.824149] ? getname_flags.part.0+0x1dd/0x4f0 [ 947.825293] ? _copy_from_user+0xfb/0x1b0 [ 947.826307] __x64_sys_mount+0x282/0x300 [ 947.827295] ? copy_mnt_ns+0xa00/0xa00 [ 947.828264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 947.829541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 947.830790] do_syscall_64+0x33/0x40 [ 947.831682] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 947.832905] RIP: 0033:0x7f2ae689eb19 [ 947.833804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 947.838222] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 947.840076] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 947.841785] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 947.843506] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 947.845205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 947.846880] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 947.848603] CPU: 0 PID: 7279 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 947.850050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 947.851757] Call Trace: [ 947.852344] dump_stack+0x107/0x167 [ 947.853104] should_fail.cold+0x5/0xa [ 947.853905] ? create_object.isra.0+0x3a/0xa30 [ 947.854847] should_failslab+0x5/0x20 [ 947.855644] kmem_cache_alloc+0x5b/0x310 [ 947.856497] create_object.isra.0+0x3a/0xa30 [ 947.857401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.858452] __kmalloc_track_caller+0x177/0x370 [ 947.859417] ? v9fs_session_init+0xa7/0x1680 [ 947.860339] ? kernel_text_address+0xf2/0x120 [ 947.861276] kstrdup+0x36/0x70 [ 947.861955] v9fs_session_init+0xa7/0x1680 [ 947.862815] ? lock_release+0x680/0x680 [ 947.863650] ? find_held_lock+0x2c/0x110 [ 947.864640] ? kmem_cache_alloc_trace+0x151/0x320 [ 947.865631] ? v9fs_show_options+0x690/0x690 [ 947.866558] ? trace_hardirqs_on+0x5b/0x180 [ 947.867460] ? kasan_unpoison_shadow+0x33/0x50 [ 947.868415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 947.869464] v9fs_mount+0x79/0x8f0 [ 947.870206] ? v9fs_write_inode+0x60/0x60 [ 947.871077] legacy_get_tree+0x105/0x220 [ 947.871919] vfs_get_tree+0x8e/0x300 [ 947.872690] path_mount+0x1490/0x21e0 [ 947.873485] ? strncpy_from_user+0x9e/0x470 [ 947.874379] ? finish_automount+0xa90/0xa90 [ 947.875284] ? getname_flags.part.0+0x1dd/0x4f0 [ 947.876268] ? _copy_from_user+0xfb/0x1b0 [ 947.877124] __x64_sys_mount+0x282/0x300 [ 947.877963] ? copy_mnt_ns+0xa00/0xa00 [ 947.878781] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 947.879875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 947.880983] do_syscall_64+0x33/0x40 [ 947.881742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 947.882795] RIP: 0033:0x7f5f5e955b19 [ 947.883576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 947.887888] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 947.889834] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 947.891627] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 947.893435] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 947.895098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 947.896622] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 960.685577] 9pnet: Insufficient options for proto=fd [ 960.689597] FAULT_INJECTION: forcing a failure. [ 960.689597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.692126] CPU: 0 PID: 7290 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 960.693583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 960.695313] Call Trace: [ 960.695870] dump_stack+0x107/0x167 [ 960.696639] should_fail.cold+0x5/0xa [ 960.697436] _copy_from_user+0x2e/0x1b0 [ 960.698286] copy_mount_options+0x76/0x180 [ 960.699175] __x64_sys_mount+0x1a8/0x300 [ 960.700017] ? copy_mnt_ns+0xa00/0xa00 [ 960.700852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 960.701965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 960.703057] do_syscall_64+0x33/0x40 [ 960.703840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 960.704908] RIP: 0033:0x7fd388488b19 [ 960.705677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 960.709857] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.711453] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 960.712950] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 960.714460] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 960.715950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.717448] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:24:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 18) 03:24:19 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd", 0x38, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:24:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 26) 03:24:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 18) 03:24:19 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) 03:24:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}]}}) 03:24:19 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 6) 03:24:19 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 5) [ 960.725903] FAULT_INJECTION: forcing a failure. [ 960.725903] name failslab, interval 1, probability 0, space 0, times 0 [ 960.728425] CPU: 1 PID: 7299 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 960.729027] FAULT_INJECTION: forcing a failure. [ 960.729027] name failslab, interval 1, probability 0, space 0, times 0 [ 960.729856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 960.729863] Call Trace: [ 960.729890] dump_stack+0x107/0x167 [ 960.729916] should_fail.cold+0x5/0xa [ 960.736029] should_failslab+0x5/0x20 [ 960.736840] __kmalloc_track_caller+0x79/0x370 [ 960.737798] ? parse_opts.part.0+0x8e/0x340 [ 960.738709] kstrdup+0x36/0x70 [ 960.739402] parse_opts.part.0+0x8e/0x340 [ 960.740286] ? p9_fd_show_options+0x1c0/0x1c0 [ 960.741236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 960.742334] ? quarantine_put+0x8b/0x1a0 [ 960.743181] ? trace_hardirqs_on+0x5b/0x180 [ 960.744095] ? kfree+0xd7/0x340 [ 960.744791] p9_fd_create+0x98/0x4a0 [ 960.745570] ? p9_conn_create+0x510/0x510 [ 960.746437] ? p9_client_create+0x798/0x1230 [ 960.747370] ? kfree+0xd7/0x340 [ 960.748064] ? do_raw_spin_unlock+0x4f/0x220 [ 960.749031] p9_client_create+0x7ff/0x1230 [ 960.749932] ? p9_client_flush+0x430/0x430 [ 960.750827] ? trace_hardirqs_on+0x5b/0x180 [ 960.751737] ? lockdep_init_map_type+0x2c7/0x780 [ 960.752754] ? __raw_spin_lock_init+0x36/0x110 [ 960.753728] v9fs_session_init+0x1dd/0x1680 [ 960.754638] ? lock_release+0x680/0x680 [ 960.755491] ? kmem_cache_alloc_trace+0x151/0x320 [ 960.756508] ? v9fs_show_options+0x690/0x690 [ 960.757444] ? trace_hardirqs_on+0x5b/0x180 [ 960.758351] ? kasan_unpoison_shadow+0x33/0x50 [ 960.759314] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 960.760397] v9fs_mount+0x79/0x8f0 [ 960.761147] ? v9fs_write_inode+0x60/0x60 [ 960.762015] legacy_get_tree+0x105/0x220 [ 960.762875] vfs_get_tree+0x8e/0x300 [ 960.763654] path_mount+0x1490/0x21e0 [ 960.764474] ? strncpy_from_user+0x9e/0x470 [ 960.765377] ? finish_automount+0xa90/0xa90 [ 960.766280] ? getname_flags.part.0+0x1dd/0x4f0 [ 960.767258] ? _copy_from_user+0xfb/0x1b0 [ 960.768151] __x64_sys_mount+0x282/0x300 [ 960.769003] ? copy_mnt_ns+0xa00/0xa00 [ 960.769825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 960.770926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 960.772009] do_syscall_64+0x33/0x40 [ 960.772838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 960.773914] RIP: 0033:0x7f2ae689eb19 [ 960.774691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 960.778574] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.780199] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 960.781686] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 960.783176] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 960.784673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 960.786157] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 960.787688] CPU: 0 PID: 7302 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 960.787732] 9pnet: Insufficient options for proto=fd [ 960.789142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 960.789148] Call Trace: [ 960.789171] dump_stack+0x107/0x167 [ 960.789193] should_fail.cold+0x5/0xa [ 960.794027] should_failslab+0x5/0x20 [ 960.794823] __kmalloc_track_caller+0x79/0x370 [ 960.795774] ? v9fs_session_init+0xe9/0x1680 [ 960.796699] ? kernel_text_address+0xf2/0x120 [ 960.797642] kstrdup+0x36/0x70 [ 960.798318] v9fs_session_init+0xe9/0x1680 [ 960.799201] ? lock_release+0x680/0x680 [ 960.800027] ? find_held_lock+0x2c/0x110 [ 960.800897] ? kmem_cache_alloc_trace+0x151/0x320 [ 960.801909] ? v9fs_show_options+0x690/0x690 [ 960.802835] ? trace_hardirqs_on+0x5b/0x180 [ 960.803733] ? kasan_unpoison_shadow+0x33/0x50 [ 960.804695] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 960.805767] v9fs_mount+0x79/0x8f0 [ 960.806510] ? v9fs_write_inode+0x60/0x60 [ 960.807373] legacy_get_tree+0x105/0x220 [ 960.808233] vfs_get_tree+0x8e/0x300 [ 960.809009] path_mount+0x1490/0x21e0 [ 960.809811] ? strncpy_from_user+0x9e/0x470 [ 960.810715] ? finish_automount+0xa90/0xa90 [ 960.811619] ? getname_flags.part.0+0x1dd/0x4f0 [ 960.812591] ? _copy_from_user+0xfb/0x1b0 [ 960.813463] __x64_sys_mount+0x282/0x300 [ 960.814311] ? copy_mnt_ns+0xa00/0xa00 [ 960.815129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 960.816239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 960.817323] do_syscall_64+0x33/0x40 [ 960.818109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 960.819179] RIP: 0033:0x7f5f5e955b19 [ 960.819957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 960.823820] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.825412] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 960.826879] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 960.828359] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 960.829832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 960.831315] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 960.838819] FAULT_INJECTION: forcing a failure. [ 960.838819] name failslab, interval 1, probability 0, space 0, times 0 [ 960.841273] CPU: 0 PID: 7296 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 960.842703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 960.844448] Call Trace: [ 960.845012] dump_stack+0x107/0x167 [ 960.845782] should_fail.cold+0x5/0xa [ 960.846578] should_failslab+0x5/0x20 [ 960.847363] __kmalloc_track_caller+0x79/0x370 [ 960.848321] ? v9fs_session_init+0xe9/0x1680 [ 960.849233] ? kernel_text_address+0xf2/0x120 [ 960.850167] kstrdup+0x36/0x70 [ 960.850838] v9fs_session_init+0xe9/0x1680 [ 960.851717] ? lock_release+0x680/0x680 [ 960.852553] ? find_held_lock+0x2c/0x110 [ 960.853421] ? kmem_cache_alloc_trace+0x151/0x320 [ 960.854428] ? v9fs_show_options+0x690/0x690 [ 960.855357] ? trace_hardirqs_on+0x5b/0x180 [ 960.856262] ? kasan_unpoison_shadow+0x33/0x50 [ 960.857202] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 960.858257] v9fs_mount+0x79/0x8f0 [ 960.858994] ? v9fs_write_inode+0x60/0x60 [ 960.859860] legacy_get_tree+0x105/0x220 [ 960.860715] vfs_get_tree+0x8e/0x300 [ 960.861493] path_mount+0x1490/0x21e0 [ 960.862289] ? strncpy_from_user+0x9e/0x470 [ 960.863179] ? finish_automount+0xa90/0xa90 [ 960.864089] ? getname_flags.part.0+0x1dd/0x4f0 [ 960.865046] ? _copy_from_user+0xfb/0x1b0 [ 960.865916] __x64_sys_mount+0x282/0x300 [ 960.866752] ? copy_mnt_ns+0xa00/0xa00 [ 960.866852] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 960.867568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 960.867587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 960.867611] do_syscall_64+0x33/0x40 [ 960.872461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 960.873537] RIP: 0033:0x7fc6f0a40b19 [ 960.874312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 960.878180] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 960.879776] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 960.881280] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 960.882771] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 960.884279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 960.885778] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:24:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 19) 03:24:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 27) 03:24:19 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}, {@dfltgid}]}}) [ 960.953274] FAULT_INJECTION: forcing a failure. [ 960.953274] name failslab, interval 1, probability 0, space 0, times 0 [ 960.955850] CPU: 0 PID: 7300 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 960.957278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 960.958987] Call Trace: [ 960.959539] dump_stack+0x107/0x167 [ 960.960319] should_fail.cold+0x5/0xa [ 960.961124] ? __alloc_skb+0x6d/0x5b0 [ 960.961920] should_failslab+0x5/0x20 [ 960.962719] kmem_cache_alloc_node+0x55/0x330 [ 960.963671] __alloc_skb+0x6d/0x5b0 [ 960.964433] ? tcp_write_queue_purge+0x5a8/0x14b0 [ 960.965446] sk_stream_alloc_skb+0x109/0xc30 [ 960.966371] tcp_connect+0xdad/0x4690 [ 960.967207] ? __tcp_transmit_skb+0x36f0/0x36f0 [ 960.968179] ? mark_held_locks+0x9e/0xe0 [ 960.969048] ? kasan_unpoison_shadow+0x33/0x50 [ 960.969993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 960.971056] tcp_sendmsg_locked+0x25ef/0x2f30 [ 960.972016] ? tcp_sendmsg+0x1d/0x50 [ 960.972815] ? lock_downgrade+0x6d0/0x6d0 [ 960.973691] ? tcp_sendpage+0xd0/0xd0 [ 960.974497] ? mark_held_locks+0x9e/0xe0 [ 960.975354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 960.976464] ? __local_bh_enable_ip+0x9d/0x100 [ 960.977419] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 960.978399] tcp_sendmsg+0x2b/0x50 [ 960.979149] inet6_sendmsg+0xb5/0x140 [ 960.979943] ? inet6_compat_ioctl+0x320/0x320 [ 960.980554] FAULT_INJECTION: forcing a failure. [ 960.980554] name failslab, interval 1, probability 0, space 0, times 0 [ 960.980888] __sock_sendmsg+0xf2/0x190 [ 960.980916] ____sys_sendmsg+0x70d/0x870 [ 960.980958] ? sock_write_iter+0x3d0/0x3d0 [ 960.985782] ? do_recvmmsg+0x6d0/0x6d0 [ 960.986603] ? perf_trace_lock+0x2bd/0x490 [ 960.987502] ? __lockdep_reset_lock+0x180/0x180 [ 960.988501] ___sys_sendmsg+0xf3/0x170 [ 960.989322] ? sendmsg_copy_msghdr+0x160/0x160 [ 960.990284] ? __fget_files+0x2cf/0x520 [ 960.991116] ? lock_downgrade+0x6d0/0x6d0 [ 960.991987] ? find_held_lock+0x2c/0x110 [ 960.992867] ? __fget_files+0x2f8/0x520 [ 960.993720] ? __fget_light+0xea/0x290 [ 960.994554] __sys_sendmsg+0xe5/0x1b0 [ 960.995369] ? __sys_sendmsg_sock+0x40/0x40 [ 960.996278] ? rcu_read_lock_any_held+0x75/0xa0 [ 960.997285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 960.998381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 960.999457] ? trace_hardirqs_on+0x5b/0x180 [ 961.000374] do_syscall_64+0x33/0x40 [ 961.001152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 961.002217] RIP: 0033:0x7f5452beab19 [ 961.002983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 961.006777] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.008353] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 961.009822] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 961.011285] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 961.012778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.014241] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 [ 961.015773] CPU: 1 PID: 7312 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 961.016728] FAULT_INJECTION: forcing a failure. [ 961.016728] name failslab, interval 1, probability 0, space 0, times 0 [ 961.017591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 961.017602] Call Trace: [ 961.017642] dump_stack+0x107/0x167 [ 961.017676] should_fail.cold+0x5/0xa [ 961.023738] ? create_object.isra.0+0x3a/0xa30 [ 961.024714] should_failslab+0x5/0x20 [ 961.025516] kmem_cache_alloc+0x5b/0x310 [ 961.026375] create_object.isra.0+0x3a/0xa30 [ 961.027301] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 961.028381] __kmalloc_track_caller+0x177/0x370 [ 961.029359] ? v9fs_session_init+0xe9/0x1680 [ 961.030279] ? kernel_text_address+0xf2/0x120 [ 961.031229] kstrdup+0x36/0x70 [ 961.031903] v9fs_session_init+0xe9/0x1680 [ 961.032813] ? lock_release+0x680/0x680 [ 961.033649] ? find_held_lock+0x2c/0x110 [ 961.034510] ? kmem_cache_alloc_trace+0x151/0x320 [ 961.035518] ? v9fs_show_options+0x690/0x690 [ 961.036465] ? trace_hardirqs_on+0x5b/0x180 [ 961.037374] ? kasan_unpoison_shadow+0x33/0x50 [ 961.038330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 961.039396] v9fs_mount+0x79/0x8f0 [ 961.040154] ? v9fs_write_inode+0x60/0x60 [ 961.041034] legacy_get_tree+0x105/0x220 [ 961.041888] vfs_get_tree+0x8e/0x300 [ 961.042667] path_mount+0x1490/0x21e0 [ 961.043479] ? strncpy_from_user+0x9e/0x470 [ 961.044397] ? finish_automount+0xa90/0xa90 [ 961.045305] ? getname_flags.part.0+0x1dd/0x4f0 [ 961.046281] ? _copy_from_user+0xfb/0x1b0 [ 961.047177] __x64_sys_mount+0x282/0x300 [ 961.048029] ? copy_mnt_ns+0xa00/0xa00 [ 961.048856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 961.049964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 961.051050] do_syscall_64+0x33/0x40 [ 961.051827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 961.052909] RIP: 0033:0x7fc6f0a40b19 [ 961.053692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 961.057557] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 961.059164] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 961.060669] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 961.062170] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 961.063679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 961.065178] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 961.066713] CPU: 0 PID: 7308 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 961.068125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 961.069828] Call Trace: [ 961.070372] dump_stack+0x107/0x167 [ 961.071113] should_fail.cold+0x5/0xa [ 961.071892] ? create_object.isra.0+0x3a/0xa30 [ 961.072824] should_failslab+0x5/0x20 [ 961.073590] kmem_cache_alloc+0x5b/0x310 [ 961.074402] ? legacy_get_tree+0x105/0x220 [ 961.075257] ? vfs_get_tree+0x8e/0x300 [ 961.076044] create_object.isra.0+0x3a/0xa30 [ 961.076943] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 961.077978] __kmalloc_track_caller+0x177/0x370 [ 961.078912] ? parse_opts.part.0+0x8e/0x340 [ 961.079789] kstrdup+0x36/0x70 [ 961.080445] parse_opts.part.0+0x8e/0x340 [ 961.081276] ? p9_fd_show_options+0x1c0/0x1c0 [ 961.082181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 961.083237] ? quarantine_put+0x8b/0x1a0 [ 961.084047] ? trace_hardirqs_on+0x5b/0x180 [ 961.084935] ? kfree+0xd7/0x340 [ 961.085600] p9_fd_create+0x98/0x4a0 [ 961.086346] ? p9_conn_create+0x510/0x510 [ 961.087185] ? p9_client_create+0x798/0x1230 [ 961.088066] ? kfree+0xd7/0x340 [ 961.088734] ? do_raw_spin_unlock+0x4f/0x220 [ 961.089625] p9_client_create+0x7ff/0x1230 [ 961.090481] ? p9_client_flush+0x430/0x430 [ 961.091333] ? trace_hardirqs_on+0x5b/0x180 [ 961.092213] ? lockdep_init_map_type+0x2c7/0x780 [ 961.093170] ? __raw_spin_lock_init+0x36/0x110 [ 961.094084] v9fs_session_init+0x1dd/0x1680 [ 961.094943] ? lock_release+0x680/0x680 [ 961.095744] ? kmem_cache_alloc_trace+0x151/0x320 [ 961.096708] ? v9fs_show_options+0x690/0x690 [ 961.097591] ? trace_hardirqs_on+0x5b/0x180 [ 961.098448] ? kasan_unpoison_shadow+0x33/0x50 [ 961.099348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 961.100365] v9fs_mount+0x79/0x8f0 [ 961.101068] ? v9fs_write_inode+0x60/0x60 [ 961.101891] legacy_get_tree+0x105/0x220 [ 961.102701] vfs_get_tree+0x8e/0x300 [ 961.103451] path_mount+0x1490/0x21e0 [ 961.104227] ? strncpy_from_user+0x9e/0x470 [ 961.105090] ? finish_automount+0xa90/0xa90 [ 961.105953] ? getname_flags.part.0+0x1dd/0x4f0 [ 961.106878] ? _copy_from_user+0xfb/0x1b0 [ 961.107712] __x64_sys_mount+0x282/0x300 [ 961.108532] ? copy_mnt_ns+0xa00/0xa00 [ 961.109307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 961.110355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 961.111383] do_syscall_64+0x33/0x40 [ 961.112131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 961.113163] RIP: 0033:0x7f2ae689eb19 [ 961.113911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 961.117554] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 961.119063] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 961.120467] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 961.121866] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 961.123279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 961.124686] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:24:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 19) [ 961.181313] FAULT_INJECTION: forcing a failure. [ 961.181313] name failslab, interval 1, probability 0, space 0, times 0 [ 961.183585] CPU: 0 PID: 7314 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 961.184907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 961.186484] Call Trace: [ 961.186990] dump_stack+0x107/0x167 [ 961.187687] should_fail.cold+0x5/0xa [ 961.188424] ? create_object.isra.0+0x3a/0xa30 [ 961.189300] should_failslab+0x5/0x20 [ 961.190029] kmem_cache_alloc+0x5b/0x310 [ 961.190805] create_object.isra.0+0x3a/0xa30 [ 961.191650] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 961.192630] __kmalloc_track_caller+0x177/0x370 [ 961.193514] ? v9fs_session_init+0xe9/0x1680 [ 961.194359] ? kernel_text_address+0xf2/0x120 [ 961.195216] kstrdup+0x36/0x70 [ 961.195834] v9fs_session_init+0xe9/0x1680 [ 961.196653] ? lock_release+0x680/0x680 [ 961.197408] ? find_held_lock+0x2c/0x110 [ 961.198186] ? kmem_cache_alloc_trace+0x151/0x320 [ 961.199106] ? v9fs_show_options+0x690/0x690 [ 961.199944] ? trace_hardirqs_on+0x5b/0x180 [ 961.200768] ? kasan_unpoison_shadow+0x33/0x50 [ 961.201627] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 961.202585] v9fs_mount+0x79/0x8f0 [ 961.203254] ? v9fs_write_inode+0x60/0x60 [ 961.204042] legacy_get_tree+0x105/0x220 [ 961.204821] vfs_get_tree+0x8e/0x300 [ 961.205524] path_mount+0x1490/0x21e0 [ 961.206255] ? strncpy_from_user+0x9e/0x470 [ 961.207072] ? finish_automount+0xa90/0xa90 [ 961.207872] ? getname_flags.part.0+0x1dd/0x4f0 [ 961.208763] ? _copy_from_user+0xfb/0x1b0 [ 961.209553] __x64_sys_mount+0x282/0x300 [ 961.210318] ? copy_mnt_ns+0xa00/0xa00 [ 961.211051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 961.212047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 961.213026] do_syscall_64+0x33/0x40 [ 961.213732] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 961.214698] RIP: 0033:0x7f5f5e955b19 [ 961.215407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 961.218908] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 961.220369] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 961.221707] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 961.223039] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 961.224382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 961.225723] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:24:20 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd", 0x38, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:24:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}]}}) 03:24:20 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 6) [ 961.287657] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 961.296326] FAULT_INJECTION: forcing a failure. [ 961.296326] name failslab, interval 1, probability 0, space 0, times 0 [ 961.298545] CPU: 0 PID: 7321 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 961.299791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 961.301315] Call Trace: [ 961.301804] dump_stack+0x107/0x167 [ 961.302473] should_fail.cold+0x5/0xa [ 961.303164] ? create_object.isra.0+0x3a/0xa30 [ 961.303989] should_failslab+0x5/0x20 [ 961.304682] kmem_cache_alloc+0x5b/0x310 [ 961.305418] ? inet_sk_rebuild_header+0x94/0x1b40 [ 961.306290] create_object.isra.0+0x3a/0xa30 [ 961.307077] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 961.307999] kmem_cache_alloc_node+0x169/0x330 [ 961.308848] __alloc_skb+0x6d/0x5b0 [ 961.309511] ? tcp_write_queue_purge+0x5a8/0x14b0 [ 961.310388] sk_stream_alloc_skb+0x109/0xc30 [ 961.311199] tcp_connect+0xdad/0x4690 [ 961.311926] ? __tcp_transmit_skb+0x36f0/0x36f0 [ 961.312769] ? mark_held_locks+0x9e/0xe0 [ 961.313526] ? kasan_unpoison_shadow+0x33/0x50 [ 961.314351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 961.315281] tcp_sendmsg_locked+0x25ef/0x2f30 [ 961.316113] ? tcp_sendmsg+0x1d/0x50 [ 961.316799] ? lock_downgrade+0x6d0/0x6d0 [ 961.317552] ? tcp_sendpage+0xd0/0xd0 [ 961.318243] ? mark_held_locks+0x9e/0xe0 [ 961.318986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 961.319933] ? __local_bh_enable_ip+0x9d/0x100 [ 961.320777] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 961.321621] tcp_sendmsg+0x2b/0x50 [ 961.322259] inet6_sendmsg+0xb5/0x140 [ 961.322929] ? inet6_compat_ioctl+0x320/0x320 [ 961.323724] __sock_sendmsg+0xf2/0x190 [ 961.324435] ____sys_sendmsg+0x70d/0x870 [ 961.325167] ? sock_write_iter+0x3d0/0x3d0 [ 961.325926] ? do_recvmmsg+0x6d0/0x6d0 [ 961.326623] ? perf_trace_lock+0x2bd/0x490 [ 961.327390] ? __lockdep_reset_lock+0x180/0x180 [ 961.328237] ___sys_sendmsg+0xf3/0x170 [ 961.328939] ? sendmsg_copy_msghdr+0x160/0x160 [ 961.329760] ? __fget_files+0x2cf/0x520 [ 961.330466] ? lock_downgrade+0x6d0/0x6d0 [ 961.331208] ? find_held_lock+0x2c/0x110 [ 961.331950] ? __fget_files+0x2f8/0x520 [ 961.332684] ? __fget_light+0xea/0x290 [ 961.333397] __sys_sendmsg+0xe5/0x1b0 [ 961.334078] ? __sys_sendmsg_sock+0x40/0x40 [ 961.334843] ? rcu_read_lock_any_held+0x75/0xa0 [ 961.335693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 961.336636] ? syscall_enter_from_user_mode+0x1d/0x50 [ 961.337547] ? trace_hardirqs_on+0x5b/0x180 [ 961.338327] do_syscall_64+0x33/0x40 [ 961.338991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 961.339897] RIP: 0033:0x7f5452beab19 [ 961.340568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 961.343805] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.345142] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 961.346400] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 961.347655] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 961.348915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.350163] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 03:24:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 7) 03:24:33 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 7) 03:24:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}]}}) 03:24:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 20) 03:24:33 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef", 0x3c, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:24:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 20) 03:24:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 28) 03:24:33 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}, {@access_uid}]}}) [ 974.551713] FAULT_INJECTION: forcing a failure. [ 974.551713] name failslab, interval 1, probability 0, space 0, times 0 [ 974.553054] FAULT_INJECTION: forcing a failure. [ 974.553054] name failslab, interval 1, probability 0, space 0, times 0 [ 974.554591] CPU: 1 PID: 7333 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 974.558839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.560834] Call Trace: [ 974.561488] dump_stack+0x107/0x167 [ 974.562380] should_fail.cold+0x5/0xa [ 974.563319] should_failslab+0x5/0x20 [ 974.564256] __kmalloc_node_track_caller+0x74/0x3b0 [ 974.565464] ? sk_stream_alloc_skb+0x109/0xc30 [ 974.566577] __alloc_skb+0xb1/0x5b0 [ 974.567474] sk_stream_alloc_skb+0x109/0xc30 [ 974.568559] tcp_connect+0xdad/0x4690 [ 974.569402] ? __tcp_transmit_skb+0x36f0/0x36f0 [ 974.570329] ? mark_held_locks+0x9e/0xe0 [ 974.571154] ? kasan_unpoison_shadow+0x33/0x50 [ 974.572096] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 974.573149] tcp_sendmsg_locked+0x25ef/0x2f30 [ 974.574064] ? tcp_sendmsg+0x1d/0x50 [ 974.574817] ? lock_downgrade+0x6d0/0x6d0 [ 974.575649] ? tcp_sendpage+0xd0/0xd0 [ 974.576439] ? mark_held_locks+0x9e/0xe0 [ 974.577262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 974.578304] ? __local_bh_enable_ip+0x9d/0x100 [ 974.579218] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 974.580167] tcp_sendmsg+0x2b/0x50 [ 974.580890] inet6_sendmsg+0xb5/0x140 [ 974.581650] ? inet6_compat_ioctl+0x320/0x320 [ 974.582549] __sock_sendmsg+0xf2/0x190 [ 974.583338] ____sys_sendmsg+0x70d/0x870 [ 974.584160] ? sock_write_iter+0x3d0/0x3d0 [ 974.585014] ? do_recvmmsg+0x6d0/0x6d0 [ 974.585801] ? lock_downgrade+0x6d0/0x6d0 [ 974.586640] ? __lockdep_reset_lock+0x180/0x180 [ 974.587578] ___sys_sendmsg+0xf3/0x170 [ 974.588382] ? sendmsg_copy_msghdr+0x160/0x160 [ 974.589307] ? __fget_files+0x2cf/0x520 [ 974.590112] ? lock_downgrade+0x6d0/0x6d0 [ 974.590954] ? find_held_lock+0x2c/0x110 [ 974.591784] ? __fget_files+0x2f8/0x520 [ 974.592600] ? __fget_light+0xea/0x290 [ 974.593392] __sys_sendmsg+0xe5/0x1b0 [ 974.594158] ? __sys_sendmsg_sock+0x40/0x40 [ 974.595017] ? rcu_read_lock_any_held+0x75/0xa0 [ 974.595977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 974.597050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 974.598071] ? trace_hardirqs_on+0x5b/0x180 [ 974.598952] do_syscall_64+0x33/0x40 [ 974.599703] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 974.600735] RIP: 0033:0x7f5452beab19 [ 974.601487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.605155] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.606718] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 974.608165] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 974.609630] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 974.611063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.612490] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 [ 974.613944] CPU: 0 PID: 7338 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 974.615456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.617258] Call Trace: [ 974.617833] dump_stack+0x107/0x167 [ 974.618617] should_fail.cold+0x5/0xa [ 974.619470] ? getname_flags.part.0+0x50/0x4f0 [ 974.620455] should_failslab+0x5/0x20 [ 974.621275] kmem_cache_alloc+0x5b/0x310 [ 974.622156] getname_flags.part.0+0x50/0x4f0 [ 974.623096] ? _copy_from_user+0xfb/0x1b0 [ 974.623992] FAULT_INJECTION: forcing a failure. [ 974.623992] name failslab, interval 1, probability 0, space 0, times 0 [ 974.624023] user_path_at_empty+0xa1/0x100 [ 974.627426] __x64_sys_mount+0x1e9/0x300 [ 974.628305] ? copy_mnt_ns+0xa00/0xa00 [ 974.629140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 974.630263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 974.631376] do_syscall_64+0x33/0x40 [ 974.632172] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 974.633267] RIP: 0033:0x7fd388488b19 [ 974.634066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.637962] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 974.639572] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 974.641101] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 974.642626] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 974.644142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.645666] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 974.647289] CPU: 1 PID: 7343 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 974.648708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.650359] Call Trace: [ 974.650899] dump_stack+0x107/0x167 [ 974.651684] should_fail.cold+0x5/0xa [ 974.652532] should_failslab+0x5/0x20 [ 974.653302] __kmalloc_track_caller+0x79/0x370 [ 974.654230] FAULT_INJECTION: forcing a failure. [ 974.654230] name failslab, interval 1, probability 0, space 0, times 0 [ 974.656516] ? v9fs_session_init+0xe9/0x1680 [ 974.657392] ? kernel_text_address+0xf2/0x120 [ 974.658291] kstrdup+0x36/0x70 [ 974.658933] v9fs_session_init+0xe9/0x1680 [ 974.659761] ? lock_release+0x680/0x680 [ 974.660566] ? find_held_lock+0x2c/0x110 [ 974.661427] ? kmem_cache_alloc_trace+0x151/0x320 [ 974.662432] ? v9fs_show_options+0x690/0x690 [ 974.663316] ? trace_hardirqs_on+0x5b/0x180 [ 974.664182] ? kasan_unpoison_shadow+0x33/0x50 [ 974.665125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 974.666145] v9fs_mount+0x79/0x8f0 [ 974.666846] ? v9fs_write_inode+0x60/0x60 [ 974.667699] legacy_get_tree+0x105/0x220 [ 974.668543] vfs_get_tree+0x8e/0x300 [ 974.669282] path_mount+0x1490/0x21e0 [ 974.670039] ? strncpy_from_user+0x9e/0x470 [ 974.670931] ? finish_automount+0xa90/0xa90 [ 974.671843] ? getname_flags.part.0+0x1dd/0x4f0 [ 974.672769] ? _copy_from_user+0xfb/0x1b0 [ 974.673613] __x64_sys_mount+0x282/0x300 [ 974.674416] ? copy_mnt_ns+0xa00/0xa00 [ 974.675203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 974.676271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 974.677355] do_syscall_64+0x33/0x40 [ 974.678106] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 974.679126] RIP: 0033:0x7fc6f0a40b19 [ 974.679866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.683627] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 974.685132] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 974.686569] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 974.688013] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 974.689461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.690893] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 974.692342] CPU: 0 PID: 7340 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 974.693820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.695613] Call Trace: [ 974.696176] dump_stack+0x107/0x167 [ 974.696950] should_fail.cold+0x5/0xa [ 974.697744] should_failslab+0x5/0x20 [ 974.698543] __kmalloc_track_caller+0x79/0x370 [ 974.699497] ? match_number+0xaf/0x1d0 [ 974.700080] FAULT_INJECTION: forcing a failure. [ 974.700080] name failslab, interval 1, probability 0, space 0, times 0 [ 974.700319] kmemdup_nul+0x2d/0xa0 [ 974.703206] match_number+0xaf/0x1d0 [ 974.703982] ? match_u64+0x190/0x190 [ 974.704766] ? __kmalloc_track_caller+0x2c6/0x370 [ 974.705783] ? memcpy+0x39/0x60 [ 974.706480] parse_opts.part.0+0x1f3/0x340 [ 974.707371] ? p9_fd_show_options+0x1c0/0x1c0 [ 974.708328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 974.709412] ? trace_hardirqs_on+0x5b/0x180 [ 974.710315] ? kfree+0xd7/0x340 [ 974.711005] p9_fd_create+0x98/0x4a0 [ 974.711783] ? p9_conn_create+0x510/0x510 [ 974.712661] ? p9_client_create+0x798/0x1230 [ 974.713589] ? kfree+0xd7/0x340 [ 974.714279] ? do_raw_spin_unlock+0x4f/0x220 [ 974.715212] p9_client_create+0x7ff/0x1230 [ 974.716109] ? p9_client_flush+0x430/0x430 [ 974.717003] ? trace_hardirqs_on+0x5b/0x180 [ 974.717908] ? lockdep_init_map_type+0x2c7/0x780 [ 974.718929] ? __raw_spin_lock_init+0x36/0x110 [ 974.720045] v9fs_session_init+0x1dd/0x1680 [ 974.721102] ? lock_release+0x680/0x680 [ 974.722080] ? kmem_cache_alloc_trace+0x151/0x320 [ 974.723250] ? v9fs_show_options+0x690/0x690 [ 974.724329] ? trace_hardirqs_on+0x5b/0x180 [ 974.725377] ? kasan_unpoison_shadow+0x33/0x50 [ 974.726472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 974.727707] v9fs_mount+0x79/0x8f0 [ 974.728575] ? v9fs_write_inode+0x60/0x60 [ 974.729567] legacy_get_tree+0x105/0x220 [ 974.730555] vfs_get_tree+0x8e/0x300 [ 974.731449] path_mount+0x1490/0x21e0 [ 974.732426] ? strncpy_from_user+0x9e/0x470 [ 974.733505] ? finish_automount+0xa90/0xa90 [ 974.734543] ? getname_flags.part.0+0x1dd/0x4f0 [ 974.735662] ? _copy_from_user+0xfb/0x1b0 [ 974.736709] __x64_sys_mount+0x282/0x300 [ 974.737720] ? copy_mnt_ns+0xa00/0xa00 [ 974.738665] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 974.739947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 974.741231] do_syscall_64+0x33/0x40 [ 974.742127] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 974.743416] RIP: 0033:0x7f2ae689eb19 [ 974.744326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.748834] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 974.750692] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 974.752435] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 974.754133] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 974.755912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.757620] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 974.759414] CPU: 1 PID: 7339 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 974.760824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.762512] Call Trace: [ 974.763046] dump_stack+0x107/0x167 [ 974.763822] should_fail.cold+0x5/0xa [ 974.764593] should_failslab+0x5/0x20 [ 974.765363] __kmalloc_track_caller+0x79/0x370 [ 974.766270] ? v9fs_session_init+0xe9/0x1680 [ 974.767164] ? kernel_text_address+0xf2/0x120 [ 974.768097] kstrdup+0x36/0x70 [ 974.768755] v9fs_session_init+0xe9/0x1680 [ 974.769613] ? lock_release+0x680/0x680 [ 974.770418] ? find_held_lock+0x2c/0x110 [ 974.771234] ? kmem_cache_alloc_trace+0x151/0x320 [ 974.772249] ? v9fs_show_options+0x690/0x690 [ 974.773186] ? trace_hardirqs_on+0x5b/0x180 [ 974.774055] ? kasan_unpoison_shadow+0x33/0x50 [ 974.775007] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 974.776077] v9fs_mount+0x79/0x8f0 [ 974.776810] ? v9fs_write_inode+0x60/0x60 [ 974.777653] legacy_get_tree+0x105/0x220 [ 974.778610] vfs_get_tree+0x8e/0x300 [ 974.779381] path_mount+0x1490/0x21e0 [ 974.780185] ? strncpy_from_user+0x9e/0x470 [ 974.781084] ? finish_automount+0xa90/0xa90 [ 974.781953] ? getname_flags.part.0+0x1dd/0x4f0 [ 974.782874] ? _copy_from_user+0xfb/0x1b0 [ 974.783747] __x64_sys_mount+0x282/0x300 [ 974.784611] ? copy_mnt_ns+0xa00/0xa00 [ 974.785406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 974.786462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 974.787541] do_syscall_64+0x33/0x40 [ 974.788299] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 974.789340] RIP: 0033:0x7f5f5e955b19 [ 974.790085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.793796] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 974.795302] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 974.796816] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 974.798236] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 974.799703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.801187] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 974.808360] 9pnet: Insufficient options for proto=fd [ 974.849756] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:24:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 21) 03:24:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}]}}) 03:24:48 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef", 0x3c, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:24:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 29) 03:24:48 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 8) 03:24:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 21) [ 990.135026] FAULT_INJECTION: forcing a failure. [ 990.135026] name failslab, interval 1, probability 0, space 0, times 0 [ 990.137449] CPU: 0 PID: 7359 Comm: syz-executor.3 Not tainted 5.10.244 #1 03:24:48 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 8) 03:24:48 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}, {@nodevmap}]}}) [ 990.138877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.140744] Call Trace: [ 990.141306] dump_stack+0x107/0x167 [ 990.142079] should_fail.cold+0x5/0xa [ 990.142883] ? create_object.isra.0+0x3a/0xa30 [ 990.143847] should_failslab+0x5/0x20 [ 990.144659] kmem_cache_alloc+0x5b/0x310 [ 990.145518] ? kernel_text_address+0xf2/0x120 [ 990.146468] create_object.isra.0+0x3a/0xa30 [ 990.146493] FAULT_INJECTION: forcing a failure. [ 990.146493] name failslab, interval 1, probability 0, space 0, times 0 [ 990.149704] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.150781] kmem_cache_alloc_trace+0x151/0x320 [ 990.151757] ? find_held_lock+0x2c/0x110 [ 990.152629] p9_client_create+0xaf/0x1230 [ 990.153501] ? lock_downgrade+0x6d0/0x6d0 [ 990.154382] ? p9_client_flush+0x430/0x430 [ 990.155275] ? trace_hardirqs_on+0x5b/0x180 [ 990.156183] ? lockdep_init_map_type+0x2c7/0x780 [ 990.157192] ? __raw_spin_lock_init+0x36/0x110 [ 990.158156] v9fs_session_init+0x1dd/0x1680 [ 990.159075] ? kmem_cache_alloc_trace+0x151/0x320 [ 990.160089] ? v9fs_show_options+0x690/0x690 [ 990.161039] ? trace_hardirqs_on+0x5b/0x180 [ 990.161946] ? kasan_unpoison_shadow+0x33/0x50 [ 990.162906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.163974] v9fs_mount+0x79/0x8f0 [ 990.164733] ? v9fs_write_inode+0x60/0x60 [ 990.165602] legacy_get_tree+0x105/0x220 [ 990.166464] vfs_get_tree+0x8e/0x300 [ 990.167246] path_mount+0x1490/0x21e0 [ 990.168053] ? strncpy_from_user+0x9e/0x470 [ 990.168970] ? finish_automount+0xa90/0xa90 [ 990.169875] ? getname_flags.part.0+0x1dd/0x4f0 [ 990.170850] ? _copy_from_user+0xfb/0x1b0 [ 990.171726] __x64_sys_mount+0x282/0x300 [ 990.172585] ? copy_mnt_ns+0xa00/0xa00 [ 990.173394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.174480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.175549] do_syscall_64+0x33/0x40 [ 990.176327] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.177406] RIP: 0033:0x7f5f5e955b19 [ 990.178178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.182001] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.183579] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 990.185068] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 990.186561] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 990.188057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.189548] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 990.191079] CPU: 1 PID: 7354 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 990.192686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.194415] Call Trace: [ 990.194979] dump_stack+0x107/0x167 [ 990.195736] should_fail.cold+0x5/0xa [ 990.196540] ? create_object.isra.0+0x3a/0xa30 [ 990.197511] should_failslab+0x5/0x20 [ 990.198303] kmem_cache_alloc+0x5b/0x310 [ 990.199155] ? kernel_text_address+0xf2/0x120 [ 990.200092] create_object.isra.0+0x3a/0xa30 [ 990.200656] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 990.201026] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.201054] kmem_cache_alloc_trace+0x151/0x320 [ 990.201072] ? find_held_lock+0x2c/0x110 [ 990.201102] p9_client_create+0xaf/0x1230 [ 990.206664] ? lock_downgrade+0x6d0/0x6d0 [ 990.207535] ? p9_client_flush+0x430/0x430 [ 990.208445] ? trace_hardirqs_on+0x5b/0x180 [ 990.209350] ? lockdep_init_map_type+0x2c7/0x780 [ 990.210341] ? __raw_spin_lock_init+0x36/0x110 [ 990.211320] v9fs_session_init+0x1dd/0x1680 [ 990.212229] ? lock_release+0x680/0x680 [ 990.213081] ? kmem_cache_alloc_trace+0x151/0x320 [ 990.214079] ? v9fs_show_options+0x690/0x690 [ 990.215044] ? trace_hardirqs_on+0x5b/0x180 [ 990.215947] ? kasan_unpoison_shadow+0x33/0x50 [ 990.216910] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.217969] v9fs_mount+0x79/0x8f0 [ 990.218714] ? v9fs_write_inode+0x60/0x60 [ 990.219595] legacy_get_tree+0x105/0x220 [ 990.220451] vfs_get_tree+0x8e/0x300 [ 990.221219] path_mount+0x1490/0x21e0 [ 990.222022] ? strncpy_from_user+0x9e/0x470 [ 990.222924] ? finish_automount+0xa90/0xa90 [ 990.223824] ? getname_flags.part.0+0x1dd/0x4f0 [ 990.224798] ? _copy_from_user+0xfb/0x1b0 [ 990.225672] __x64_sys_mount+0x282/0x300 [ 990.226521] ? copy_mnt_ns+0xa00/0xa00 [ 990.227336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.228486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.229792] do_syscall_64+0x33/0x40 [ 990.230728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.231821] RIP: 0033:0x7fc6f0a40b19 [ 990.232616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.236522] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.238152] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 990.239658] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 990.241178] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 990.242696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.244195] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 990.262549] FAULT_INJECTION: forcing a failure. [ 990.262549] name failslab, interval 1, probability 0, space 0, times 0 [ 990.265084] CPU: 1 PID: 7366 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 990.266509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.268268] Call Trace: [ 990.268836] dump_stack+0x107/0x167 [ 990.269604] should_fail.cold+0x5/0xa [ 990.270401] ? create_object.isra.0+0x3a/0xa30 [ 990.271361] should_failslab+0x5/0x20 [ 990.272156] kmem_cache_alloc+0x5b/0x310 [ 990.273028] create_object.isra.0+0x3a/0xa30 [ 990.273971] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.275022] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 990.276078] ? sk_stream_alloc_skb+0x109/0xc30 [ 990.277049] __alloc_skb+0xb1/0x5b0 [ 990.277811] sk_stream_alloc_skb+0x109/0xc30 [ 990.278730] tcp_connect+0xdad/0x4690 [ 990.279572] ? __tcp_transmit_skb+0x36f0/0x36f0 [ 990.280556] ? mark_held_locks+0x9e/0xe0 [ 990.281432] ? kasan_unpoison_shadow+0x33/0x50 [ 990.282383] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.283457] tcp_sendmsg_locked+0x25ef/0x2f30 [ 990.284415] ? tcp_sendmsg+0x1d/0x50 [ 990.285200] ? lock_downgrade+0x6d0/0x6d0 [ 990.286068] ? tcp_sendpage+0xd0/0xd0 [ 990.286863] ? mark_held_locks+0x9e/0xe0 [ 990.287716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.288806] ? __local_bh_enable_ip+0x9d/0x100 [ 990.289758] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 990.290851] tcp_sendmsg+0x2b/0x50 [ 990.291596] inet6_sendmsg+0xb5/0x140 [ 990.292412] ? inet6_compat_ioctl+0x320/0x320 [ 990.293340] __sock_sendmsg+0xf2/0x190 [ 990.294162] ____sys_sendmsg+0x70d/0x870 [ 990.295019] ? sock_write_iter+0x3d0/0x3d0 [ 990.295909] ? do_recvmmsg+0x6d0/0x6d0 [ 990.296735] ? lock_downgrade+0x6d0/0x6d0 [ 990.297606] ? __lockdep_reset_lock+0x180/0x180 [ 990.298586] ___sys_sendmsg+0xf3/0x170 [ 990.299403] ? sendmsg_copy_msghdr+0x160/0x160 [ 990.300365] ? __fget_files+0x2cf/0x520 [ 990.301210] ? lock_downgrade+0x6d0/0x6d0 [ 990.302075] ? find_held_lock+0x2c/0x110 [ 990.302934] ? __fget_files+0x2f8/0x520 [ 990.303777] ? __fget_light+0xea/0x290 [ 990.304634] __sys_sendmsg+0xe5/0x1b0 [ 990.305446] ? __sys_sendmsg_sock+0x40/0x40 [ 990.306350] ? rcu_read_lock_any_held+0x75/0xa0 [ 990.307349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.308460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.309555] ? trace_hardirqs_on+0x5b/0x180 [ 990.310457] do_syscall_64+0x33/0x40 [ 990.311250] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.312326] RIP: 0033:0x7f5452beab19 [ 990.313123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.317011] RSP: 002b:00007f545013f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.318614] RAX: ffffffffffffffda RBX: 00007f5452cfe020 RCX: 00007f5452beab19 [ 990.320120] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 990.321633] RBP: 00007f545013f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.323135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.324600] FAULT_INJECTION: forcing a failure. [ 990.324600] name failslab, interval 1, probability 0, space 0, times 0 [ 990.324648] R13: 00007ffff492e7cf R14: 00007f545013f300 R15: 0000000000022000 [ 990.328760] CPU: 0 PID: 7368 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 990.330187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.331915] Call Trace: [ 990.332479] dump_stack+0x107/0x167 [ 990.333241] should_fail.cold+0x5/0xa [ 990.334041] ? create_object.isra.0+0x3a/0xa30 [ 990.334996] should_failslab+0x5/0x20 [ 990.335789] kmem_cache_alloc+0x5b/0x310 [ 990.336647] create_object.isra.0+0x3a/0xa30 [ 990.337565] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.338638] kmem_cache_alloc+0x159/0x310 [ 990.339510] getname_flags.part.0+0x50/0x4f0 [ 990.340435] ? _copy_from_user+0xfb/0x1b0 [ 990.341315] user_path_at_empty+0xa1/0x100 [ 990.342204] __x64_sys_mount+0x1e9/0x300 [ 990.343051] ? copy_mnt_ns+0xa00/0xa00 [ 990.343869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.344980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.346064] do_syscall_64+0x33/0x40 [ 990.346842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.347913] RIP: 0033:0x7fd388488b19 [ 990.348704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.352564] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.354156] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 990.355639] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 990.357149] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 990.358637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.360131] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 990.371193] FAULT_INJECTION: forcing a failure. [ 990.371193] name failslab, interval 1, probability 0, space 0, times 0 [ 990.373557] CPU: 0 PID: 7371 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 990.375013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.376759] Call Trace: [ 990.377313] dump_stack+0x107/0x167 [ 990.378083] should_fail.cold+0x5/0xa [ 990.378885] ? create_object.isra.0+0x3a/0xa30 [ 990.379842] should_failslab+0x5/0x20 [ 990.380650] kmem_cache_alloc+0x5b/0x310 [ 990.381515] create_object.isra.0+0x3a/0xa30 [ 990.382448] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.383514] __kmalloc_track_caller+0x177/0x370 [ 990.384492] ? match_number+0xaf/0x1d0 [ 990.385313] kmemdup_nul+0x2d/0xa0 [ 990.386058] match_number+0xaf/0x1d0 [ 990.386842] ? match_u64+0x190/0x190 [ 990.387620] ? __kmalloc_track_caller+0x2c6/0x370 [ 990.388631] ? memcpy+0x39/0x60 [ 990.389329] parse_opts.part.0+0x1f3/0x340 [ 990.390223] ? p9_fd_show_options+0x1c0/0x1c0 [ 990.391168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.392262] ? trace_hardirqs_on+0x5b/0x180 [ 990.393182] ? kfree+0xd7/0x340 [ 990.393884] p9_fd_create+0x98/0x4a0 [ 990.394664] ? p9_conn_create+0x510/0x510 [ 990.395528] ? p9_client_create+0x798/0x1230 [ 990.396453] ? kfree+0xd7/0x340 [ 990.397144] ? do_raw_spin_unlock+0x4f/0x220 [ 990.398074] p9_client_create+0x7ff/0x1230 [ 990.398969] ? p9_client_flush+0x430/0x430 [ 990.399849] ? trace_hardirqs_on+0x5b/0x180 [ 990.400756] ? lockdep_init_map_type+0x2c7/0x780 [ 990.401747] ? __raw_spin_lock_init+0x36/0x110 [ 990.402705] v9fs_session_init+0x1dd/0x1680 [ 990.403604] ? lock_release+0x680/0x680 [ 990.404459] ? kmem_cache_alloc_trace+0x151/0x320 [ 990.405462] ? v9fs_show_options+0x690/0x690 [ 990.406389] ? trace_hardirqs_on+0x5b/0x180 [ 990.407291] ? kasan_unpoison_shadow+0x33/0x50 [ 990.408237] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.409304] v9fs_mount+0x79/0x8f0 [ 990.410047] ? v9fs_write_inode+0x60/0x60 [ 990.410909] legacy_get_tree+0x105/0x220 [ 990.411756] vfs_get_tree+0x8e/0x300 [ 990.412559] path_mount+0x1490/0x21e0 [ 990.413361] ? strncpy_from_user+0x9e/0x470 [ 990.414263] ? finish_automount+0xa90/0xa90 [ 990.415163] ? getname_flags.part.0+0x1dd/0x4f0 [ 990.416128] ? _copy_from_user+0xfb/0x1b0 [ 990.417020] __x64_sys_mount+0x282/0x300 [ 990.417858] ? copy_mnt_ns+0xa00/0xa00 [ 990.418673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.419773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.420864] do_syscall_64+0x33/0x40 [ 990.421643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.422708] RIP: 0033:0x7f2ae689eb19 [ 990.423483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.427317] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.428915] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 990.430402] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 990.431883] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 990.433378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.434860] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:24:49 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef", 0x3c, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 990.551560] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:24:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}]}}) 03:24:49 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}, {@access_user}]}}) 03:24:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 22) 03:24:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 22) 03:24:49 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7", 0x3e, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="17d8890007000000f05defc71402a8937adf1ee343ff0400a39d47735d31931898763772790000000000001b50c76b1069b134c4c27b05ac57286cb12984515ecdf8cabc3a9e9502375c6b9efe87aa35fd2e485fe34c0198998a4800253bc0270dcd41e817c9cb28b2cd5feadfbe6f90d27abb068c93be4d6af17548031f03e68ff0f79ac9257b019967e10a83f1e1d5270d35f89531470ef4844404000000000000c50900009d7e8455e26fb0d7a24f9a02da0a7039d40358b0a9fec1accc6e2272c87f93867ec21b5c42b9a848f823c9cc0f8e9e259a20b82cd0024053ff71a4c618629c4814f3a966670cd44c1dbda3098d936b8d4aae73d0a073837b6a8749827dcdfe9c68366b3f368af1bd1ab4917ab7007f2107058f93ca73a970b8b46f7421354eefe706c8f83f801a308f257a93380cc2"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 990.702292] FAULT_INJECTION: forcing a failure. [ 990.702292] name failslab, interval 1, probability 0, space 0, times 0 [ 990.704532] CPU: 0 PID: 7382 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 990.705839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.707423] Call Trace: [ 990.707928] dump_stack+0x107/0x167 [ 990.708628] should_fail.cold+0x5/0xa [ 990.709346] should_failslab+0x5/0x20 [ 990.710063] __kmalloc_track_caller+0x79/0x370 [ 990.710927] ? p9_client_create+0x41d/0x1230 [ 990.711763] kstrdup+0x36/0x70 [ 990.712371] p9_client_create+0x41d/0x1230 [ 990.713178] ? lock_downgrade+0x6d0/0x6d0 [ 990.713966] ? p9_client_flush+0x430/0x430 [ 990.714770] ? trace_hardirqs_on+0x5b/0x180 [ 990.715583] ? lockdep_init_map_type+0x2c7/0x780 [ 990.716512] ? __raw_spin_lock_init+0x36/0x110 [ 990.717380] v9fs_session_init+0x1dd/0x1680 [ 990.718194] ? lock_release+0x680/0x680 [ 990.718950] ? kmem_cache_alloc_trace+0x151/0x320 [ 990.719865] ? v9fs_show_options+0x690/0x690 [ 990.720710] ? trace_hardirqs_on+0x5b/0x180 [ 990.721514] ? kasan_unpoison_shadow+0x33/0x50 [ 990.722362] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.723307] v9fs_mount+0x79/0x8f0 [ 990.723971] ? v9fs_write_inode+0x60/0x60 [ 990.724755] legacy_get_tree+0x105/0x220 [ 990.725508] vfs_get_tree+0x8e/0x300 [ 990.726206] path_mount+0x1490/0x21e0 [ 990.726919] ? strncpy_from_user+0x9e/0x470 [ 990.727717] ? finish_automount+0xa90/0xa90 [ 990.728524] ? getname_flags.part.0+0x1dd/0x4f0 [ 990.729385] ? _copy_from_user+0xfb/0x1b0 [ 990.730162] __x64_sys_mount+0x282/0x300 [ 990.730918] ? copy_mnt_ns+0xa00/0xa00 [ 990.731643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.732630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.733598] do_syscall_64+0x33/0x40 [ 990.734289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.735254] RIP: 0033:0x7f5f5e955b19 [ 990.735944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.739391] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.740822] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 990.742144] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 990.743460] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 990.744781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.746106] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:24:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 30) [ 990.777430] FAULT_INJECTION: forcing a failure. [ 990.777430] name failslab, interval 1, probability 0, space 0, times 0 [ 990.779948] CPU: 1 PID: 7387 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 990.781384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.783129] Call Trace: [ 990.783685] dump_stack+0x107/0x167 [ 990.784460] should_fail.cold+0x5/0xa [ 990.785274] should_failslab+0x5/0x20 [ 990.786069] __kmalloc_track_caller+0x79/0x370 [ 990.787018] ? p9_client_create+0x41d/0x1230 [ 990.787940] kstrdup+0x36/0x70 [ 990.788606] p9_client_create+0x41d/0x1230 [ 990.789491] ? lock_downgrade+0x6d0/0x6d0 [ 990.790369] ? p9_client_flush+0x430/0x430 [ 990.791253] ? trace_hardirqs_on+0x5b/0x180 [ 990.792146] ? lockdep_init_map_type+0x2c7/0x780 [ 990.793141] ? __raw_spin_lock_init+0x36/0x110 [ 990.794095] v9fs_session_init+0x1dd/0x1680 [ 990.794989] ? lock_release+0x680/0x680 [ 990.795834] ? kmem_cache_alloc_trace+0x151/0x320 [ 990.796863] ? v9fs_show_options+0x690/0x690 [ 990.797780] ? trace_hardirqs_on+0x5b/0x180 [ 990.798681] ? kasan_unpoison_shadow+0x33/0x50 [ 990.799634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.800716] v9fs_mount+0x79/0x8f0 [ 990.801461] ? v9fs_write_inode+0x60/0x60 [ 990.802329] legacy_get_tree+0x105/0x220 [ 990.803182] vfs_get_tree+0x8e/0x300 [ 990.803961] path_mount+0x1490/0x21e0 [ 990.804778] ? strncpy_from_user+0x9e/0x470 [ 990.805683] ? finish_automount+0xa90/0xa90 [ 990.806580] ? getname_flags.part.0+0x1dd/0x4f0 [ 990.807548] ? _copy_from_user+0xfb/0x1b0 [ 990.808451] __x64_sys_mount+0x282/0x300 [ 990.809298] ? copy_mnt_ns+0xa00/0xa00 [ 990.810115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.811223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.812309] do_syscall_64+0x33/0x40 [ 990.813095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.814172] RIP: 0033:0x7fc6f0a40b19 [ 990.814953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.818798] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.820384] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 990.821891] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 990.823387] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 990.824878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.826387] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 990.845384] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:24:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:24:49 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 9) 03:24:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 23) [ 990.939288] FAULT_INJECTION: forcing a failure. [ 990.939288] name failslab, interval 1, probability 0, space 0, times 0 [ 990.941695] CPU: 1 PID: 7392 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 990.943130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.944847] Call Trace: [ 990.945397] dump_stack+0x107/0x167 [ 990.946153] should_fail.cold+0x5/0xa [ 990.946947] should_failslab+0x5/0x20 [ 990.947732] __kmalloc_track_caller+0x79/0x370 [ 990.948684] ? match_number+0xaf/0x1d0 [ 990.949498] ? kfree+0xd7/0x340 [ 990.950192] kmemdup_nul+0x2d/0xa0 [ 990.950929] match_number+0xaf/0x1d0 [ 990.951698] ? match_u64+0x190/0x190 [ 990.952488] ? __kmalloc_track_caller+0x2c6/0x370 [ 990.953492] ? memcpy+0x39/0x60 [ 990.954175] parse_opts.part.0+0x1f3/0x340 [ 990.955048] ? p9_fd_show_options+0x1c0/0x1c0 [ 990.955983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.957068] ? trace_hardirqs_on+0x5b/0x180 [ 990.957961] ? kfree+0xd7/0x340 [ 990.958650] p9_fd_create+0x98/0x4a0 [ 990.959418] ? p9_conn_create+0x510/0x510 [ 990.960271] ? p9_client_create+0x798/0x1230 [ 990.961194] ? kfree+0xd7/0x340 [ 990.961871] ? do_raw_spin_unlock+0x4f/0x220 [ 990.962785] p9_client_create+0x7ff/0x1230 [ 990.963666] ? p9_client_flush+0x430/0x430 [ 990.964551] ? trace_hardirqs_on+0x5b/0x180 [ 990.965447] ? lockdep_init_map_type+0x2c7/0x780 [ 990.966425] ? __raw_spin_lock_init+0x36/0x110 [ 990.967379] v9fs_session_init+0x1dd/0x1680 [ 990.968269] ? lock_release+0x680/0x680 [ 990.969105] ? kmem_cache_alloc_trace+0x151/0x320 [ 990.970090] ? v9fs_show_options+0x690/0x690 [ 990.971004] ? trace_hardirqs_on+0x5b/0x180 [ 990.971900] ? kasan_unpoison_shadow+0x33/0x50 [ 990.972848] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.973901] v9fs_mount+0x79/0x8f0 [ 990.974635] ? v9fs_write_inode+0x60/0x60 [ 990.975493] legacy_get_tree+0x105/0x220 [ 990.976331] vfs_get_tree+0x8e/0x300 [ 990.977110] path_mount+0x1490/0x21e0 [ 990.977899] ? strncpy_from_user+0x9e/0x470 [ 990.978787] ? finish_automount+0xa90/0xa90 [ 990.979676] ? getname_flags.part.0+0x1dd/0x4f0 [ 990.980638] ? _copy_from_user+0xfb/0x1b0 [ 990.981496] __x64_sys_mount+0x282/0x300 [ 990.982329] ? copy_mnt_ns+0xa00/0xa00 [ 990.983124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.984197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.985263] do_syscall_64+0x33/0x40 [ 990.986023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.987071] RIP: 0033:0x7f2ae689eb19 [ 990.987827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.991594] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 990.993153] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 990.994620] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 990.996066] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 990.997523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.998963] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 991.000576] 9pnet: Insufficient options for proto=fd [ 991.014789] FAULT_INJECTION: forcing a failure. [ 991.014789] name failslab, interval 1, probability 0, space 0, times 0 [ 991.016589] CPU: 0 PID: 7397 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 991.017625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.018900] Call Trace: [ 991.019310] dump_stack+0x107/0x167 [ 991.019871] should_fail.cold+0x5/0xa [ 991.020482] ? create_object.isra.0+0x3a/0xa30 [ 991.021210] should_failslab+0x5/0x20 [ 991.021833] kmem_cache_alloc+0x5b/0x310 [ 991.022487] ? lock_downgrade+0x6d0/0x6d0 [ 991.023155] create_object.isra.0+0x3a/0xa30 [ 991.023809] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.024623] __kmalloc_track_caller+0x177/0x370 [ 991.025324] ? p9_client_create+0x41d/0x1230 [ 991.025995] kstrdup+0x36/0x70 [ 991.026481] p9_client_create+0x41d/0x1230 [ 991.027135] ? lock_downgrade+0x6d0/0x6d0 [ 991.027791] ? p9_client_flush+0x430/0x430 [ 991.028462] ? trace_hardirqs_on+0x5b/0x180 [ 991.029159] ? lockdep_init_map_type+0x2c7/0x780 [ 991.029905] ? __raw_spin_lock_init+0x36/0x110 [ 991.030625] v9fs_session_init+0x1dd/0x1680 [ 991.031276] ? lock_release+0x680/0x680 [ 991.031892] ? kmem_cache_alloc_trace+0x151/0x320 [ 991.032658] ? v9fs_show_options+0x690/0x690 [ 991.033338] ? trace_hardirqs_on+0x5b/0x180 [ 991.034028] ? kasan_unpoison_shadow+0x33/0x50 [ 991.034748] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.035525] v9fs_mount+0x79/0x8f0 [ 991.036085] ? v9fs_write_inode+0x60/0x60 [ 991.036756] legacy_get_tree+0x105/0x220 [ 991.037368] vfs_get_tree+0x8e/0x300 [ 991.037939] path_mount+0x1490/0x21e0 [ 991.038511] ? strncpy_from_user+0x9e/0x470 [ 991.039196] ? finish_automount+0xa90/0xa90 [ 991.039859] ? getname_flags.part.0+0x1dd/0x4f0 [ 991.040556] ? _copy_from_user+0xfb/0x1b0 [ 991.041211] __x64_sys_mount+0x282/0x300 [ 991.041850] ? copy_mnt_ns+0xa00/0xa00 [ 991.042458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.043270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.044050] do_syscall_64+0x33/0x40 [ 991.044653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.045434] RIP: 0033:0x7fc6f0a40b19 [ 991.046021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 991.048784] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 991.049951] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 991.051031] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 991.052096] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 991.053169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 991.054236] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:24:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 23) 03:24:49 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 9) 03:24:49 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_fscache}]}}) 03:24:49 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7", 0x3e, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="17d8890007000000f05defc71402a8937adf1ee343ff0400a39d47735d31931898763772790000000000001b50c76b1069b134c4c27b05ac57286cb12984515ecdf8cabc3a9e9502375c6b9efe87aa35fd2e485fe34c0198998a4800253bc0270dcd41e817c9cb28b2cd5feadfbe6f90d27abb068c93be4d6af17548031f03e68ff0f79ac9257b019967e10a83f1e1d5270d35f89531470ef4844404000000000000c50900009d7e8455e26fb0d7a24f9a02da0a7039d40358b0a9fec1accc6e2272c87f93867ec21b5c42b9a848f823c9cc0f8e9e259a20b82cd0024053ff71a4c618629c4814f3a966670cd44c1dbda3098d936b8d4aae73d0a073837b6a8749827dcdfe9c68366b3f368af1bd1ab4917ab7007f2107058f93ca73a970b8b46f7421354eefe706c8f83f801a308f257a93380cc2"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 991.071638] FAULT_INJECTION: forcing a failure. [ 991.071638] name failslab, interval 1, probability 0, space 0, times 0 [ 991.073940] CPU: 1 PID: 7401 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 991.075306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.076944] Call Trace: [ 991.077474] dump_stack+0x107/0x167 [ 991.078192] should_fail.cold+0x5/0xa [ 991.078944] ? __alloc_skb+0x6d/0x5b0 [ 991.079695] should_failslab+0x5/0x20 [ 991.079860] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 991.080451] kmem_cache_alloc_node+0x55/0x330 [ 991.080468] ? tcp_fastopen_cache_get+0x2e5/0x650 [ 991.080491] __alloc_skb+0x6d/0x5b0 [ 991.084343] sk_stream_alloc_skb+0x109/0xc30 [ 991.085220] tcp_connect+0x1a3c/0x4690 [ 991.085993] ? __tcp_transmit_skb+0x36f0/0x36f0 [ 991.086902] ? mark_held_locks+0x9e/0xe0 [ 991.087712] ? kasan_unpoison_shadow+0x33/0x50 [ 991.088619] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.089620] tcp_sendmsg_locked+0x25ef/0x2f30 [ 991.090511] ? tcp_sendmsg+0x1d/0x50 [ 991.091256] ? lock_downgrade+0x6d0/0x6d0 [ 991.092067] ? tcp_sendpage+0xd0/0xd0 [ 991.092822] ? mark_held_locks+0x9e/0xe0 [ 991.093625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.094661] ? __local_bh_enable_ip+0x9d/0x100 [ 991.095568] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 991.096487] tcp_sendmsg+0x2b/0x50 [ 991.097199] inet6_sendmsg+0xb5/0x140 [ 991.097943] ? inet6_compat_ioctl+0x320/0x320 [ 991.098809] __sock_sendmsg+0xf2/0x190 [ 991.099594] ____sys_sendmsg+0x70d/0x870 [ 991.100398] ? sock_write_iter+0x3d0/0x3d0 [ 991.101242] ? do_recvmmsg+0x6d0/0x6d0 [ 991.102006] ? lock_downgrade+0x6d0/0x6d0 [ 991.102825] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 991.103859] ___sys_sendmsg+0xf3/0x170 [ 991.104631] ? sendmsg_copy_msghdr+0x160/0x160 [ 991.105527] ? __fget_files+0x2cf/0x520 [ 991.106314] ? lock_downgrade+0x6d0/0x6d0 [ 991.107124] ? find_held_lock+0x2c/0x110 [ 991.107922] ? __fget_files+0x2f8/0x520 [ 991.108722] ? __fget_light+0xea/0x290 [ 991.109492] __sys_sendmsg+0xe5/0x1b0 [ 991.110232] ? __sys_sendmsg_sock+0x40/0x40 [ 991.111079] ? rcu_read_lock_any_held+0x75/0xa0 [ 991.112003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.113046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.114059] ? trace_hardirqs_on+0x5b/0x180 [ 991.114899] do_syscall_64+0x33/0x40 [ 991.115634] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.116635] RIP: 0033:0x7f5452beab19 [ 991.117371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 991.120914] RSP: 002b:00007f545013f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 991.122373] RAX: ffffffffffffffda RBX: 00007f5452cfe020 RCX: 00007f5452beab19 [ 991.123753] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 991.125147] RBP: 00007f545013f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 991.126526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.127893] R13: 00007ffff492e7cf R14: 00007f545013f300 R15: 0000000000022000 [ 991.132808] FAULT_INJECTION: forcing a failure. [ 991.132808] name failslab, interval 1, probability 0, space 0, times 0 [ 991.134995] CPU: 1 PID: 7399 Comm: syz-executor.6 Not tainted 5.10.244 #1 03:24:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 31) [ 991.136310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.138141] Call Trace: [ 991.138644] dump_stack+0x107/0x167 [ 991.139351] should_fail.cold+0x5/0xa [ 991.140078] ? create_object.isra.0+0x3a/0xa30 [ 991.140951] should_failslab+0x5/0x20 [ 991.141683] kmem_cache_alloc+0x5b/0x310 [ 991.142461] create_object.isra.0+0x3a/0xa30 [ 991.143303] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.144266] kmem_cache_alloc+0x159/0x310 [ 991.145072] getname_flags.part.0+0x50/0x4f0 [ 991.145917] ? _copy_from_user+0xfb/0x1b0 [ 991.146720] user_path_at_empty+0xa1/0x100 [ 991.147529] __x64_sys_mount+0x1e9/0x300 [ 991.148309] ? copy_mnt_ns+0xa00/0xa00 [ 991.149070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.150075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.151060] do_syscall_64+0x33/0x40 [ 991.151796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.152786] RIP: 0033:0x7fd388488b19 [ 991.153497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 991.157023] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 991.158485] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 991.159845] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 991.161210] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 991.162554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.163918] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 991.166308] FAULT_INJECTION: forcing a failure. [ 991.166308] name failslab, interval 1, probability 0, space 0, times 0 [ 991.168471] CPU: 1 PID: 7405 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 991.169776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.171367] Call Trace: [ 991.171869] dump_stack+0x107/0x167 [ 991.172571] should_fail.cold+0x5/0xa [ 991.173296] ? create_object.isra.0+0x3a/0xa30 [ 991.174157] should_failslab+0x5/0x20 [ 991.174882] kmem_cache_alloc+0x5b/0x310 [ 991.175657] ? kernel_text_address+0xf2/0x120 [ 991.176519] create_object.isra.0+0x3a/0xa30 [ 991.177356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.178334] kmem_cache_alloc_trace+0x151/0x320 [ 991.179208] ? find_held_lock+0x2c/0x110 [ 991.179982] p9_client_create+0xaf/0x1230 [ 991.180773] ? lock_downgrade+0x6d0/0x6d0 [ 991.181561] ? p9_client_flush+0x430/0x430 [ 991.182364] ? trace_hardirqs_on+0x5b/0x180 [ 991.183170] ? lockdep_init_map_type+0x2c7/0x780 [ 991.184069] ? __raw_spin_lock_init+0x36/0x110 [ 991.184946] v9fs_session_init+0x1dd/0x1680 [ 991.185762] ? lock_release+0x680/0x680 [ 991.186511] ? kmem_cache_alloc_trace+0x151/0x320 [ 991.187422] ? v9fs_show_options+0x690/0x690 [ 991.188258] ? trace_hardirqs_on+0x5b/0x180 [ 991.189081] ? kasan_unpoison_shadow+0x33/0x50 [ 991.189943] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.190884] v9fs_mount+0x79/0x8f0 [ 991.191547] ? v9fs_write_inode+0x60/0x60 [ 991.192324] legacy_get_tree+0x105/0x220 [ 991.193097] vfs_get_tree+0x8e/0x300 [ 991.193793] path_mount+0x1490/0x21e0 [ 991.194524] ? strncpy_from_user+0x9e/0x470 [ 991.195336] ? finish_automount+0xa90/0xa90 [ 991.196148] ? getname_flags.part.0+0x1dd/0x4f0 [ 991.197030] ? _copy_from_user+0xfb/0x1b0 [ 991.197808] __x64_sys_mount+0x282/0x300 [ 991.198575] ? copy_mnt_ns+0xa00/0xa00 [ 991.199299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.200277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.201238] do_syscall_64+0x33/0x40 [ 991.201932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.202870] RIP: 0033:0x7f5f5e955b19 [ 991.203558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 991.206972] RSP: 002b:00007f5f5beaa188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 991.208372] RAX: ffffffffffffffda RBX: 00007f5f5ea69020 RCX: 00007f5f5e955b19 [ 991.209693] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 991.211006] RBP: 00007f5f5beaa1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 991.212330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 991.213647] R13: 00007fffab405e2f R14: 00007f5f5beaa300 R15: 0000000000022000 [ 991.246867] FAULT_INJECTION: forcing a failure. [ 991.246867] name failslab, interval 1, probability 0, space 0, times 0 [ 991.249075] CPU: 1 PID: 7410 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 991.250378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.251879] Call Trace: [ 991.252356] dump_stack+0x107/0x167 [ 991.253030] should_fail.cold+0x5/0xa [ 991.253716] ? create_object.isra.0+0x3a/0xa30 [ 991.254544] should_failslab+0x5/0x20 [ 991.255236] kmem_cache_alloc+0x5b/0x310 [ 991.255981] create_object.isra.0+0x3a/0xa30 [ 991.256796] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.257716] __kmalloc_track_caller+0x177/0x370 [ 991.258558] ? match_number+0xaf/0x1d0 [ 991.259273] kmemdup_nul+0x2d/0xa0 [ 991.259922] match_number+0xaf/0x1d0 [ 991.260616] ? match_u64+0x190/0x190 [ 991.261287] ? __kmalloc_track_caller+0x2c6/0x370 [ 991.262166] ? memcpy+0x39/0x60 [ 991.262773] parse_opts.part.0+0x1f3/0x340 [ 991.263530] ? p9_fd_show_options+0x1c0/0x1c0 [ 991.264342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.265294] ? trace_hardirqs_on+0x5b/0x180 [ 991.266068] ? kfree+0xd7/0x340 [ 991.266673] p9_fd_create+0x98/0x4a0 [ 991.267340] ? p9_conn_create+0x510/0x510 [ 991.268081] ? p9_client_create+0x798/0x1230 [ 991.268878] ? kfree+0xd7/0x340 [ 991.269468] ? do_raw_spin_unlock+0x4f/0x220 [ 991.270268] p9_client_create+0x7ff/0x1230 [ 991.271041] ? p9_client_flush+0x430/0x430 [ 991.271806] ? trace_hardirqs_on+0x5b/0x180 [ 991.272586] ? lockdep_init_map_type+0x2c7/0x780 [ 991.273452] ? __raw_spin_lock_init+0x36/0x110 [ 991.274281] v9fs_session_init+0x1dd/0x1680 [ 991.275061] ? lock_release+0x680/0x680 [ 991.275783] ? kmem_cache_alloc_trace+0x151/0x320 [ 991.276653] ? v9fs_show_options+0x690/0x690 [ 991.277451] ? trace_hardirqs_on+0x5b/0x180 [ 991.278223] ? kasan_unpoison_shadow+0x33/0x50 [ 991.279036] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 991.279959] v9fs_mount+0x79/0x8f0 [ 991.280616] ? v9fs_write_inode+0x60/0x60 [ 991.281352] legacy_get_tree+0x105/0x220 [ 991.282077] vfs_get_tree+0x8e/0x300 [ 991.282737] path_mount+0x1490/0x21e0 [ 991.283418] ? strncpy_from_user+0x9e/0x470 [ 991.284183] ? finish_automount+0xa90/0xa90 [ 991.284956] ? getname_flags.part.0+0x1dd/0x4f0 [ 991.285777] ? _copy_from_user+0xfb/0x1b0 [ 991.286515] __x64_sys_mount+0x282/0x300 [ 991.287225] ? copy_mnt_ns+0xa00/0xa00 [ 991.287920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.288861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.289775] do_syscall_64+0x33/0x40 [ 991.290428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.291329] RIP: 0033:0x7f2ae689eb19 [ 991.291986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 991.295275] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 991.296636] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 991.297911] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 991.299155] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 991.300369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 991.301587] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 991.311549] 9pnet: Insufficient options for proto=fd 03:25:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 32) 03:25:01 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1002.950850] FAULT_INJECTION: forcing a failure. [ 1002.950850] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.952252] CPU: 1 PID: 7420 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1002.953053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1002.954005] Call Trace: [ 1002.954310] dump_stack+0x107/0x167 [ 1002.954730] should_fail.cold+0x5/0xa [ 1002.955170] ? alloc_fs_context+0x57/0x840 [ 1002.955658] should_failslab+0x5/0x20 [ 1002.956100] kmem_cache_alloc_trace+0x55/0x320 [ 1002.956643] alloc_fs_context+0x57/0x840 [ 1002.957117] path_mount+0xab1/0x21e0 [ 1002.957553] ? strncpy_from_user+0x9e/0x470 [ 1002.958056] ? finish_automount+0xa90/0xa90 [ 1002.958552] ? getname_flags.part.0+0x1dd/0x4f0 [ 1002.959085] ? _copy_from_user+0xfb/0x1b0 [ 1002.959564] __x64_sys_mount+0x282/0x300 [ 1002.960029] ? copy_mnt_ns+0xa00/0xa00 [ 1002.960480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1002.961088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1002.961683] do_syscall_64+0x33/0x40 [ 1002.962113] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1002.962703] RIP: 0033:0x7fd388488b19 [ 1002.963134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1002.965312] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1002.966189] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1002.967014] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1002.967841] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1002.968667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1002.969484] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:25:01 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7", 0x3e, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 24) 03:25:01 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 24) 03:25:01 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 10) 03:25:01 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 10) [ 1002.979296] FAULT_INJECTION: forcing a failure. [ 1002.979296] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.980633] CPU: 1 PID: 7426 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 1002.981466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1002.982480] Call Trace: [ 1002.982782] dump_stack+0x107/0x167 [ 1002.983196] should_fail.cold+0x5/0xa [ 1002.983634] ? create_object.isra.0+0x3a/0xa30 [ 1002.984150] should_failslab+0x5/0x20 [ 1002.984592] kmem_cache_alloc+0x5b/0x310 [ 1002.985053] ? __tcp_get_metrics+0x570/0x570 [ 1002.985554] create_object.isra.0+0x3a/0xa30 [ 1002.986050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1002.986634] kmem_cache_alloc_node+0x169/0x330 [ 1002.987152] ? tcp_fastopen_cache_get+0x2e5/0x650 [ 1002.987706] __alloc_skb+0x6d/0x5b0 [ 1002.987854] FAULT_INJECTION: forcing a failure. [ 1002.987854] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.988125] sk_stream_alloc_skb+0x109/0xc30 [ 1002.988138] tcp_connect+0x1a3c/0x4690 [ 1002.988160] ? __tcp_transmit_skb+0x36f0/0x36f0 [ 1002.991899] ? mark_held_locks+0x9e/0xe0 [ 1002.992368] ? kasan_unpoison_shadow+0x33/0x50 [ 1002.992894] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1002.993472] tcp_sendmsg_locked+0x25ef/0x2f30 [ 1002.993994] ? tcp_sendmsg+0x1d/0x50 [ 1002.994423] ? lock_downgrade+0x6d0/0x6d0 [ 1002.994899] ? tcp_sendpage+0xd0/0xd0 [ 1002.995334] ? mark_held_locks+0x9e/0xe0 [ 1002.995800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1002.996391] ? __local_bh_enable_ip+0x9d/0x100 [ 1002.996914] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 1002.997442] tcp_sendmsg+0x2b/0x50 [ 1002.997846] inet6_sendmsg+0xb5/0x140 [ 1002.998276] ? inet6_compat_ioctl+0x320/0x320 [ 1002.998780] __sock_sendmsg+0xf2/0x190 [ 1002.999224] ____sys_sendmsg+0x70d/0x870 [ 1002.999684] ? sock_write_iter+0x3d0/0x3d0 [ 1003.000162] ? do_recvmmsg+0x6d0/0x6d0 [ 1003.000625] ? lock_downgrade+0x6d0/0x6d0 [ 1003.001096] ? __lockdep_reset_lock+0x180/0x180 [ 1003.001622] ___sys_sendmsg+0xf3/0x170 [ 1003.002064] ? sendmsg_copy_msghdr+0x160/0x160 [ 1003.002585] ? __fget_files+0x2cf/0x520 [ 1003.003034] ? lock_downgrade+0x6d0/0x6d0 [ 1003.003503] ? find_held_lock+0x2c/0x110 [ 1003.003968] ? __fget_files+0x2f8/0x520 [ 1003.004420] ? __fget_light+0xea/0x290 [ 1003.004873] __sys_sendmsg+0xe5/0x1b0 [ 1003.005303] ? __sys_sendmsg_sock+0x40/0x40 [ 1003.005790] ? rcu_read_lock_any_held+0x75/0xa0 [ 1003.006322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.006913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.007489] ? trace_hardirqs_on+0x5b/0x180 [ 1003.007977] do_syscall_64+0x33/0x40 [ 1003.008396] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.008981] RIP: 0033:0x7f5452beab19 [ 1003.009401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.011481] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.012339] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 1003.013153] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1003.013958] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.014764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.015572] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 [ 1003.016409] CPU: 0 PID: 7429 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 1003.017869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.019598] Call Trace: [ 1003.020161] dump_stack+0x107/0x167 [ 1003.020932] should_fail.cold+0x5/0xa [ 1003.021740] should_failslab+0x5/0x20 [ 1003.022532] __kmalloc_track_caller+0x79/0x370 [ 1003.023490] ? p9_client_create+0x51e/0x1230 [ 1003.024410] kmemdup_nul+0x2d/0xa0 [ 1003.025163] p9_client_create+0x51e/0x1230 [ 1003.026064] ? p9_client_flush+0x430/0x430 [ 1003.026951] ? trace_hardirqs_on+0x5b/0x180 [ 1003.027855] ? lockdep_init_map_type+0x2c7/0x780 [ 1003.028859] ? __raw_spin_lock_init+0x36/0x110 [ 1003.029818] v9fs_session_init+0x1dd/0x1680 [ 1003.030715] ? lock_release+0x680/0x680 [ 1003.031562] ? kmem_cache_alloc_trace+0x151/0x320 [ 1003.032592] ? v9fs_show_options+0x690/0x690 [ 1003.033523] ? trace_hardirqs_on+0x5b/0x180 [ 1003.034321] FAULT_INJECTION: forcing a failure. [ 1003.034321] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.034438] ? kasan_unpoison_shadow+0x33/0x50 [ 1003.036648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.037708] v9fs_mount+0x79/0x8f0 [ 1003.038446] ? v9fs_write_inode+0x60/0x60 [ 1003.039308] legacy_get_tree+0x105/0x220 [ 1003.040154] vfs_get_tree+0x8e/0x300 [ 1003.040942] path_mount+0x1490/0x21e0 [ 1003.041749] ? strncpy_from_user+0x9e/0x470 [ 1003.042656] ? finish_automount+0xa90/0xa90 [ 1003.043562] ? getname_flags.part.0+0x1dd/0x4f0 [ 1003.044524] ? _copy_from_user+0xfb/0x1b0 [ 1003.045403] __x64_sys_mount+0x282/0x300 [ 1003.046256] ? copy_mnt_ns+0xa00/0xa00 [ 1003.047081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.048169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.049258] do_syscall_64+0x33/0x40 [ 1003.050031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.051091] RIP: 0033:0x7fc6f0a40b19 [ 1003.051881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.055740] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.057328] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 1003.058828] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1003.060322] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1003.061834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.063319] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 1003.064854] CPU: 1 PID: 7427 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1003.065637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.066579] Call Trace: [ 1003.066763] FAULT_INJECTION: forcing a failure. [ 1003.066763] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.066890] dump_stack+0x107/0x167 [ 1003.069581] should_fail.cold+0x5/0xa [ 1003.070015] ? p9_fd_create+0x161/0x4a0 [ 1003.070461] should_failslab+0x5/0x20 [ 1003.070889] kmem_cache_alloc_trace+0x55/0x320 [ 1003.071407] p9_fd_create+0x161/0x4a0 [ 1003.071834] ? p9_conn_create+0x510/0x510 [ 1003.072297] ? p9_client_create+0x798/0x1230 [ 1003.072801] ? kfree+0xd7/0x340 [ 1003.073173] ? do_raw_spin_unlock+0x4f/0x220 [ 1003.073672] p9_client_create+0x7ff/0x1230 [ 1003.074158] ? p9_client_flush+0x430/0x430 [ 1003.074636] ? trace_hardirqs_on+0x5b/0x180 [ 1003.075125] ? lockdep_init_map_type+0x2c7/0x780 [ 1003.075663] ? __raw_spin_lock_init+0x36/0x110 [ 1003.076182] v9fs_session_init+0x1dd/0x1680 [ 1003.076786] ? lock_release+0x680/0x680 [ 1003.077369] ? kmem_cache_alloc_trace+0x151/0x320 [ 1003.078065] ? v9fs_show_options+0x690/0x690 [ 1003.078698] ? trace_hardirqs_on+0x5b/0x180 [ 1003.079325] ? kasan_unpoison_shadow+0x33/0x50 [ 1003.079965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.080569] v9fs_mount+0x79/0x8f0 [ 1003.080976] ? v9fs_write_inode+0x60/0x60 [ 1003.081458] legacy_get_tree+0x105/0x220 [ 1003.081923] vfs_get_tree+0x8e/0x300 [ 1003.082385] path_mount+0x1490/0x21e0 [ 1003.082863] ? strncpy_from_user+0x9e/0x470 [ 1003.083368] ? finish_automount+0xa90/0xa90 [ 1003.083854] ? getname_flags.part.0+0x1dd/0x4f0 [ 1003.084425] ? _copy_from_user+0xfb/0x1b0 [ 1003.084905] __x64_sys_mount+0x282/0x300 [ 1003.085371] ? copy_mnt_ns+0xa00/0xa00 [ 1003.085813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.086406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.086990] do_syscall_64+0x33/0x40 [ 1003.087404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.087984] RIP: 0033:0x7f2ae689eb19 [ 1003.088404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.090485] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.091343] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1003.092143] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1003.092949] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1003.093743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.094536] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1003.095360] CPU: 0 PID: 7428 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1003.096814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.098562] Call Trace: [ 1003.099121] dump_stack+0x107/0x167 [ 1003.099884] should_fail.cold+0x5/0xa [ 1003.100695] should_failslab+0x5/0x20 [ 1003.101494] __kmalloc_track_caller+0x79/0x370 [ 1003.102448] ? p9_client_create+0x51e/0x1230 [ 1003.103375] kmemdup_nul+0x2d/0xa0 [ 1003.104127] p9_client_create+0x51e/0x1230 03:25:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1003.105038] ? p9_client_flush+0x430/0x430 [ 1003.106048] ? trace_hardirqs_on+0x5b/0x180 [ 1003.106949] ? lockdep_init_map_type+0x2c7/0x780 [ 1003.107943] ? __raw_spin_lock_init+0x36/0x110 03:25:01 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 11) [ 1003.108904] v9fs_session_init+0x1dd/0x1680 [ 1003.109833] ? lock_release+0x680/0x680 [ 1003.110678] ? kmem_cache_alloc_trace+0x151/0x320 [ 1003.111401] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1003.111690] ? v9fs_show_options+0x690/0x690 [ 1003.113655] ? trace_hardirqs_on+0x5b/0x180 [ 1003.114553] ? kasan_unpoison_shadow+0x33/0x50 [ 1003.115516] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.116579] v9fs_mount+0x79/0x8f0 [ 1003.117324] ? v9fs_write_inode+0x60/0x60 [ 1003.118192] legacy_get_tree+0x105/0x220 [ 1003.119053] vfs_get_tree+0x8e/0x300 [ 1003.119829] path_mount+0x1490/0x21e0 [ 1003.120631] ? strncpy_from_user+0x9e/0x470 [ 1003.121525] ? finish_automount+0xa90/0xa90 [ 1003.122418] ? getname_flags.part.0+0x1dd/0x4f0 [ 1003.123394] ? _copy_from_user+0xfb/0x1b0 [ 1003.124263] __x64_sys_mount+0x282/0x300 [ 1003.125119] ? copy_mnt_ns+0xa00/0xa00 [ 1003.125933] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.127030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.128109] do_syscall_64+0x33/0x40 [ 1003.128888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.129959] RIP: 0033:0x7f5f5e955b19 [ 1003.130729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.134554] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.136139] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1003.137646] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1003.139140] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1003.140640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.142130] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1003.163758] FAULT_INJECTION: forcing a failure. [ 1003.163758] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.166207] CPU: 0 PID: 7435 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1003.167631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.169386] Call Trace: [ 1003.169943] dump_stack+0x107/0x167 [ 1003.170718] should_fail.cold+0x5/0xa [ 1003.171523] ? create_object.isra.0+0x3a/0xa30 [ 1003.172485] should_failslab+0x5/0x20 [ 1003.173303] kmem_cache_alloc+0x5b/0x310 [ 1003.174168] create_object.isra.0+0x3a/0xa30 [ 1003.175100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.176179] kmem_cache_alloc_trace+0x151/0x320 [ 1003.177167] alloc_fs_context+0x57/0x840 [ 1003.178026] path_mount+0xab1/0x21e0 [ 1003.178801] ? strncpy_from_user+0x9e/0x470 [ 1003.179705] ? finish_automount+0xa90/0xa90 [ 1003.180617] ? getname_flags.part.0+0x1dd/0x4f0 [ 1003.181590] ? _copy_from_user+0xfb/0x1b0 [ 1003.182466] __x64_sys_mount+0x282/0x300 [ 1003.183315] ? copy_mnt_ns+0xa00/0xa00 [ 1003.184143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.185252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.186330] do_syscall_64+0x33/0x40 [ 1003.187121] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.188184] RIP: 0033:0x7fd388488b19 [ 1003.188974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.192872] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.194482] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1003.195977] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1003.197489] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1003.198991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.200491] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:25:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 33) 03:25:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 11) 03:25:02 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:25:02 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a7", 0x3f, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1003.286512] FAULT_INJECTION: forcing a failure. [ 1003.286512] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.287945] CPU: 1 PID: 7442 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1003.288743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.289707] Call Trace: [ 1003.289836] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1003.290013] dump_stack+0x107/0x167 [ 1003.290036] should_fail.cold+0x5/0xa [ 1003.292994] ? create_object.isra.0+0x3a/0xa30 [ 1003.293618] should_failslab+0x5/0x20 [ 1003.294145] kmem_cache_alloc+0x5b/0x310 [ 1003.294699] ? p9_fd_show_options+0x1c0/0x1c0 [ 1003.295321] create_object.isra.0+0x3a/0xa30 [ 1003.295924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.296645] kmem_cache_alloc_trace+0x151/0x320 [ 1003.297298] p9_fd_create+0x161/0x4a0 [ 1003.297822] ? p9_conn_create+0x510/0x510 [ 1003.298399] ? p9_client_create+0x798/0x1230 [ 1003.299028] ? kfree+0xd7/0x340 [ 1003.299496] ? do_raw_spin_unlock+0x4f/0x220 [ 1003.300136] p9_client_create+0x7ff/0x1230 [ 1003.300743] ? p9_client_flush+0x430/0x430 [ 1003.301335] ? trace_hardirqs_on+0x5b/0x180 [ 1003.301934] ? lockdep_init_map_type+0x2c7/0x780 [ 1003.302597] ? __raw_spin_lock_init+0x36/0x110 [ 1003.303229] v9fs_session_init+0x1dd/0x1680 [ 1003.303799] ? lock_release+0x680/0x680 [ 1003.304340] ? kmem_cache_alloc_trace+0x151/0x320 [ 1003.305012] ? v9fs_show_options+0x690/0x690 [ 1003.305617] ? trace_hardirqs_on+0x5b/0x180 [ 1003.306188] ? kasan_unpoison_shadow+0x33/0x50 [ 1003.306800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.307463] v9fs_mount+0x79/0x8f0 [ 1003.307967] ? v9fs_write_inode+0x60/0x60 [ 1003.308535] legacy_get_tree+0x105/0x220 [ 1003.309127] vfs_get_tree+0x8e/0x300 [ 1003.309640] path_mount+0x1490/0x21e0 [ 1003.310149] ? strncpy_from_user+0x9e/0x470 [ 1003.310720] ? finish_automount+0xa90/0xa90 [ 1003.311292] ? getname_flags.part.0+0x1dd/0x4f0 [ 1003.311914] ? _copy_from_user+0xfb/0x1b0 [ 1003.312456] __x64_sys_mount+0x282/0x300 [ 1003.313003] ? copy_mnt_ns+0xa00/0xa00 [ 1003.313521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.314246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.314971] do_syscall_64+0x33/0x40 [ 1003.315494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.316221] RIP: 0033:0x7f2ae689eb19 [ 1003.316753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.319307] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.320295] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1003.321262] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1003.322231] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1003.323217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.324231] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:25:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:25:02 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a7", 0x3f, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1003.370383] FAULT_INJECTION: forcing a failure. [ 1003.370383] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.371746] CPU: 1 PID: 7446 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 1003.372526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.373477] Call Trace: [ 1003.373783] dump_stack+0x107/0x167 [ 1003.374203] should_fail.cold+0x5/0xa [ 1003.374643] should_failslab+0x5/0x20 [ 1003.375073] __kmalloc_node_track_caller+0x74/0x3b0 [ 1003.375634] ? sk_stream_alloc_skb+0x109/0xc30 [ 1003.376156] ? tcp_fastopen_cache_get+0x2e5/0x650 [ 1003.376712] __alloc_skb+0xb1/0x5b0 [ 1003.377127] sk_stream_alloc_skb+0x109/0xc30 [ 1003.377625] tcp_connect+0x1a3c/0x4690 [ 1003.378075] ? __tcp_transmit_skb+0x36f0/0x36f0 [ 1003.378611] ? mark_held_locks+0x9e/0xe0 [ 1003.379079] ? kasan_unpoison_shadow+0x33/0x50 [ 1003.379602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.380177] tcp_sendmsg_locked+0x25ef/0x2f30 [ 1003.380704] ? tcp_sendmsg+0x1d/0x50 [ 1003.381130] ? lock_downgrade+0x6d0/0x6d0 [ 1003.381603] ? tcp_sendpage+0xd0/0xd0 [ 1003.382045] ? mark_held_locks+0x9e/0xe0 [ 1003.382511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.383113] ? __local_bh_enable_ip+0x9d/0x100 [ 1003.383628] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 1003.384163] tcp_sendmsg+0x2b/0x50 [ 1003.384577] inet6_sendmsg+0xb5/0x140 [ 1003.385011] ? inet6_compat_ioctl+0x320/0x320 [ 1003.385517] __sock_sendmsg+0xf2/0x190 [ 1003.385959] ____sys_sendmsg+0x70d/0x870 [ 1003.386424] ? sock_write_iter+0x3d0/0x3d0 [ 1003.386901] ? do_recvmmsg+0x6d0/0x6d0 [ 1003.387345] ? lock_downgrade+0x6d0/0x6d0 [ 1003.387815] ? __lockdep_reset_lock+0x180/0x180 [ 1003.388346] ___sys_sendmsg+0xf3/0x170 [ 1003.388797] ? sendmsg_copy_msghdr+0x160/0x160 [ 1003.389318] ? __fget_files+0x2cf/0x520 [ 1003.389768] ? lock_downgrade+0x6d0/0x6d0 [ 1003.390239] ? find_held_lock+0x2c/0x110 [ 1003.390707] ? __fget_files+0x2f8/0x520 [ 1003.391161] ? __fget_light+0xea/0x290 [ 1003.391610] __sys_sendmsg+0xe5/0x1b0 [ 1003.392043] ? __sys_sendmsg_sock+0x40/0x40 [ 1003.392539] ? rcu_read_lock_any_held+0x75/0xa0 [ 1003.393080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.393675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.394258] ? trace_hardirqs_on+0x5b/0x180 [ 1003.394748] do_syscall_64+0x33/0x40 [ 1003.395172] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.395753] RIP: 0033:0x7f5452beab19 [ 1003.396179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.398272] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.399131] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 1003.399940] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1003.400752] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.401562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.402372] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 03:25:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 25) 03:25:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 25) [ 1003.450059] FAULT_INJECTION: forcing a failure. [ 1003.450059] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.451453] CPU: 1 PID: 7453 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1003.452230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.453183] Call Trace: [ 1003.453490] dump_stack+0x107/0x167 [ 1003.453907] should_fail.cold+0x5/0xa [ 1003.454349] should_failslab+0x5/0x20 [ 1003.454783] __kmalloc_track_caller+0x79/0x370 [ 1003.455302] ? p9_client_create+0x51e/0x1230 [ 1003.455807] kmemdup_nul+0x2d/0xa0 [ 1003.456213] p9_client_create+0x51e/0x1230 [ 1003.456703] ? p9_client_flush+0x430/0x430 [ 1003.457188] ? trace_hardirqs_on+0x5b/0x180 [ 1003.457677] ? lockdep_init_map_type+0x2c7/0x780 [ 1003.458214] ? __raw_spin_lock_init+0x36/0x110 [ 1003.458737] v9fs_session_init+0x1dd/0x1680 [ 1003.459225] ? lock_release+0x680/0x680 [ 1003.459686] ? kmem_cache_alloc_trace+0x151/0x320 [ 1003.460248] ? v9fs_show_options+0x690/0x690 [ 1003.460761] ? trace_hardirqs_on+0x5b/0x180 [ 1003.461258] ? kasan_unpoison_shadow+0x33/0x50 [ 1003.461779] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.462366] v9fs_mount+0x79/0x8f0 [ 1003.462771] ? v9fs_write_inode+0x60/0x60 [ 1003.463244] legacy_get_tree+0x105/0x220 [ 1003.463710] vfs_get_tree+0x8e/0x300 [ 1003.464136] path_mount+0x1490/0x21e0 [ 1003.464588] ? strncpy_from_user+0x9e/0x470 [ 1003.465078] ? finish_automount+0xa90/0xa90 [ 1003.465571] ? getname_flags.part.0+0x1dd/0x4f0 [ 1003.466098] ? _copy_from_user+0xfb/0x1b0 [ 1003.466575] __x64_sys_mount+0x282/0x300 [ 1003.467038] ? copy_mnt_ns+0xa00/0xa00 [ 1003.467481] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.468078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.468674] do_syscall_64+0x33/0x40 [ 1003.469100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.469678] RIP: 0033:0x7f5f5e955b19 [ 1003.470102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.472168] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.473040] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1003.473849] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1003.474657] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1003.475460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.476273] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1003.517468] FAULT_INJECTION: forcing a failure. [ 1003.517468] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.518887] CPU: 1 PID: 7455 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 1003.519659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.520607] Call Trace: [ 1003.520911] dump_stack+0x107/0x167 [ 1003.521325] should_fail.cold+0x5/0xa [ 1003.521758] ? create_object.isra.0+0x3a/0xa30 [ 1003.522278] should_failslab+0x5/0x20 [ 1003.522710] kmem_cache_alloc+0x5b/0x310 [ 1003.523174] create_object.isra.0+0x3a/0xa30 [ 1003.523668] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.524247] __kmalloc_track_caller+0x177/0x370 [ 1003.524781] ? p9_client_create+0x51e/0x1230 [ 1003.525281] kmemdup_nul+0x2d/0xa0 [ 1003.525684] p9_client_create+0x51e/0x1230 [ 1003.526172] ? p9_client_flush+0x430/0x430 [ 1003.526651] ? trace_hardirqs_on+0x5b/0x180 [ 1003.527145] ? lockdep_init_map_type+0x2c7/0x780 [ 1003.527683] ? __raw_spin_lock_init+0x36/0x110 [ 1003.528203] v9fs_session_init+0x1dd/0x1680 [ 1003.528703] ? kmem_cache_alloc_trace+0x151/0x320 [ 1003.529250] ? v9fs_show_options+0x690/0x690 [ 1003.529752] ? trace_hardirqs_on+0x5b/0x180 [ 1003.530243] ? kasan_unpoison_shadow+0x33/0x50 [ 1003.530754] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.531333] v9fs_mount+0x79/0x8f0 [ 1003.531734] ? v9fs_write_inode+0x60/0x60 [ 1003.532201] legacy_get_tree+0x105/0x220 [ 1003.532667] vfs_get_tree+0x8e/0x300 [ 1003.533089] path_mount+0x1490/0x21e0 [ 1003.533520] ? strncpy_from_user+0x9e/0x470 [ 1003.534009] ? finish_automount+0xa90/0xa90 [ 1003.534496] ? getname_flags.part.0+0x1dd/0x4f0 [ 1003.535019] ? _copy_from_user+0xfb/0x1b0 [ 1003.535491] __x64_sys_mount+0x282/0x300 [ 1003.535947] ? copy_mnt_ns+0xa00/0xa00 [ 1003.536395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.536995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.537580] do_syscall_64+0x33/0x40 [ 1003.537999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.538581] RIP: 0033:0x7fc6f0a40b19 [ 1003.539001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.541104] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.541969] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 1003.542779] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1003.543584] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1003.544394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.545217] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:25:14 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 12) 03:25:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 26) 03:25:14 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:25:14 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 34) 03:25:14 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:25:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 26) 03:25:14 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a7", 0x3f, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:14 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 12) [ 1015.396821] FAULT_INJECTION: forcing a failure. [ 1015.396821] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.398376] CPU: 1 PID: 7466 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 1015.399273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.400354] Call Trace: [ 1015.400708] dump_stack+0x107/0x167 [ 1015.401196] should_fail.cold+0x5/0xa [ 1015.401700] ? create_object.isra.0+0x3a/0xa30 [ 1015.402297] should_failslab+0x5/0x20 [ 1015.402797] kmem_cache_alloc+0x5b/0x310 [ 1015.403335] create_object.isra.0+0x3a/0xa30 [ 1015.403908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.404577] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1015.405246] ? sk_stream_alloc_skb+0x109/0xc30 [ 1015.405845] ? tcp_fastopen_cache_get+0x2e5/0x650 [ 1015.406482] __alloc_skb+0xb1/0x5b0 [ 1015.406964] sk_stream_alloc_skb+0x109/0xc30 [ 1015.407542] tcp_connect+0x1a3c/0x4690 [ 1015.408066] ? __tcp_transmit_skb+0x36f0/0x36f0 [ 1015.408675] ? mark_held_locks+0x9e/0xe0 [ 1015.409223] ? kasan_unpoison_shadow+0x33/0x50 [ 1015.409820] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.410486] tcp_sendmsg_locked+0x25ef/0x2f30 [ 1015.411078] ? tcp_sendmsg+0x1d/0x50 [ 1015.411570] ? lock_downgrade+0x6d0/0x6d0 [ 1015.412113] ? tcp_sendpage+0xd0/0xd0 [ 1015.412613] ? mark_held_locks+0x9e/0xe0 [ 1015.413154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.413839] ? __local_bh_enable_ip+0x9d/0x100 [ 1015.414434] ? tcp_sendmsg_locked+0x2f30/0x2f30 [ 1015.415048] tcp_sendmsg+0x2b/0x50 [ 1015.415513] inet6_sendmsg+0xb5/0x140 [ 1015.416013] ? inet6_compat_ioctl+0x320/0x320 [ 1015.416594] __sock_sendmsg+0xf2/0x190 [ 1015.417109] ____sys_sendmsg+0x70d/0x870 [ 1015.417640] ? sock_write_iter+0x3d0/0x3d0 [ 1015.418191] ? do_recvmmsg+0x6d0/0x6d0 [ 1015.418338] FAULT_INJECTION: forcing a failure. [ 1015.418338] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.418703] ? lock_downgrade+0x6d0/0x6d0 [ 1015.421659] ? __lockdep_reset_lock+0x180/0x180 [ 1015.422266] ___sys_sendmsg+0xf3/0x170 [ 1015.422772] ? sendmsg_copy_msghdr+0x160/0x160 [ 1015.423367] ? __fget_files+0x2cf/0x520 [ 1015.423881] ? lock_downgrade+0x6d0/0x6d0 [ 1015.424419] ? find_held_lock+0x2c/0x110 [ 1015.424972] ? __fget_files+0x2f8/0x520 [ 1015.425515] ? __fget_light+0xea/0x290 [ 1015.426047] __sys_sendmsg+0xe5/0x1b0 [ 1015.426561] ? __sys_sendmsg_sock+0x40/0x40 [ 1015.427146] ? rcu_read_lock_any_held+0x75/0xa0 [ 1015.427788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.428494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.429201] ? trace_hardirqs_on+0x5b/0x180 [ 1015.429790] do_syscall_64+0x33/0x40 [ 1015.430292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.430983] RIP: 0033:0x7f5452beab19 [ 1015.431486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.433879] RSP: 002b:00007f5450160188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.434856] RAX: ffffffffffffffda RBX: 00007f5452cfdf60 RCX: 00007f5452beab19 [ 1015.435769] RDX: 0000000020000844 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1015.436713] RBP: 00007f54501601d0 R08: 0000000000000000 R09: 0000000000000000 [ 1015.437624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.438527] R13: 00007ffff492e7cf R14: 00007f5450160300 R15: 0000000000022000 [ 1015.439473] CPU: 0 PID: 7474 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 1015.440955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.442708] Call Trace: [ 1015.443272] dump_stack+0x107/0x167 [ 1015.444040] should_fail.cold+0x5/0xa [ 1015.444867] should_failslab+0x5/0x20 [ 1015.445675] __kmalloc_track_caller+0x79/0x370 [ 1015.445705] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1015.446635] ? parse_opts.part.0+0x8e/0x340 [ 1015.446660] kstrdup+0x36/0x70 [ 1015.446680] parse_opts.part.0+0x8e/0x340 [ 1015.450248] ? p9_fd_show_options+0x1c0/0x1c0 [ 1015.451209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.452316] ? quarantine_put+0x8b/0x1a0 [ 1015.453175] ? trace_hardirqs_on+0x5b/0x180 [ 1015.454085] ? kfree+0xd7/0x340 [ 1015.454789] p9_fd_create+0x98/0x4a0 [ 1015.455577] ? p9_conn_create+0x510/0x510 [ 1015.456449] ? p9_client_create+0x798/0x1230 [ 1015.457397] ? kfree+0xd7/0x340 [ 1015.458090] ? do_raw_spin_unlock+0x4f/0x220 [ 1015.459030] p9_client_create+0x7ff/0x1230 [ 1015.459385] FAULT_INJECTION: forcing a failure. [ 1015.459385] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.459919] ? p9_client_flush+0x430/0x430 [ 1015.459946] ? trace_hardirqs_on+0x5b/0x180 [ 1015.463082] ? lockdep_init_map_type+0x2c7/0x780 [ 1015.464084] ? __raw_spin_lock_init+0x36/0x110 [ 1015.465093] v9fs_session_init+0x1dd/0x1680 [ 1015.466005] ? lock_release+0x680/0x680 [ 1015.466849] ? kmem_cache_alloc_trace+0x151/0x320 [ 1015.467862] ? v9fs_show_options+0x690/0x690 [ 1015.468806] ? trace_hardirqs_on+0x5b/0x180 [ 1015.469716] ? kasan_unpoison_shadow+0x33/0x50 [ 1015.470672] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.471739] v9fs_mount+0x79/0x8f0 [ 1015.472492] ? v9fs_write_inode+0x60/0x60 [ 1015.473368] legacy_get_tree+0x105/0x220 [ 1015.474228] vfs_get_tree+0x8e/0x300 [ 1015.475008] path_mount+0x1490/0x21e0 [ 1015.475821] ? strncpy_from_user+0x9e/0x470 [ 1015.476886] ? finish_automount+0xa90/0xa90 [ 1015.478065] ? getname_flags.part.0+0x1dd/0x4f0 [ 1015.479327] ? _copy_from_user+0xfb/0x1b0 [ 1015.480475] __x64_sys_mount+0x282/0x300 [ 1015.481587] ? copy_mnt_ns+0xa00/0xa00 [ 1015.482644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.484058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.485479] do_syscall_64+0x33/0x40 [ 1015.486486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.487863] RIP: 0033:0x7fc6f0a40b19 [ 1015.488885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.493162] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1015.495003] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 1015.496505] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1015.498028] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1015.499544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.501068] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 1015.502605] CPU: 1 PID: 7477 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1015.503480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.504070] 9pnet: Insufficient options for proto=fd [ 1015.504483] Call Trace: [ 1015.504503] dump_stack+0x107/0x167 [ 1015.506319] should_fail.cold+0x5/0xa [ 1015.506785] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 1015.507420] should_failslab+0x5/0x20 [ 1015.507889] kmem_cache_alloc+0x5b/0x310 [ 1015.508389] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1015.509018] p9_client_rpc+0x220/0x1370 [ 1015.509499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.510140] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1015.510786] ? pipe_poll+0x21b/0x800 [ 1015.511235] ? p9_fd_close+0x4a0/0x4a0 [ 1015.511705] ? wait_for_partner+0x3c0/0x3c0 [ 1015.512228] ? p9_fd_poll+0x1e0/0x2c0 [ 1015.512712] ? p9_fd_create+0x357/0x4a0 [ 1015.513195] ? p9_conn_create+0x510/0x510 [ 1015.513696] ? p9_client_create+0x798/0x1230 [ 1015.514227] ? kfree+0xd7/0x340 [ 1015.514649] ? do_raw_spin_unlock+0x4f/0x220 [ 1015.515190] p9_client_create+0xa76/0x1230 [ 1015.515709] ? p9_client_flush+0x430/0x430 [ 1015.516224] ? trace_hardirqs_on+0x5b/0x180 [ 1015.516761] ? lockdep_init_map_type+0x2c7/0x780 [ 1015.517334] ? __raw_spin_lock_init+0x36/0x110 [ 1015.517911] v9fs_session_init+0x1dd/0x1680 [ 1015.518441] ? lock_release+0x680/0x680 [ 1015.518930] ? kmem_cache_alloc_trace+0x151/0x320 [ 1015.519519] ? v9fs_show_options+0x690/0x690 [ 1015.520057] ? trace_hardirqs_on+0x5b/0x180 [ 1015.520579] ? kasan_unpoison_shadow+0x33/0x50 [ 1015.521137] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.521748] v9fs_mount+0x79/0x8f0 [ 1015.522178] ? v9fs_write_inode+0x60/0x60 [ 1015.522675] legacy_get_tree+0x105/0x220 [ 1015.523179] vfs_get_tree+0x8e/0x300 [ 1015.523634] path_mount+0x1490/0x21e0 [ 1015.524108] ? strncpy_from_user+0x9e/0x470 [ 1015.524641] ? finish_automount+0xa90/0xa90 [ 1015.525169] ? getname_flags.part.0+0x1dd/0x4f0 [ 1015.525729] ? _copy_from_user+0xfb/0x1b0 [ 1015.526235] __x64_sys_mount+0x282/0x300 [ 1015.526731] ? copy_mnt_ns+0xa00/0xa00 [ 1015.527203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.527833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.528456] do_syscall_64+0x33/0x40 [ 1015.528915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.529531] RIP: 0033:0x7f2ae689eb19 [ 1015.529980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.532188] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1015.533120] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1015.533984] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1015.534846] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1015.535718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.536575] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1015.539848] FAULT_INJECTION: forcing a failure. [ 1015.539848] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.542283] CPU: 0 PID: 7469 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1015.543738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.543861] FAULT_INJECTION: forcing a failure. [ 1015.543861] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.545508] Call Trace: [ 1015.545535] dump_stack+0x107/0x167 [ 1015.545557] should_fail.cold+0x5/0xa [ 1015.548960] should_failslab+0x5/0x20 [ 1015.549767] __kmalloc_track_caller+0x79/0x370 [ 1015.550735] ? parse_opts.part.0+0x8e/0x340 [ 1015.551656] kstrdup+0x36/0x70 [ 1015.552370] parse_opts.part.0+0x8e/0x340 [ 1015.553283] ? p9_fd_show_options+0x1c0/0x1c0 [ 1015.554247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.555356] ? quarantine_put+0x8b/0x1a0 [ 1015.556211] ? trace_hardirqs_on+0x5b/0x180 [ 1015.557133] ? kfree+0xd7/0x340 [ 1015.557837] p9_fd_create+0x98/0x4a0 [ 1015.558627] ? p9_conn_create+0x510/0x510 [ 1015.559505] ? p9_client_create+0x798/0x1230 [ 1015.560438] ? kfree+0xd7/0x340 [ 1015.561143] ? do_raw_spin_unlock+0x4f/0x220 [ 1015.562083] p9_client_create+0x7ff/0x1230 [ 1015.562988] ? p9_client_flush+0x430/0x430 [ 1015.563904] ? trace_hardirqs_on+0x5b/0x180 [ 1015.564831] ? lockdep_init_map_type+0x2c7/0x780 [ 1015.565837] ? __raw_spin_lock_init+0x36/0x110 [ 1015.566812] v9fs_session_init+0x1dd/0x1680 [ 1015.567725] ? lock_release+0x680/0x680 [ 1015.568576] ? kmem_cache_alloc_trace+0x151/0x320 [ 1015.569607] ? v9fs_show_options+0x690/0x690 [ 1015.570547] ? trace_hardirqs_on+0x5b/0x180 [ 1015.571461] ? kasan_unpoison_shadow+0x33/0x50 [ 1015.572438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.573528] v9fs_mount+0x79/0x8f0 [ 1015.574283] ? v9fs_write_inode+0x60/0x60 [ 1015.575160] legacy_get_tree+0x105/0x220 [ 1015.576017] vfs_get_tree+0x8e/0x300 [ 1015.576813] path_mount+0x1490/0x21e0 [ 1015.577629] ? strncpy_from_user+0x9e/0x470 [ 1015.578546] ? finish_automount+0xa90/0xa90 [ 1015.579675] ? getname_flags.part.0+0x1dd/0x4f0 [ 1015.580956] ? _copy_from_user+0xfb/0x1b0 [ 1015.582092] __x64_sys_mount+0x282/0x300 [ 1015.583191] ? copy_mnt_ns+0xa00/0xa00 [ 1015.584246] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.585681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.587077] do_syscall_64+0x33/0x40 [ 1015.588093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.589501] RIP: 0033:0x7f5f5e955b19 [ 1015.590511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.594940] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1015.596651] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1015.598195] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1015.599742] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1015.601308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.602865] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1015.604446] CPU: 1 PID: 7476 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1015.605314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.605975] 9pnet: Insufficient options for proto=fd [ 1015.606324] Call Trace: [ 1015.606344] dump_stack+0x107/0x167 [ 1015.608169] should_fail.cold+0x5/0xa [ 1015.608631] ? legacy_init_fs_context+0x44/0xe0 [ 1015.609204] should_failslab+0x5/0x20 [ 1015.609666] kmem_cache_alloc_trace+0x55/0x320 [ 1015.610217] ? lockdep_init_map_type+0x2c7/0x780 [ 1015.610791] legacy_init_fs_context+0x44/0xe0 [ 1015.611331] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1015.611933] alloc_fs_context+0x4fd/0x840 [ 1015.612449] path_mount+0xab1/0x21e0 [ 1015.612922] ? strncpy_from_user+0x9e/0x470 [ 1015.613452] ? finish_automount+0xa90/0xa90 [ 1015.613995] ? getname_flags.part.0+0x1dd/0x4f0 [ 1015.614574] ? _copy_from_user+0xfb/0x1b0 [ 1015.615087] __x64_sys_mount+0x282/0x300 [ 1015.615578] ? copy_mnt_ns+0xa00/0xa00 [ 1015.616052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.616696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.617321] do_syscall_64+0x33/0x40 [ 1015.617773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.618387] RIP: 0033:0x7fd388488b19 [ 1015.618838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.621074] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1015.621996] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1015.622853] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1015.623714] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1015.624575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.625447] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:25:14 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1015.665012] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:25:14 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 13) 03:25:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 27) [ 1015.732725] FAULT_INJECTION: forcing a failure. [ 1015.732725] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.734075] CPU: 1 PID: 7485 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1015.734870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.735843] Call Trace: [ 1015.736157] dump_stack+0x107/0x167 [ 1015.736591] should_fail.cold+0x5/0xa [ 1015.737045] ? create_object.isra.0+0x3a/0xa30 [ 1015.737578] should_failslab+0x5/0x20 [ 1015.738022] kmem_cache_alloc+0x5b/0x310 [ 1015.738500] create_object.isra.0+0x3a/0xa30 [ 1015.739017] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.739616] kmem_cache_alloc_trace+0x151/0x320 [ 1015.740163] ? lockdep_init_map_type+0x2c7/0x780 [ 1015.740732] legacy_init_fs_context+0x44/0xe0 [ 1015.741255] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1015.741841] alloc_fs_context+0x4fd/0x840 [ 1015.742331] path_mount+0xab1/0x21e0 [ 1015.742772] ? strncpy_from_user+0x9e/0x470 [ 1015.743279] ? finish_automount+0xa90/0xa90 [ 1015.743783] ? getname_flags.part.0+0x1dd/0x4f0 [ 1015.744328] ? _copy_from_user+0xfb/0x1b0 [ 1015.744826] __x64_sys_mount+0x282/0x300 [ 1015.745304] ? copy_mnt_ns+0xa00/0xa00 [ 1015.745763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.746390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.746996] do_syscall_64+0x33/0x40 [ 1015.747431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.748032] RIP: 0033:0x7fd388488b19 [ 1015.748468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.750637] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1015.751530] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1015.752364] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1015.753215] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1015.754059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.754902] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1015.781593] FAULT_INJECTION: forcing a failure. [ 1015.781593] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.783132] CPU: 1 PID: 7487 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 1015.783934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.784909] Call Trace: [ 1015.785217] dump_stack+0x107/0x167 [ 1015.785641] should_fail.cold+0x5/0xa [ 1015.786089] ? create_object.isra.0+0x3a/0xa30 [ 1015.786620] should_failslab+0x5/0x20 [ 1015.787062] kmem_cache_alloc+0x5b/0x310 [ 1015.787533] ? legacy_get_tree+0x105/0x220 [ 1015.788027] ? vfs_get_tree+0x8e/0x300 [ 1015.788479] create_object.isra.0+0x3a/0xa30 [ 1015.789006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.789600] __kmalloc_track_caller+0x177/0x370 [ 1015.790140] ? parse_opts.part.0+0x8e/0x340 [ 1015.790643] kstrdup+0x36/0x70 [ 1015.791016] parse_opts.part.0+0x8e/0x340 [ 1015.791499] ? p9_fd_show_options+0x1c0/0x1c0 [ 1015.792028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.792637] ? quarantine_put+0x8b/0x1a0 [ 1015.793119] ? trace_hardirqs_on+0x5b/0x180 [ 1015.793624] ? kfree+0xd7/0x340 [ 1015.794012] p9_fd_create+0x98/0x4a0 [ 1015.794442] ? p9_conn_create+0x510/0x510 [ 1015.794929] ? p9_client_create+0x798/0x1230 [ 1015.795441] ? kfree+0xd7/0x340 [ 1015.795825] ? do_raw_spin_unlock+0x4f/0x220 [ 1015.796343] p9_client_create+0x7ff/0x1230 [ 1015.796848] ? p9_client_flush+0x430/0x430 [ 1015.797343] ? trace_hardirqs_on+0x5b/0x180 [ 1015.797846] ? lockdep_init_map_type+0x2c7/0x780 [ 1015.798402] ? __raw_spin_lock_init+0x36/0x110 [ 1015.798944] v9fs_session_init+0x1dd/0x1680 [ 1015.799447] ? lock_release+0x680/0x680 [ 1015.799916] ? kmem_cache_alloc_trace+0x151/0x320 [ 1015.800475] ? v9fs_show_options+0x690/0x690 [ 1015.801002] ? trace_hardirqs_on+0x5b/0x180 [ 1015.801503] ? kasan_unpoison_shadow+0x33/0x50 [ 1015.802044] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.802636] v9fs_mount+0x79/0x8f0 [ 1015.803051] ? v9fs_write_inode+0x60/0x60 [ 1015.803534] legacy_get_tree+0x105/0x220 [ 1015.804009] vfs_get_tree+0x8e/0x300 [ 1015.804443] path_mount+0x1490/0x21e0 [ 1015.804898] ? strncpy_from_user+0x9e/0x470 [ 1015.805400] ? finish_automount+0xa90/0xa90 [ 1015.805909] ? getname_flags.part.0+0x1dd/0x4f0 [ 1015.806450] ? _copy_from_user+0xfb/0x1b0 [ 1015.806935] __x64_sys_mount+0x282/0x300 [ 1015.807407] ? copy_mnt_ns+0xa00/0xa00 [ 1015.807862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.808474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.809085] do_syscall_64+0x33/0x40 [ 1015.809520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.810119] RIP: 0033:0x7fc6f0a40b19 [ 1015.810551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.812706] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1015.813596] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 1015.814425] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1015.815257] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1015.816086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.816924] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:25:14 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1015.841477] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:25:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 28) 03:25:26 executing program 4: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 27) 03:25:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 35) 03:25:26 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:25:26 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 14) [ 1027.461270] FAULT_INJECTION: forcing a failure. [ 1027.461270] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.462563] CPU: 0 PID: 7499 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 1027.463325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.464268] Call Trace: [ 1027.464571] dump_stack+0x107/0x167 [ 1027.464994] should_fail.cold+0x5/0xa [ 1027.465434] should_failslab+0x5/0x20 [ 1027.465870] __kmalloc_track_caller+0x79/0x370 [ 1027.466392] ? match_number+0xaf/0x1d0 [ 1027.466840] kmemdup_nul+0x2d/0xa0 [ 1027.467246] match_number+0xaf/0x1d0 [ 1027.467671] ? match_u64+0x190/0x190 [ 1027.468095] ? __kmalloc_track_caller+0x2c6/0x370 [ 1027.468644] ? memcpy+0x39/0x60 [ 1027.469033] parse_opts.part.0+0x1f3/0x340 [ 1027.469514] ? p9_fd_show_options+0x1c0/0x1c0 [ 1027.470038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.470634] ? trace_hardirqs_on+0x5b/0x180 [ 1027.471127] ? kfree+0xd7/0x340 [ 1027.471507] p9_fd_create+0x98/0x4a0 [ 1027.471931] ? p9_conn_create+0x510/0x510 [ 1027.472406] ? p9_client_create+0x798/0x1230 [ 1027.472921] ? kfree+0xd7/0x340 [ 1027.473296] ? do_raw_spin_unlock+0x4f/0x220 [ 1027.473804] p9_client_create+0x7ff/0x1230 [ 1027.474295] ? p9_client_flush+0x430/0x430 [ 1027.474781] ? trace_hardirqs_on+0x5b/0x180 [ 1027.475278] ? lockdep_init_map_type+0x2c7/0x780 [ 1027.475818] ? __raw_spin_lock_init+0x36/0x110 [ 1027.476338] v9fs_session_init+0x1dd/0x1680 [ 1027.476839] ? lock_release+0x680/0x680 [ 1027.477291] ? kmem_cache_alloc_trace+0x151/0x320 [ 1027.477844] ? v9fs_show_options+0x690/0x690 [ 1027.478342] ? trace_hardirqs_on+0x5b/0x180 [ 1027.478833] ? kasan_unpoison_shadow+0x33/0x50 [ 1027.479346] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.479927] v9fs_mount+0x79/0x8f0 [ 1027.480334] ? v9fs_write_inode+0x60/0x60 [ 1027.480805] legacy_get_tree+0x105/0x220 [ 1027.481279] vfs_get_tree+0x8e/0x300 [ 1027.481691] FAULT_INJECTION: forcing a failure. [ 1027.481691] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.481715] path_mount+0x1490/0x21e0 [ 1027.484965] ? strncpy_from_user+0x9e/0x470 [ 1027.485460] ? finish_automount+0xa90/0xa90 [ 1027.485961] ? getname_flags.part.0+0x1dd/0x4f0 [ 1027.486492] ? _copy_from_user+0xfb/0x1b0 [ 1027.486975] __x64_sys_mount+0x282/0x300 [ 1027.487445] ? copy_mnt_ns+0xa00/0xa00 [ 1027.487898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.488507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.489117] do_syscall_64+0x33/0x40 [ 1027.489551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1027.490141] RIP: 0033:0x7fc6f0a40b19 [ 1027.490573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.492702] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.493634] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 1027.494460] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1027.495290] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1027.496110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.496945] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 1027.497798] CPU: 1 PID: 7502 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1027.499548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.501713] Call Trace: [ 1027.502388] dump_stack+0x107/0x167 [ 1027.503324] should_fail.cold+0x5/0xa [ 1027.504301] ? create_object.isra.0+0x3a/0xa30 [ 1027.505479] should_failslab+0x5/0x20 [ 1027.506456] kmem_cache_alloc+0x5b/0x310 [ 1027.507505] create_object.isra.0+0x3a/0xa30 03:25:26 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) (fail_nth: 13) [ 1027.508628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.510117] kmem_cache_alloc+0x159/0x310 [ 1027.511195] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1027.512515] p9_client_rpc+0x220/0x1370 [ 1027.513544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.514888] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1027.516258] ? pipe_poll+0x21b/0x800 [ 1027.517220] ? p9_fd_close+0x4a0/0x4a0 [ 1027.518215] ? wait_for_partner+0x3c0/0x3c0 [ 1027.519318] ? p9_fd_poll+0x1e0/0x2c0 [ 1027.520300] ? p9_fd_create+0x357/0x4a0 [ 1027.521329] ? p9_conn_create+0x510/0x510 [ 1027.522070] 9pnet: Insufficient options for proto=fd [ 1027.522317] ? p9_client_create+0x798/0x1230 [ 1027.522340] ? kfree+0xd7/0x340 [ 1027.524648] ? do_raw_spin_unlock+0x4f/0x220 [ 1027.525675] p9_client_create+0xa76/0x1230 [ 1027.526656] ? p9_client_flush+0x430/0x430 [ 1027.527630] ? trace_hardirqs_on+0x5b/0x180 [ 1027.528623] ? lockdep_init_map_type+0x2c7/0x780 [ 1027.529712] ? __raw_spin_lock_init+0x36/0x110 [ 1027.530769] v9fs_session_init+0x1dd/0x1680 [ 1027.531752] ? lock_release+0x680/0x680 [ 1027.532268] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1027.532664] ? kmem_cache_alloc_trace+0x151/0x320 [ 1027.534811] ? v9fs_show_options+0x690/0x690 [ 1027.535824] ? trace_hardirqs_on+0x5b/0x180 [ 1027.536807] ? kasan_unpoison_shadow+0x33/0x50 [ 1027.537861] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.539038] v9fs_mount+0x79/0x8f0 [ 1027.539859] ? v9fs_write_inode+0x60/0x60 [ 1027.540813] legacy_get_tree+0x105/0x220 03:25:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 29) [ 1027.541756] vfs_get_tree+0x8e/0x300 [ 1027.542752] path_mount+0x1490/0x21e0 [ 1027.543636] ? strncpy_from_user+0x9e/0x470 [ 1027.544635] ? finish_automount+0xa90/0xa90 [ 1027.545633] ? getname_flags.part.0+0x1dd/0x4f0 [ 1027.546575] FAULT_INJECTION: forcing a failure. [ 1027.546575] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.546705] ? _copy_from_user+0xfb/0x1b0 [ 1027.548908] __x64_sys_mount+0x282/0x300 [ 1027.549840] ? copy_mnt_ns+0xa00/0xa00 [ 1027.550739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.551945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.553139] do_syscall_64+0x33/0x40 [ 1027.553995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1027.555175] RIP: 0033:0x7f2ae689eb19 [ 1027.556030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.560247] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.561997] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1027.563628] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1027.565266] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1027.566895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.568528] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1027.570185] CPU: 0 PID: 7504 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1027.570980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.571940] Call Trace: [ 1027.572244] dump_stack+0x107/0x167 [ 1027.572666] should_fail.cold+0x5/0xa [ 1027.573114] ? v9fs_mount+0x5a/0x8f0 [ 1027.573540] should_failslab+0x5/0x20 [ 1027.573978] kmem_cache_alloc_trace+0x55/0x320 [ 1027.574507] ? v9fs_write_inode+0x60/0x60 [ 1027.574987] v9fs_mount+0x5a/0x8f0 [ 1027.575396] ? v9fs_write_inode+0x60/0x60 [ 1027.575874] legacy_get_tree+0x105/0x220 [ 1027.576342] vfs_get_tree+0x8e/0x300 [ 1027.576769] path_mount+0x1490/0x21e0 [ 1027.577225] ? strncpy_from_user+0x9e/0x470 [ 1027.577719] ? finish_automount+0xa90/0xa90 [ 1027.578219] ? getname_flags.part.0+0x1dd/0x4f0 [ 1027.578752] ? _copy_from_user+0xfb/0x1b0 [ 1027.579235] __x64_sys_mount+0x282/0x300 [ 1027.579702] ? copy_mnt_ns+0xa00/0xa00 [ 1027.580156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.580759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.581365] do_syscall_64+0x33/0x40 [ 1027.581793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1027.582385] RIP: 0033:0x7fd388488b19 [ 1027.582813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.584946] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.585824] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1027.586652] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1027.587477] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1027.588299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.589131] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1027.596362] FAULT_INJECTION: forcing a failure. [ 1027.596362] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.597674] CPU: 0 PID: 7500 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1027.598464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.599424] Call Trace: [ 1027.599730] dump_stack+0x107/0x167 [ 1027.600152] should_fail.cold+0x5/0xa [ 1027.600595] ? create_object.isra.0+0x3a/0xa30 [ 1027.601137] should_failslab+0x5/0x20 [ 1027.601576] kmem_cache_alloc+0x5b/0x310 [ 1027.602043] ? legacy_get_tree+0x105/0x220 [ 1027.602530] ? vfs_get_tree+0x8e/0x300 [ 1027.602984] create_object.isra.0+0x3a/0xa30 [ 1027.603491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.604079] __kmalloc_track_caller+0x177/0x370 [ 1027.604615] ? parse_opts.part.0+0x8e/0x340 [ 1027.605129] kstrdup+0x36/0x70 [ 1027.605501] parse_opts.part.0+0x8e/0x340 [ 1027.605986] ? p9_fd_show_options+0x1c0/0x1c0 [ 1027.606507] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.607118] ? quarantine_put+0x8b/0x1a0 [ 1027.607595] ? trace_hardirqs_on+0x5b/0x180 [ 1027.608102] ? kfree+0xd7/0x340 [ 1027.608485] p9_fd_create+0x98/0x4a0 [ 1027.608924] ? p9_conn_create+0x510/0x510 [ 1027.609406] ? p9_client_create+0x798/0x1230 [ 1027.609919] ? kfree+0xd7/0x340 [ 1027.610295] ? do_raw_spin_unlock+0x4f/0x220 [ 1027.610806] p9_client_create+0x7ff/0x1230 [ 1027.611299] ? p9_client_flush+0x430/0x430 [ 1027.611788] ? trace_hardirqs_on+0x5b/0x180 [ 1027.612288] ? lockdep_init_map_type+0x2c7/0x780 [ 1027.612845] ? __raw_spin_lock_init+0x36/0x110 [ 1027.613376] v9fs_session_init+0x1dd/0x1680 [ 1027.613874] ? lock_release+0x680/0x680 [ 1027.614334] ? kmem_cache_alloc_trace+0x151/0x320 [ 1027.614896] ? v9fs_show_options+0x690/0x690 [ 1027.615409] ? trace_hardirqs_on+0x5b/0x180 [ 1027.615906] ? kasan_unpoison_shadow+0x33/0x50 [ 1027.616430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.617028] v9fs_mount+0x79/0x8f0 [ 1027.617440] ? v9fs_write_inode+0x60/0x60 [ 1027.617920] legacy_get_tree+0x105/0x220 [ 1027.618388] vfs_get_tree+0x8e/0x300 [ 1027.618823] path_mount+0x1490/0x21e0 [ 1027.619265] ? strncpy_from_user+0x9e/0x470 [ 1027.619776] ? finish_automount+0xa90/0xa90 [ 1027.620276] ? getname_flags.part.0+0x1dd/0x4f0 [ 1027.620815] ? _copy_from_user+0xfb/0x1b0 [ 1027.621310] __x64_sys_mount+0x282/0x300 [ 1027.621779] ? copy_mnt_ns+0xa00/0xa00 [ 1027.622234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.622848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.623447] do_syscall_64+0x33/0x40 [ 1027.623880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1027.624471] RIP: 0033:0x7f5f5e955b19 [ 1027.624913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.627049] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.627934] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1027.628757] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1027.629608] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1027.630448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.631290] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1027.653077] FAULT_INJECTION: forcing a failure. [ 1027.653077] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.654439] CPU: 0 PID: 7518 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 1027.655246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.656228] Call Trace: [ 1027.656542] dump_stack+0x107/0x167 [ 1027.656986] should_fail.cold+0x5/0xa [ 1027.657438] ? create_object.isra.0+0x3a/0xa30 [ 1027.657977] should_failslab+0x5/0x20 [ 1027.658425] kmem_cache_alloc+0x5b/0x310 [ 1027.658908] create_object.isra.0+0x3a/0xa30 [ 1027.659431] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.660033] __kmalloc_track_caller+0x177/0x370 [ 1027.660581] ? match_number+0xaf/0x1d0 [ 1027.661053] kmemdup_nul+0x2d/0xa0 [ 1027.661472] match_number+0xaf/0x1d0 [ 1027.661912] ? match_u64+0x190/0x190 [ 1027.662351] ? __kmalloc_track_caller+0x2c6/0x370 [ 1027.662920] ? memcpy+0x39/0x60 [ 1027.663312] parse_opts.part.0+0x1f3/0x340 [ 1027.663810] ? p9_fd_show_options+0x1c0/0x1c0 [ 1027.664341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.664968] ? trace_hardirqs_on+0x5b/0x180 [ 1027.665478] ? kfree+0xd7/0x340 [ 1027.665869] p9_fd_create+0x98/0x4a0 [ 1027.666306] ? p9_conn_create+0x510/0x510 [ 1027.666794] ? p9_client_create+0x798/0x1230 [ 1027.667313] ? kfree+0xd7/0x340 [ 1027.667699] ? do_raw_spin_unlock+0x4f/0x220 [ 1027.668220] p9_client_create+0x7ff/0x1230 [ 1027.668722] ? p9_client_flush+0x430/0x430 [ 1027.669228] ? trace_hardirqs_on+0x5b/0x180 [ 1027.669737] ? lockdep_init_map_type+0x2c7/0x780 [ 1027.670299] ? __raw_spin_lock_init+0x36/0x110 [ 1027.670840] v9fs_session_init+0x1dd/0x1680 [ 1027.671348] ? lock_release+0x680/0x680 [ 1027.671821] ? kmem_cache_alloc_trace+0x151/0x320 [ 1027.672391] ? v9fs_show_options+0x690/0x690 [ 1027.672924] ? trace_hardirqs_on+0x5b/0x180 [ 1027.673435] ? kasan_unpoison_shadow+0x33/0x50 [ 1027.673972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.674572] v9fs_mount+0x79/0x8f0 [ 1027.674993] ? v9fs_write_inode+0x60/0x60 [ 1027.675480] legacy_get_tree+0x105/0x220 [ 1027.675957] vfs_get_tree+0x8e/0x300 [ 1027.676398] path_mount+0x1490/0x21e0 [ 1027.676863] ? strncpy_from_user+0x9e/0x470 [ 1027.677371] ? finish_automount+0xa90/0xa90 [ 1027.677882] ? getname_flags.part.0+0x1dd/0x4f0 [ 1027.678432] ? _copy_from_user+0xfb/0x1b0 [ 1027.678926] __x64_sys_mount+0x282/0x300 [ 1027.679405] ? copy_mnt_ns+0xa00/0xa00 [ 1027.679864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.680483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.681102] do_syscall_64+0x33/0x40 [ 1027.681542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1027.682147] RIP: 0033:0x7fc6f0a40b19 [ 1027.682597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.684769] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.685674] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 1027.686507] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1027.687347] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1027.688184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.689030] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:25:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 15) [ 1027.705956] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:25:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 36) [ 1027.741772] FAULT_INJECTION: forcing a failure. [ 1027.741772] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.743182] CPU: 0 PID: 7523 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1027.743992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.744979] Call Trace: [ 1027.745296] dump_stack+0x107/0x167 [ 1027.745724] should_fail.cold+0x5/0xa [ 1027.746173] ? p9_fcall_init+0x97/0x290 [ 1027.746641] should_failslab+0x5/0x20 [ 1027.747089] __kmalloc+0x72/0x390 [ 1027.747504] p9_fcall_init+0x97/0x290 [ 1027.747955] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1027.748557] p9_client_rpc+0x220/0x1370 [ 1027.749034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.749655] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1027.750284] ? pipe_poll+0x21b/0x800 [ 1027.750718] ? p9_fd_close+0x4a0/0x4a0 [ 1027.751178] ? wait_for_partner+0x3c0/0x3c0 [ 1027.751687] ? p9_fd_poll+0x1e0/0x2c0 [ 1027.752135] ? p9_fd_create+0x357/0x4a0 [ 1027.752602] ? p9_conn_create+0x510/0x510 [ 1027.753096] ? p9_client_create+0x798/0x1230 [ 1027.753611] ? kfree+0xd7/0x340 [ 1027.753995] ? do_raw_spin_unlock+0x4f/0x220 [ 1027.754521] p9_client_create+0xa76/0x1230 [ 1027.755023] ? p9_client_flush+0x430/0x430 [ 1027.755522] ? trace_hardirqs_on+0x5b/0x180 [ 1027.756028] ? lockdep_init_map_type+0x2c7/0x780 [ 1027.756586] ? __raw_spin_lock_init+0x36/0x110 [ 1027.757135] v9fs_session_init+0x1dd/0x1680 [ 1027.757649] ? lock_release+0x680/0x680 [ 1027.758121] ? kmem_cache_alloc_trace+0x151/0x320 [ 1027.758688] ? v9fs_show_options+0x690/0x690 [ 1027.759208] ? trace_hardirqs_on+0x5b/0x180 [ 1027.759718] ? kasan_unpoison_shadow+0x33/0x50 [ 1027.760254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.760865] v9fs_mount+0x79/0x8f0 [ 1027.761290] ? v9fs_write_inode+0x60/0x60 [ 1027.761778] legacy_get_tree+0x105/0x220 [ 1027.762255] vfs_get_tree+0x8e/0x300 [ 1027.762694] path_mount+0x1490/0x21e0 [ 1027.763145] ? strncpy_from_user+0x9e/0x470 [ 1027.763652] ? finish_automount+0xa90/0xa90 [ 1027.764160] ? getname_flags.part.0+0x1dd/0x4f0 [ 1027.764708] ? _copy_from_user+0xfb/0x1b0 [ 1027.765207] __x64_sys_mount+0x282/0x300 [ 1027.765682] ? copy_mnt_ns+0xa00/0xa00 [ 1027.766141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.766759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.767367] do_syscall_64+0x33/0x40 [ 1027.767713] FAULT_INJECTION: forcing a failure. [ 1027.767713] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.767803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1027.767818] RIP: 0033:0x7f2ae689eb19 [ 1027.771369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.773544] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.774435] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1027.775268] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1027.776104] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1027.776954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.777791] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1027.778653] CPU: 1 PID: 7524 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1027.780221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.782142] Call Trace: [ 1027.782749] dump_stack+0x107/0x167 [ 1027.783595] should_fail.cold+0x5/0xa [ 1027.784470] ? create_object.isra.0+0x3a/0xa30 [ 1027.785525] should_failslab+0x5/0x20 [ 1027.786390] kmem_cache_alloc+0x5b/0x310 [ 1027.787319] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1027.788507] create_object.isra.0+0x3a/0xa30 [ 1027.789524] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.790697] kmem_cache_alloc_trace+0x151/0x320 [ 1027.791769] ? v9fs_write_inode+0x60/0x60 [ 1027.792719] v9fs_mount+0x5a/0x8f0 [ 1027.793550] ? v9fs_write_inode+0x60/0x60 [ 1027.794504] legacy_get_tree+0x105/0x220 [ 1027.795446] vfs_get_tree+0x8e/0x300 [ 1027.796312] path_mount+0x1490/0x21e0 [ 1027.797209] ? strncpy_from_user+0x9e/0x470 [ 1027.798211] ? finish_automount+0xa90/0xa90 [ 1027.799215] ? getname_flags.part.0+0x1dd/0x4f0 [ 1027.800295] ? _copy_from_user+0xfb/0x1b0 [ 1027.801284] __x64_sys_mount+0x282/0x300 [ 1027.802224] ? copy_mnt_ns+0xa00/0xa00 [ 1027.803131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1027.804356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.805495] do_syscall_64+0x33/0x40 [ 1027.806361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1027.807558] RIP: 0033:0x7fd388488b19 [ 1027.808418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.812598] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.814376] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1027.816044] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1027.817708] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1027.819373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.821042] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:25:26 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:25:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 37) 03:25:26 executing program 4: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef", 0x3c, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="17d8890007000000f05defc71402a8937adf1ee343ff0400a39d47735d31931898763772790000000000001b50c76b1069b134c4c27b05ac57286cb12984515ecdf8cabc3a9e9502375c6b9efe87aa35fd2e485fe34c0198998a4800253bc0270dcd41e817c9cb28b2cd5feadfbe6f90d27abb068c93be4d6af17548031f03e68ff0f79ac9257b019967e10a83f1e1d5270d35f89531470ef4844404000000000000c50900009d7e8455e26fb0d7a24f9a02da0a7039d40358b0a9fec1accc6e2272c87f93867ec21b5c42b9a848f823c9cc0f8e9e259a20b82cd0024053ff71a4c618629c4814f3a966670cd44c1dbda3098d936b8d4aae73d0a073837b6a8749827dcdfe9c68366b3f368af1bd1ab4917ab7007f2107058f93ca73a970b8b46f7421354eefe706c8f83f801a308f257a93380cc2"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 28) 03:25:26 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1027.998870] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1028.008625] FAULT_INJECTION: forcing a failure. [ 1028.008625] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.011104] CPU: 0 PID: 7534 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1028.012594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1028.014413] Call Trace: [ 1028.014990] dump_stack+0x107/0x167 [ 1028.015787] should_fail.cold+0x5/0xa [ 1028.016619] ? create_object.isra.0+0x3a/0xa30 [ 1028.017619] should_failslab+0x5/0x20 [ 1028.018447] kmem_cache_alloc+0x5b/0x310 [ 1028.019336] create_object.isra.0+0x3a/0xa30 [ 1028.020267] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1028.021333] __kmalloc+0x16e/0x390 [ 1028.022087] p9_fcall_init+0x97/0x290 [ 1028.022883] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1028.023964] p9_client_rpc+0x220/0x1370 [ 1028.024787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.025890] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1028.026997] ? pipe_poll+0x21b/0x800 [ 1028.027760] ? p9_fd_close+0x4a0/0x4a0 [ 1028.028557] ? wait_for_partner+0x3c0/0x3c0 [ 1028.029472] ? p9_fd_poll+0x1e0/0x2c0 [ 1028.030271] ? p9_fd_create+0x357/0x4a0 [ 1028.031081] ? p9_conn_create+0x510/0x510 [ 1028.031972] ? p9_client_create+0x798/0x1230 [ 1028.032892] ? kfree+0xd7/0x340 [ 1028.033562] ? do_raw_spin_unlock+0x4f/0x220 [ 1028.034473] p9_client_create+0xa76/0x1230 [ 1028.035348] ? p9_client_flush+0x430/0x430 [ 1028.036214] ? trace_hardirqs_on+0x5b/0x180 [ 1028.037103] ? lockdep_init_map_type+0x2c7/0x780 [ 1028.038076] ? __raw_spin_lock_init+0x36/0x110 [ 1028.039011] v9fs_session_init+0x1dd/0x1680 [ 1028.039901] ? lock_release+0x680/0x680 [ 1028.040741] ? kmem_cache_alloc_trace+0x151/0x320 [ 1028.041747] ? v9fs_show_options+0x690/0x690 [ 1028.042677] ? trace_hardirqs_on+0x5b/0x180 [ 1028.043558] ? kasan_unpoison_shadow+0x33/0x50 [ 1028.044496] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1028.045563] v9fs_mount+0x79/0x8f0 [ 1028.046310] ? v9fs_write_inode+0x60/0x60 [ 1028.047180] legacy_get_tree+0x105/0x220 [ 1028.048020] vfs_get_tree+0x8e/0x300 [ 1028.048794] path_mount+0x1490/0x21e0 [ 1028.049585] ? strncpy_from_user+0x9e/0x470 [ 1028.050473] ? finish_automount+0xa90/0xa90 [ 1028.051384] ? getname_flags.part.0+0x1dd/0x4f0 [ 1028.052349] ? _copy_from_user+0xfb/0x1b0 [ 1028.053218] __x64_sys_mount+0x282/0x300 [ 1028.054064] ? copy_mnt_ns+0xa00/0xa00 [ 1028.054865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.055955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1028.057034] do_syscall_64+0x33/0x40 [ 1028.057815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1028.058870] RIP: 0033:0x7f2ae689eb19 [ 1028.059642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1028.063484] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1028.065085] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1028.066564] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1028.067876] FAULT_INJECTION: forcing a failure. [ 1028.067876] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.068039] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1028.068051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1028.068062] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1028.068623] FAULT_INJECTION: forcing a failure. [ 1028.068623] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.070532] CPU: 1 PID: 7536 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 1028.078586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1028.080306] Call Trace: [ 1028.080864] dump_stack+0x107/0x167 [ 1028.081620] should_fail.cold+0x5/0xa [ 1028.082412] should_failslab+0x5/0x20 [ 1028.083206] __kmalloc_track_caller+0x79/0x370 [ 1028.084157] ? match_number+0xaf/0x1d0 [ 1028.084975] ? kfree+0xd7/0x340 [ 1028.085661] kmemdup_nul+0x2d/0xa0 [ 1028.086402] match_number+0xaf/0x1d0 [ 1028.087172] ? match_u64+0x190/0x190 [ 1028.087944] ? __kmalloc_track_caller+0x2c6/0x370 [ 1028.088953] ? memcpy+0x39/0x60 [ 1028.089642] parse_opts.part.0+0x1f3/0x340 [ 1028.090514] ? p9_fd_show_options+0x1c0/0x1c0 [ 1028.091446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.092524] ? trace_hardirqs_on+0x5b/0x180 [ 1028.093432] ? kfree+0xd7/0x340 [ 1028.094123] p9_fd_create+0x98/0x4a0 [ 1028.094893] ? p9_conn_create+0x510/0x510 [ 1028.095750] ? p9_client_create+0x798/0x1230 [ 1028.096683] ? kfree+0xd7/0x340 [ 1028.097373] ? do_raw_spin_unlock+0x4f/0x220 [ 1028.098290] p9_client_create+0x7ff/0x1230 [ 1028.099176] ? p9_client_flush+0x430/0x430 [ 1028.100048] ? trace_hardirqs_on+0x5b/0x180 [ 1028.100948] ? lockdep_init_map_type+0x2c7/0x780 [ 1028.101924] ? __raw_spin_lock_init+0x36/0x110 [ 1028.102875] v9fs_session_init+0x1dd/0x1680 [ 1028.103764] ? lock_release+0x680/0x680 [ 1028.104602] ? kmem_cache_alloc_trace+0x151/0x320 [ 1028.105605] ? v9fs_show_options+0x690/0x690 [ 1028.106524] ? trace_hardirqs_on+0x5b/0x180 [ 1028.107416] ? kasan_unpoison_shadow+0x33/0x50 [ 1028.108353] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1028.109406] v9fs_mount+0x79/0x8f0 [ 1028.110150] ? v9fs_write_inode+0x60/0x60 [ 1028.111003] legacy_get_tree+0x105/0x220 [ 1028.111842] vfs_get_tree+0x8e/0x300 [ 1028.112617] path_mount+0x1490/0x21e0 [ 1028.113417] ? strncpy_from_user+0x9e/0x470 [ 1028.114305] ? finish_automount+0xa90/0xa90 [ 1028.115206] ? getname_flags.part.0+0x1dd/0x4f0 [ 1028.116175] ? _copy_from_user+0xfb/0x1b0 [ 1028.117050] __x64_sys_mount+0x282/0x300 [ 1028.117891] ? copy_mnt_ns+0xa00/0xa00 [ 1028.118704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.119794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1028.120874] do_syscall_64+0x33/0x40 [ 1028.121648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1028.122716] RIP: 0033:0x7fc6f0a40b19 [ 1028.123484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1028.127333] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1028.128910] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 1028.130390] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1028.131859] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1028.133336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1028.134805] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 [ 1028.136308] CPU: 0 PID: 7531 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1028.137639] 9pnet: Insufficient options for proto=fd [ 1028.137768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1028.140550] Call Trace: [ 1028.141116] dump_stack+0x107/0x167 [ 1028.141880] should_fail.cold+0x5/0xa [ 1028.142675] should_failslab+0x5/0x20 [ 1028.143463] __kmalloc_track_caller+0x79/0x370 [ 1028.144411] ? match_number+0xaf/0x1d0 03:25:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 30) [ 1028.145229] kmemdup_nul+0x2d/0xa0 [ 1028.146175] match_number+0xaf/0x1d0 [ 1028.146926] ? match_u64+0x190/0x190 [ 1028.147684] ? __kmalloc_track_caller+0x2c6/0x370 [ 1028.148664] ? memcpy+0x39/0x60 [ 1028.149426] parse_opts.part.0+0x1f3/0x340 [ 1028.150303] ? p9_fd_show_options+0x1c0/0x1c0 [ 1028.151207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.152294] ? trace_hardirqs_on+0x5b/0x180 [ 1028.153216] ? kfree+0xd7/0x340 [ 1028.153904] p9_fd_create+0x98/0x4a0 [ 1028.154786] ? p9_conn_create+0x510/0x510 [ 1028.155647] ? p9_client_create+0x798/0x1230 [ 1028.156565] ? kfree+0xd7/0x340 [ 1028.157271] ? do_raw_spin_unlock+0x4f/0x220 [ 1028.158194] p9_client_create+0x7ff/0x1230 [ 1028.159097] ? p9_client_flush+0x430/0x430 [ 1028.159952] ? trace_hardirqs_on+0x5b/0x180 [ 1028.160859] ? lockdep_init_map_type+0x2c7/0x780 [ 1028.161856] ? __raw_spin_lock_init+0x36/0x110 [ 1028.162811] v9fs_session_init+0x1dd/0x1680 [ 1028.163705] ? lock_release+0x680/0x680 [ 1028.164540] ? kmem_cache_alloc_trace+0x151/0x320 [ 1028.165565] ? v9fs_show_options+0x690/0x690 [ 1028.166484] ? trace_hardirqs_on+0x5b/0x180 [ 1028.167381] ? kasan_unpoison_shadow+0x33/0x50 [ 1028.168331] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1028.169424] v9fs_mount+0x79/0x8f0 [ 1028.170168] ? v9fs_write_inode+0x60/0x60 [ 1028.171028] legacy_get_tree+0x105/0x220 [ 1028.171888] vfs_get_tree+0x8e/0x300 [ 1028.172661] path_mount+0x1490/0x21e0 [ 1028.173466] ? strncpy_from_user+0x9e/0x470 [ 1028.174360] ? finish_automount+0xa90/0xa90 [ 1028.175233] ? getname_flags.part.0+0x1dd/0x4f0 [ 1028.176194] ? _copy_from_user+0xfb/0x1b0 [ 1028.177074] __x64_sys_mount+0x282/0x300 [ 1028.177914] ? copy_mnt_ns+0xa00/0xa00 [ 1028.178729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1028.179828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1028.180903] do_syscall_64+0x33/0x40 [ 1028.181672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1028.182736] RIP: 0033:0x7f5f5e955b19 [ 1028.183504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1028.187314] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1028.188893] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1028.190376] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1028.191857] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1028.193342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1028.194833] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1028.211340] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1028.223877] 9pnet: Insufficient options for proto=fd 03:25:40 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:25:40 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 38) 03:25:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 29) 03:25:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 1) 03:25:40 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 1) 03:25:40 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 16) 03:25:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 31) [ 1041.761580] FAULT_INJECTION: forcing a failure. [ 1041.761580] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.764251] CPU: 0 PID: 7557 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1041.765681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1041.767381] Call Trace: [ 1041.767922] dump_stack+0x107/0x167 [ 1041.768676] should_fail.cold+0x5/0xa [ 1041.769477] should_failslab+0x5/0x20 [ 1041.770253] __kmalloc_track_caller+0x79/0x370 [ 1041.771193] ? strndup_user+0x74/0xe0 [ 1041.771987] memdup_user+0x22/0xd0 [ 1041.772716] strndup_user+0x74/0xe0 [ 1041.773493] __x64_sys_mount+0x133/0x300 [ 1041.774334] ? copy_mnt_ns+0xa00/0xa00 [ 1041.775125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.776220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1041.777302] do_syscall_64+0x33/0x40 [ 1041.778067] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1041.779125] RIP: 0033:0x7f52d4da5b19 [ 1041.779898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1041.783702] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1041.785669] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1041.787511] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1041.789364] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1041.791197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.792893] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1041.797897] FAULT_INJECTION: forcing a failure. [ 1041.797897] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.798977] FAULT_INJECTION: forcing a failure. [ 1041.798977] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.800280] CPU: 0 PID: 7558 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1041.800300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1041.805708] Call Trace: [ 1041.806248] dump_stack+0x107/0x167 [ 1041.806990] should_fail.cold+0x5/0xa [ 1041.807763] should_failslab+0x5/0x20 [ 1041.808539] __kmalloc_track_caller+0x79/0x370 [ 1041.809477] ? strndup_user+0x74/0xe0 [ 1041.810259] memdup_user+0x22/0xd0 [ 1041.810990] strndup_user+0x74/0xe0 [ 1041.811729] __x64_sys_mount+0x133/0x300 [ 1041.812556] ? copy_mnt_ns+0xa00/0xa00 [ 1041.813362] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.814429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1041.815481] do_syscall_64+0x33/0x40 [ 1041.816240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1041.817299] RIP: 0033:0x7f8718ffcb19 [ 1041.818052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1041.821807] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1041.823349] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1041.824823] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1041.826282] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1041.827728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.829195] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1041.830678] CPU: 1 PID: 7559 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1041.832146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1041.833904] Call Trace: [ 1041.834466] dump_stack+0x107/0x167 [ 1041.835231] should_fail.cold+0x5/0xa [ 1041.836032] should_failslab+0x5/0x20 [ 1041.836838] __kmalloc_track_caller+0x79/0x370 [ 1041.837256] FAULT_INJECTION: forcing a failure. [ 1041.837256] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.837807] ? v9fs_session_init+0xa7/0x1680 [ 1041.837828] ? kernel_text_address+0xf2/0x120 [ 1041.837849] kstrdup+0x36/0x70 [ 1041.842568] v9fs_session_init+0xa7/0x1680 [ 1041.843454] ? lock_release+0x680/0x680 [ 1041.844279] ? find_held_lock+0x2c/0x110 [ 1041.845154] ? kmem_cache_alloc_trace+0x151/0x320 [ 1041.846158] ? v9fs_show_options+0x690/0x690 [ 1041.847097] ? trace_hardirqs_on+0x5b/0x180 [ 1041.847992] ? kasan_unpoison_shadow+0x33/0x50 [ 1041.848948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1041.850017] v9fs_mount+0x79/0x8f0 [ 1041.850763] ? v9fs_write_inode+0x60/0x60 [ 1041.851631] legacy_get_tree+0x105/0x220 [ 1041.852484] vfs_get_tree+0x8e/0x300 [ 1041.853268] path_mount+0x1490/0x21e0 [ 1041.854070] ? strncpy_from_user+0x9e/0x470 [ 1041.854976] ? finish_automount+0xa90/0xa90 [ 1041.855878] ? getname_flags.part.0+0x1dd/0x4f0 [ 1041.856848] ? _copy_from_user+0xfb/0x1b0 [ 1041.857728] __x64_sys_mount+0x282/0x300 [ 1041.858576] ? copy_mnt_ns+0xa00/0xa00 [ 1041.859394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.860490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1041.861581] do_syscall_64+0x33/0x40 [ 1041.862360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1041.863430] RIP: 0033:0x7fd388488b19 [ 1041.864208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1041.868070] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1041.869687] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1041.871182] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1041.872682] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1041.874180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1041.875661] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1041.877179] CPU: 0 PID: 7556 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1041.878681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1041.880389] Call Trace: [ 1041.880928] dump_stack+0x107/0x167 [ 1041.881694] should_fail.cold+0x5/0xa [ 1041.882484] ? p9_fcall_init+0x97/0x290 [ 1041.883298] should_failslab+0x5/0x20 [ 1041.884075] __kmalloc+0x72/0x390 [ 1041.884496] FAULT_INJECTION: forcing a failure. [ 1041.884496] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.884792] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1041.888439] p9_fcall_init+0x97/0x290 [ 1041.889475] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1041.890810] p9_client_rpc+0x220/0x1370 [ 1041.891845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.893231] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1041.894583] ? pipe_poll+0x21b/0x800 [ 1041.895364] ? p9_fd_close+0x4a0/0x4a0 [ 1041.896171] ? wait_for_partner+0x3c0/0x3c0 [ 1041.897092] ? p9_fd_poll+0x1e0/0x2c0 [ 1041.898051] ? p9_fd_create+0x357/0x4a0 [ 1041.898892] ? p9_conn_create+0x510/0x510 [ 1041.899740] ? p9_client_create+0x798/0x1230 [ 1041.900636] ? kfree+0xd7/0x340 [ 1041.901323] ? do_raw_spin_unlock+0x4f/0x220 [ 1041.902236] p9_client_create+0xa76/0x1230 [ 1041.903114] ? p9_client_flush+0x430/0x430 [ 1041.903987] ? trace_hardirqs_on+0x5b/0x180 [ 1041.904872] ? lockdep_init_map_type+0x2c7/0x780 [ 1041.905845] ? __raw_spin_lock_init+0x36/0x110 [ 1041.906801] v9fs_session_init+0x1dd/0x1680 [ 1041.907760] ? lock_release+0x680/0x680 [ 1041.908642] ? kmem_cache_alloc_trace+0x151/0x320 [ 1041.909727] ? v9fs_show_options+0x690/0x690 [ 1041.910706] ? trace_hardirqs_on+0x5b/0x180 [ 1041.911657] ? kasan_unpoison_shadow+0x33/0x50 [ 1041.912672] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1041.913799] v9fs_mount+0x79/0x8f0 [ 1041.914602] ? v9fs_write_inode+0x60/0x60 [ 1041.915500] legacy_get_tree+0x105/0x220 [ 1041.916401] vfs_get_tree+0x8e/0x300 [ 1041.917244] path_mount+0x1490/0x21e0 [ 1041.918082] ? strncpy_from_user+0x9e/0x470 [ 1041.919038] ? finish_automount+0xa90/0xa90 [ 1041.919983] ? getname_flags.part.0+0x1dd/0x4f0 [ 1041.921031] ? _copy_from_user+0xfb/0x1b0 [ 1041.921965] __x64_sys_mount+0x282/0x300 [ 1041.922853] ? copy_mnt_ns+0xa00/0xa00 [ 1041.923702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.924889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1041.926050] do_syscall_64+0x33/0x40 [ 1041.926879] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1041.928031] RIP: 0033:0x7f2ae689eb19 [ 1041.928851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1041.932907] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1041.934588] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1041.936211] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1041.937806] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1041.939384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1041.940970] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1041.942599] CPU: 1 PID: 7560 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1041.944051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1041.945325] FAULT_INJECTION: forcing a failure. [ 1041.945325] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.945814] Call Trace: [ 1041.945838] dump_stack+0x107/0x167 [ 1041.945864] should_fail.cold+0x5/0xa [ 1041.950349] should_failslab+0x5/0x20 [ 1041.951146] __kmalloc_track_caller+0x79/0x370 [ 1041.952098] ? match_number+0xaf/0x1d0 [ 1041.952916] kmemdup_nul+0x2d/0xa0 [ 1041.953673] match_number+0xaf/0x1d0 [ 1041.954449] ? match_u64+0x190/0x190 [ 1041.955227] ? __kmalloc_track_caller+0x2c6/0x370 [ 1041.956244] ? memcpy+0x39/0x60 [ 1041.956939] parse_opts.part.0+0x1f3/0x340 [ 1041.957829] ? p9_fd_show_options+0x1c0/0x1c0 [ 1041.958786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.959882] ? trace_hardirqs_on+0x5b/0x180 [ 1041.960785] ? kfree+0xd7/0x340 [ 1041.961498] p9_fd_create+0x98/0x4a0 [ 1041.962278] ? p9_conn_create+0x510/0x510 [ 1041.963150] ? p9_client_create+0x798/0x1230 [ 1041.964072] ? kfree+0xd7/0x340 [ 1041.964760] ? do_raw_spin_unlock+0x4f/0x220 [ 1041.965700] p9_client_create+0x7ff/0x1230 [ 1041.966605] ? p9_client_flush+0x430/0x430 [ 1041.967491] ? trace_hardirqs_on+0x5b/0x180 [ 1041.968402] ? lockdep_init_map_type+0x2c7/0x780 [ 1041.969405] ? __raw_spin_lock_init+0x36/0x110 [ 1041.970366] v9fs_session_init+0x1dd/0x1680 [ 1041.971271] ? lock_release+0x680/0x680 [ 1041.972114] ? kmem_cache_alloc_trace+0x151/0x320 [ 1041.973135] ? v9fs_show_options+0x690/0x690 [ 1041.974072] ? trace_hardirqs_on+0x5b/0x180 [ 1041.974978] ? kasan_unpoison_shadow+0x33/0x50 [ 1041.975941] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1041.977015] v9fs_mount+0x79/0x8f0 [ 1041.977764] ? v9fs_write_inode+0x60/0x60 [ 1041.978633] legacy_get_tree+0x105/0x220 [ 1041.979481] vfs_get_tree+0x8e/0x300 [ 1041.980260] path_mount+0x1490/0x21e0 [ 1041.981071] ? strncpy_from_user+0x9e/0x470 [ 1041.981976] ? finish_automount+0xa90/0xa90 [ 1041.982881] ? getname_flags.part.0+0x1dd/0x4f0 [ 1041.983859] ? _copy_from_user+0xfb/0x1b0 [ 1041.984743] __x64_sys_mount+0x282/0x300 [ 1041.985600] ? copy_mnt_ns+0xa00/0xa00 [ 1041.986424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1041.987526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1041.988613] do_syscall_64+0x33/0x40 [ 1041.989406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1041.990492] RIP: 0033:0x7f5f5e955b19 [ 1041.991276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1041.995142] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1041.996737] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1041.998253] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1041.999754] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.001281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.002775] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1042.004311] CPU: 0 PID: 7562 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 1042.005896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.007801] Call Trace: [ 1042.008394] dump_stack+0x107/0x167 [ 1042.009224] should_fail.cold+0x5/0xa [ 1042.010087] ? create_object.isra.0+0x3a/0xa30 [ 1042.011124] should_failslab+0x5/0x20 [ 1042.011985] kmem_cache_alloc+0x5b/0x310 [ 1042.012892] create_object.isra.0+0x3a/0xa30 [ 1042.013892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.015013] __kmalloc_track_caller+0x177/0x370 [ 1042.016034] ? match_number+0xaf/0x1d0 [ 1042.016915] kmemdup_nul+0x2d/0xa0 [ 1042.017737] match_number+0xaf/0x1d0 [ 1042.018578] ? match_u64+0x190/0x190 [ 1042.019404] ? __kmalloc_track_caller+0x2c6/0x370 [ 1042.020461] ? memcpy+0x39/0x60 [ 1042.021227] parse_opts.part.0+0x1f3/0x340 [ 1042.021659] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1042.022183] ? p9_fd_show_options+0x1c0/0x1c0 [ 1042.022209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.022235] ? trace_hardirqs_on+0x5b/0x180 [ 1042.027242] ? kfree+0xd7/0x340 [ 1042.027990] p9_fd_create+0x98/0x4a0 [ 1042.028819] ? p9_conn_create+0x510/0x510 [ 1042.029766] ? p9_client_create+0x798/0x1230 [ 1042.030755] ? kfree+0xd7/0x340 [ 1042.031502] ? do_raw_spin_unlock+0x4f/0x220 [ 1042.032489] p9_client_create+0x7ff/0x1230 [ 1042.033451] ? p9_client_flush+0x430/0x430 [ 1042.034394] ? trace_hardirqs_on+0x5b/0x180 [ 1042.035350] ? lockdep_init_map_type+0x2c7/0x780 [ 1042.036405] ? __raw_spin_lock_init+0x36/0x110 [ 1042.037432] v9fs_session_init+0x1dd/0x1680 [ 1042.038387] ? lock_release+0x680/0x680 [ 1042.039273] ? kmem_cache_alloc_trace+0x151/0x320 [ 1042.040330] ? v9fs_show_options+0x690/0x690 [ 1042.041341] ? trace_hardirqs_on+0x5b/0x180 [ 1042.042306] ? kasan_unpoison_shadow+0x33/0x50 [ 1042.043322] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.044458] v9fs_mount+0x79/0x8f0 [ 1042.045260] ? v9fs_write_inode+0x60/0x60 [ 1042.046192] legacy_get_tree+0x105/0x220 [ 1042.047100] vfs_get_tree+0x8e/0x300 [ 1042.047917] path_mount+0x1490/0x21e0 [ 1042.048770] ? strncpy_from_user+0x9e/0x470 03:25:40 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 2) [ 1042.049752] ? finish_automount+0xa90/0xa90 [ 1042.050928] ? getname_flags.part.0+0x1dd/0x4f0 [ 1042.051957] ? _copy_from_user+0xfb/0x1b0 [ 1042.052881] __x64_sys_mount+0x282/0x300 [ 1042.053807] ? copy_mnt_ns+0xa00/0xa00 [ 1042.054680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.055868] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.057010] do_syscall_64+0x33/0x40 [ 1042.057841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.058966] RIP: 0033:0x7fc6f0a40b19 [ 1042.059784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.063900] RSP: 002b:00007fc6edfb6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.065595] RAX: ffffffffffffffda RBX: 00007fc6f0b53f60 RCX: 00007fc6f0a40b19 [ 1042.067178] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1042.068768] RBP: 00007fc6edfb61d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.070344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.071946] R13: 00007ffe0fccef1f R14: 00007fc6edfb6300 R15: 0000000000022000 03:25:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 2) [ 1042.079825] 9pnet: Insufficient options for proto=fd 03:25:40 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 17) [ 1042.138406] FAULT_INJECTION: forcing a failure. [ 1042.138406] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.140946] CPU: 1 PID: 7571 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1042.142413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.144162] Call Trace: [ 1042.144720] dump_stack+0x107/0x167 [ 1042.145495] should_fail.cold+0x5/0xa [ 1042.146295] ? create_object.isra.0+0x3a/0xa30 [ 1042.147252] should_failslab+0x5/0x20 [ 1042.148056] kmem_cache_alloc+0x5b/0x310 [ 1042.148916] create_object.isra.0+0x3a/0xa30 [ 1042.149839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.150910] __kmalloc_track_caller+0x177/0x370 [ 1042.151880] ? strndup_user+0x74/0xe0 [ 1042.152682] memdup_user+0x22/0xd0 [ 1042.153432] strndup_user+0x74/0xe0 [ 1042.154202] __x64_sys_mount+0x133/0x300 [ 1042.155051] ? copy_mnt_ns+0xa00/0xa00 [ 1042.155879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.156993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.158079] do_syscall_64+0x33/0x40 [ 1042.158861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.159942] RIP: 0033:0x7f8718ffcb19 [ 1042.160720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.164595] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.166203] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1042.167700] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1042.167828] FAULT_INJECTION: forcing a failure. [ 1042.167828] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.169204] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.169216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.169226] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1042.176624] CPU: 0 PID: 7573 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1042.178143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.179996] Call Trace: [ 1042.180592] dump_stack+0x107/0x167 [ 1042.181422] should_fail.cold+0x5/0xa [ 1042.182277] ? create_object.isra.0+0x3a/0xa30 [ 1042.183294] should_failslab+0x5/0x20 [ 1042.184162] kmem_cache_alloc+0x5b/0x310 [ 1042.185112] create_object.isra.0+0x3a/0xa30 [ 1042.186082] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.187209] __kmalloc_track_caller+0x177/0x370 [ 1042.188269] ? strndup_user+0x74/0xe0 [ 1042.189126] memdup_user+0x22/0xd0 03:25:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 30) [ 1042.189955] strndup_user+0x74/0xe0 [ 1042.190929] __x64_sys_mount+0x133/0x300 [ 1042.191853] ? copy_mnt_ns+0xa00/0xa00 [ 1042.192743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 03:25:41 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1042.193938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.195171] do_syscall_64+0x33/0x40 [ 1042.195983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.197122] RIP: 0033:0x7f52d4da5b19 [ 1042.197930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.202048] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.203725] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1042.205321] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1042.206879] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.208469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.210053] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1042.220296] FAULT_INJECTION: forcing a failure. [ 1042.220296] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.222783] CPU: 0 PID: 7574 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1042.224316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 03:25:41 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1042.226170] Call Trace: [ 1042.226958] dump_stack+0x107/0x167 [ 1042.227774] should_fail.cold+0x5/0xa [ 1042.228626] ? create_object.isra.0+0x3a/0xa30 [ 1042.229666] should_failslab+0x5/0x20 [ 1042.230512] kmem_cache_alloc+0x5b/0x310 [ 1042.231411] create_object.isra.0+0x3a/0xa30 [ 1042.232381] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.233523] __kmalloc_track_caller+0x177/0x370 [ 1042.234536] ? v9fs_session_init+0xa7/0x1680 [ 1042.235522] ? kernel_text_address+0xf2/0x120 [ 1042.236495] kstrdup+0x36/0x70 [ 1042.237229] v9fs_session_init+0xa7/0x1680 [ 1042.238174] ? lock_release+0x680/0x680 [ 1042.239057] ? find_held_lock+0x2c/0x110 [ 1042.239971] ? kmem_cache_alloc_trace+0x151/0x320 [ 1042.241050] ? v9fs_show_options+0x690/0x690 [ 1042.242011] ? trace_hardirqs_on+0x5b/0x180 [ 1042.242973] ? kasan_unpoison_shadow+0x33/0x50 [ 1042.243964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.245092] v9fs_mount+0x79/0x8f0 [ 1042.245882] ? v9fs_write_inode+0x60/0x60 [ 1042.246799] legacy_get_tree+0x105/0x220 [ 1042.247700] vfs_get_tree+0x8e/0x300 [ 1042.248509] path_mount+0x1490/0x21e0 [ 1042.249355] ? strncpy_from_user+0x9e/0x470 [ 1042.250320] ? finish_automount+0xa90/0xa90 [ 1042.251277] ? getname_flags.part.0+0x1dd/0x4f0 [ 1042.252317] ? _copy_from_user+0xfb/0x1b0 [ 1042.253253] __x64_sys_mount+0x282/0x300 [ 1042.254143] ? copy_mnt_ns+0xa00/0xa00 [ 1042.255001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.256170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.257300] do_syscall_64+0x33/0x40 [ 1042.258133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.259246] RIP: 0033:0x7fd388488b19 [ 1042.260082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.264084] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.265780] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1042.267354] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1042.268937] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.270504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.272087] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1042.295117] FAULT_INJECTION: forcing a failure. [ 1042.295117] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.297504] CPU: 1 PID: 7578 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1042.298951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.300685] Call Trace: [ 1042.301261] dump_stack+0x107/0x167 [ 1042.302031] should_fail.cold+0x5/0xa [ 1042.302848] should_failslab+0x5/0x20 [ 1042.303647] __kmalloc_track_caller+0x79/0x370 [ 1042.304606] ? match_number+0xaf/0x1d0 [ 1042.305433] kmemdup_nul+0x2d/0xa0 [ 1042.306177] match_number+0xaf/0x1d0 [ 1042.306955] ? match_u64+0x190/0x190 [ 1042.307727] ? __kmalloc_track_caller+0x2c6/0x370 [ 1042.308697] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1042.308739] ? memcpy+0x39/0x60 [ 1042.311468] parse_opts.part.0+0x1f3/0x340 [ 1042.312355] ? p9_fd_show_options+0x1c0/0x1c0 [ 1042.313315] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.314406] ? trace_hardirqs_on+0x5b/0x180 [ 1042.315307] ? kfree+0xd7/0x340 [ 1042.316009] p9_fd_create+0x98/0x4a0 [ 1042.316786] ? p9_conn_create+0x510/0x510 [ 1042.317676] ? p9_client_create+0x798/0x1230 [ 1042.318599] ? kfree+0xd7/0x340 [ 1042.319288] ? do_raw_spin_unlock+0x4f/0x220 [ 1042.320220] p9_client_create+0x7ff/0x1230 [ 1042.321138] ? p9_client_flush+0x430/0x430 [ 1042.322026] ? trace_hardirqs_on+0x5b/0x180 [ 1042.322923] ? lockdep_init_map_type+0x2c7/0x780 [ 1042.323920] ? __raw_spin_lock_init+0x36/0x110 [ 1042.324877] v9fs_session_init+0x1dd/0x1680 [ 1042.325794] ? lock_release+0x680/0x680 [ 1042.326637] ? kmem_cache_alloc_trace+0x151/0x320 [ 1042.327654] ? v9fs_show_options+0x690/0x690 [ 1042.328585] ? trace_hardirqs_on+0x5b/0x180 [ 1042.329491] ? kasan_unpoison_shadow+0x33/0x50 [ 1042.330442] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.331509] v9fs_mount+0x79/0x8f0 [ 1042.332260] ? v9fs_write_inode+0x60/0x60 [ 1042.333151] legacy_get_tree+0x105/0x220 [ 1042.334011] vfs_get_tree+0x8e/0x300 [ 1042.334782] path_mount+0x1490/0x21e0 [ 1042.335584] ? strncpy_from_user+0x9e/0x470 [ 1042.336482] ? finish_automount+0xa90/0xa90 [ 1042.337391] ? getname_flags.part.0+0x1dd/0x4f0 [ 1042.338377] ? _copy_from_user+0xfb/0x1b0 [ 1042.339246] __x64_sys_mount+0x282/0x300 [ 1042.340093] ? copy_mnt_ns+0xa00/0xa00 [ 1042.340905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.342014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.343099] do_syscall_64+0x33/0x40 [ 1042.343876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.344953] RIP: 0033:0x7f5f5e955b19 [ 1042.345750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.349611] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.351205] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1042.352685] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1042.354180] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.355677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.357168] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1042.390181] 9pnet: Insufficient options for proto=fd 03:25:41 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 39) 03:25:41 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1042.442798] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1042.448185] FAULT_INJECTION: forcing a failure. [ 1042.448185] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.450571] CPU: 1 PID: 7587 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1042.451974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.453681] Call Trace: [ 1042.454228] dump_stack+0x107/0x167 [ 1042.454977] should_fail.cold+0x5/0xa [ 1042.455759] ? create_object.isra.0+0x3a/0xa30 [ 1042.456697] should_failslab+0x5/0x20 [ 1042.457498] kmem_cache_alloc+0x5b/0x310 [ 1042.458334] create_object.isra.0+0x3a/0xa30 [ 1042.459232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.460276] __kmalloc+0x16e/0x390 [ 1042.461027] p9_fcall_init+0x97/0x290 [ 1042.461804] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1042.462849] p9_client_rpc+0x220/0x1370 [ 1042.463658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.464742] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1042.465853] ? pipe_poll+0x21b/0x800 [ 1042.466617] ? p9_fd_close+0x4a0/0x4a0 [ 1042.467454] ? wait_for_partner+0x3c0/0x3c0 [ 1042.468395] ? p9_fd_poll+0x1e0/0x2c0 [ 1042.469180] ? p9_fd_create+0x357/0x4a0 [ 1042.469993] ? p9_conn_create+0x510/0x510 [ 1042.470835] ? p9_client_create+0x798/0x1230 [ 1042.471773] ? kfree+0xd7/0x340 [ 1042.472506] ? do_raw_spin_unlock+0x4f/0x220 [ 1042.473430] p9_client_create+0xa76/0x1230 [ 1042.474304] ? p9_client_flush+0x430/0x430 [ 1042.475215] ? trace_hardirqs_on+0x5b/0x180 [ 1042.476136] ? lockdep_init_map_type+0x2c7/0x780 [ 1042.477143] ? __raw_spin_lock_init+0x36/0x110 [ 1042.478078] v9fs_session_init+0x1dd/0x1680 [ 1042.478971] ? lock_release+0x680/0x680 [ 1042.479824] ? kmem_cache_alloc_trace+0x151/0x320 [ 1042.480871] ? v9fs_show_options+0x690/0x690 [ 1042.481792] ? trace_hardirqs_on+0x5b/0x180 [ 1042.482680] ? kasan_unpoison_shadow+0x33/0x50 [ 1042.483652] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.484745] v9fs_mount+0x79/0x8f0 [ 1042.485485] ? v9fs_write_inode+0x60/0x60 [ 1042.486333] legacy_get_tree+0x105/0x220 [ 1042.487188] vfs_get_tree+0x8e/0x300 [ 1042.487943] path_mount+0x1490/0x21e0 [ 1042.488751] ? strncpy_from_user+0x9e/0x470 [ 1042.489639] ? finish_automount+0xa90/0xa90 [ 1042.490505] ? getname_flags.part.0+0x1dd/0x4f0 [ 1042.491448] ? _copy_from_user+0xfb/0x1b0 [ 1042.492302] __x64_sys_mount+0x282/0x300 [ 1042.493129] ? copy_mnt_ns+0xa00/0xa00 [ 1042.493921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.494978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.496017] do_syscall_64+0x33/0x40 [ 1042.496768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.497812] RIP: 0033:0x7f2ae689eb19 [ 1042.498564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.502278] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.503866] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1042.505336] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1042.506768] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.508201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.509650] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:25:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 31) 03:25:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 3) [ 1042.596386] FAULT_INJECTION: forcing a failure. [ 1042.596386] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.598729] CPU: 0 PID: 7594 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1042.600057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.601684] Call Trace: [ 1042.602195] dump_stack+0x107/0x167 [ 1042.602848] FAULT_INJECTION: forcing a failure. [ 1042.602848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.605050] should_fail.cold+0x5/0xa [ 1042.605795] should_failslab+0x5/0x20 [ 1042.606525] __kmalloc_track_caller+0x79/0x370 [ 1042.607401] ? match_number+0xaf/0x1d0 [ 1042.608152] kmemdup_nul+0x2d/0xa0 [ 1042.608828] match_number+0xaf/0x1d0 [ 1042.609556] ? match_u64+0x190/0x190 [ 1042.610268] ? __kmalloc_track_caller+0x2c6/0x370 [ 1042.611187] ? memcpy+0x39/0x60 [ 1042.611833] parse_opts.part.0+0x1f3/0x340 [ 1042.612623] ? p9_fd_show_options+0x1c0/0x1c0 [ 1042.613513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.614518] ? trace_hardirqs_on+0x5b/0x180 [ 1042.615332] ? kfree+0xd7/0x340 [ 1042.615976] p9_fd_create+0x98/0x4a0 [ 1042.616693] ? p9_conn_create+0x510/0x510 [ 1042.617493] ? p9_client_create+0x798/0x1230 [ 1042.618342] ? kfree+0xd7/0x340 [ 1042.618979] ? do_raw_spin_unlock+0x4f/0x220 [ 1042.619836] p9_client_create+0x7ff/0x1230 [ 1042.620641] ? p9_client_flush+0x430/0x430 [ 1042.621461] ? trace_hardirqs_on+0x5b/0x180 [ 1042.622273] ? lockdep_init_map_type+0x2c7/0x780 [ 1042.623180] ? __raw_spin_lock_init+0x36/0x110 [ 1042.624046] v9fs_session_init+0x1dd/0x1680 [ 1042.624857] ? lock_release+0x680/0x680 [ 1042.625635] ? kmem_cache_alloc_trace+0x151/0x320 [ 1042.626544] ? v9fs_show_options+0x690/0x690 [ 1042.627381] ? trace_hardirqs_on+0x5b/0x180 [ 1042.628197] ? kasan_unpoison_shadow+0x33/0x50 [ 1042.629066] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1042.630025] v9fs_mount+0x79/0x8f0 [ 1042.630697] ? v9fs_write_inode+0x60/0x60 [ 1042.631492] legacy_get_tree+0x105/0x220 [ 1042.632249] vfs_get_tree+0x8e/0x300 [ 1042.632908] path_mount+0x1490/0x21e0 [ 1042.633594] ? strncpy_from_user+0x9e/0x470 [ 1042.634373] ? finish_automount+0xa90/0xa90 [ 1042.635143] ? getname_flags.part.0+0x1dd/0x4f0 [ 1042.635992] ? _copy_from_user+0xfb/0x1b0 [ 1042.636784] __x64_sys_mount+0x282/0x300 [ 1042.637578] ? copy_mnt_ns+0xa00/0xa00 [ 1042.638308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.639288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.640256] do_syscall_64+0x33/0x40 [ 1042.640951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.641932] RIP: 0033:0x7f5f5e955b19 [ 1042.642632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.646103] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.647533] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1042.648876] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1042.650241] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.651566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.652902] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1042.654281] CPU: 1 PID: 7595 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1042.655647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.657237] Call Trace: [ 1042.657748] dump_stack+0x107/0x167 [ 1042.658444] should_fail.cold+0x5/0xa [ 1042.659170] _copy_from_user+0x2e/0x1b0 [ 1042.659922] memdup_user+0x65/0xd0 [ 1042.660587] strndup_user+0x74/0xe0 [ 1042.661291] __x64_sys_mount+0x133/0x300 [ 1042.662054] ? copy_mnt_ns+0xa00/0xa00 [ 1042.662797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.663820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.664799] do_syscall_64+0x33/0x40 [ 1042.665513] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.666476] RIP: 0033:0x7f8718ffcb19 [ 1042.667186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.670649] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.672081] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1042.673414] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 03:25:41 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 3) [ 1042.674741] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.676311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.677645] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:25:41 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="17d8890007000000f05defc71402a8937adf1ee343ff0400a39d47735d31931898763772790000000000001b50c76b1069b134c4c27b05ac57286cb12984515ecdf8cabc3a9e9502375c6b9efe87aa35fd2e485fe34c0198998a4800253bc0270dcd41e817c9cb28b2cd5feadfbe6f90d27abb068c93be4d6af17548031f03e68ff0f79ac9257b019967e10a83f1e1d5270d35f89531470ef4844404000000000000c50900009d7e8455e26fb0d7a24f9a02da0a7039d40358b0a9fec1accc6e2272c87f93867ec21b5c42b9a848f823c9cc0f8e9e259a20b82cd0024053ff71a4c618629c4814f3a966670cd44c1dbda3098d936b8d4aae73d0a073837b6a8749827dcdfe9c68366b3f368af1bd1ab4917ab7007f2107058f93ca73a970b8b46f7421354eefe706c8f83f801a308f257a93380cc2"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:41 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1042.719321] FAULT_INJECTION: forcing a failure. [ 1042.719321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.721546] CPU: 0 PID: 7597 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1042.722766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1042.724222] Call Trace: [ 1042.724712] dump_stack+0x107/0x167 [ 1042.725368] should_fail.cold+0x5/0xa [ 1042.726067] _copy_from_user+0x2e/0x1b0 [ 1042.726785] memdup_user+0x65/0xd0 [ 1042.727412] strndup_user+0x74/0xe0 [ 1042.728077] __x64_sys_mount+0x133/0x300 [ 1042.728806] ? copy_mnt_ns+0xa00/0xa00 [ 1042.729498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1042.730434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1042.731363] do_syscall_64+0x33/0x40 [ 1042.732034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1042.732914] RIP: 0033:0x7f52d4da5b19 [ 1042.733584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1042.736827] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.738205] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1042.739501] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1042.740783] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1042.742061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.743253] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1042.749043] 9pnet: Insufficient options for proto=fd [ 1042.803460] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1054.233722] FAULT_INJECTION: forcing a failure. [ 1054.233722] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.235188] CPU: 1 PID: 7613 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1054.236276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.237496] Call Trace: [ 1054.237827] dump_stack+0x107/0x167 [ 1054.238283] should_fail.cold+0x5/0xa [ 1054.238754] ? copy_mount_options+0x55/0x180 [ 1054.239294] should_failslab+0x5/0x20 [ 1054.239764] kmem_cache_alloc_trace+0x55/0x320 [ 1054.240331] ? _copy_from_user+0xfb/0x1b0 [ 1054.240842] copy_mount_options+0x55/0x180 [ 1054.241374] __x64_sys_mount+0x1a8/0x300 [ 1054.241871] ? copy_mnt_ns+0xa00/0xa00 [ 1054.242355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.243000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.243636] do_syscall_64+0x33/0x40 [ 1054.244092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.244726] RIP: 0033:0x7f52d4da5b19 [ 1054.245187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.247423] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1054.248351] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1054.249226] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1054.250096] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1054.250979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.251851] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1054.262904] FAULT_INJECTION: forcing a failure. [ 1054.262904] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.264368] CPU: 1 PID: 7614 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1054.265226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.266236] Call Trace: [ 1054.266559] dump_stack+0x107/0x167 [ 1054.267005] should_fail.cold+0x5/0xa [ 1054.267475] ? p9_fd_create+0x161/0x4a0 [ 1054.267848] FAULT_INJECTION: forcing a failure. [ 1054.267848] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.269304] should_failslab+0x5/0x20 [ 1054.269767] kmem_cache_alloc_trace+0x55/0x320 [ 1054.270325] p9_fd_create+0x161/0x4a0 [ 1054.270784] ? p9_conn_create+0x510/0x510 [ 1054.271290] ? p9_client_create+0x798/0x1230 [ 1054.271824] ? kfree+0xd7/0x340 [ 1054.272234] ? do_raw_spin_unlock+0x4f/0x220 [ 1054.272769] p9_client_create+0x7ff/0x1230 [ 1054.273292] ? p9_client_flush+0x430/0x430 [ 1054.273808] ? trace_hardirqs_on+0x5b/0x180 [ 1054.274333] ? lockdep_init_map_type+0x2c7/0x780 [ 1054.274908] ? __raw_spin_lock_init+0x36/0x110 [ 1054.275466] v9fs_session_init+0x1dd/0x1680 [ 1054.275991] ? lock_release+0x680/0x680 [ 1054.276494] ? kmem_cache_alloc_trace+0x151/0x320 [ 1054.277084] ? v9fs_show_options+0x690/0x690 [ 1054.277647] ? trace_hardirqs_on+0x5b/0x180 [ 1054.278168] ? kasan_unpoison_shadow+0x33/0x50 [ 1054.278724] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1054.279351] v9fs_mount+0x79/0x8f0 [ 1054.279790] ? v9fs_write_inode+0x60/0x60 [ 1054.280292] legacy_get_tree+0x105/0x220 [ 1054.280788] vfs_get_tree+0x8e/0x300 [ 1054.281252] path_mount+0x1490/0x21e0 [ 1054.281717] ? strncpy_from_user+0x9e/0x470 [ 1054.282244] ? finish_automount+0xa90/0xa90 [ 1054.282770] ? getname_flags.part.0+0x1dd/0x4f0 [ 1054.283337] ? _copy_from_user+0xfb/0x1b0 [ 1054.283845] __x64_sys_mount+0x282/0x300 [ 1054.284341] ? copy_mnt_ns+0xa00/0xa00 [ 1054.284815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.285468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.286096] do_syscall_64+0x33/0x40 [ 1054.286551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.287168] RIP: 0033:0x7f5f5e955b19 [ 1054.287625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.289841] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1054.290768] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1054.291633] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1054.292504] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1054.293381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.294250] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1054.295160] CPU: 0 PID: 7623 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1054.297425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.298841] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1054.299681] Call Trace: [ 1054.299716] dump_stack+0x107/0x167 [ 1054.302518] should_fail.cold+0x5/0xa [ 1054.303759] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1054.305350] should_failslab+0x5/0x20 [ 1054.306396] kmem_cache_alloc+0x5b/0x310 [ 1054.307392] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1054.308903] idr_get_free+0x4b5/0x8f0 [ 1054.309801] idr_alloc_u32+0x170/0x2d0 [ 1054.310687] ? __fprop_inc_percpu_max+0x130/0x130 [ 1054.311786] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1054.313091] ? lock_release+0x680/0x680 [ 1054.314064] idr_alloc+0xc2/0x130 [ 1054.314904] ? idr_alloc_u32+0x2d0/0x2d0 [ 1054.315889] ? rwlock_bug.part.0+0x90/0x90 [ 1054.316940] p9_client_prepare_req.part.0+0x612/0xac0 [ 1054.318182] p9_client_rpc+0x220/0x1370 [ 1054.319146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.320434] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1054.321735] ? pipe_poll+0x21b/0x800 [ 1054.322632] ? p9_fd_close+0x4a0/0x4a0 [ 1054.323560] ? wait_for_partner+0x3c0/0x3c0 [ 1054.324577] ? p9_fd_poll+0x1e0/0x2c0 [ 1054.325507] ? p9_fd_create+0x357/0x4a0 [ 1054.326466] ? p9_conn_create+0x510/0x510 [ 1054.327476] ? p9_client_create+0x798/0x1230 [ 1054.328544] ? kfree+0xd7/0x340 [ 1054.329345] ? do_raw_spin_unlock+0x4f/0x220 [ 1054.330406] p9_client_create+0xa76/0x1230 [ 1054.331435] ? p9_client_flush+0x430/0x430 [ 1054.332430] ? trace_hardirqs_on+0x5b/0x180 [ 1054.333437] ? lockdep_init_map_type+0x2c7/0x780 [ 1054.334563] ? __raw_spin_lock_init+0x36/0x110 [ 1054.335649] v9fs_session_init+0x1dd/0x1680 [ 1054.336700] ? lock_release+0x680/0x680 [ 1054.337672] ? kmem_cache_alloc_trace+0x151/0x320 [ 1054.338834] ? v9fs_show_options+0x690/0x690 [ 1054.339908] ? trace_hardirqs_on+0x5b/0x180 [ 1054.340923] ? kasan_unpoison_shadow+0x33/0x50 [ 1054.342033] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1054.343200] v9fs_mount+0x79/0x8f0 [ 1054.344018] ? v9fs_write_inode+0x60/0x60 [ 1054.344952] legacy_get_tree+0x105/0x220 [ 1054.346075] vfs_get_tree+0x8e/0x300 [ 1054.346965] path_mount+0x1490/0x21e0 [ 1054.348007] ? strncpy_from_user+0x9e/0x470 [ 1054.348996] ? finish_automount+0xa90/0xa90 [ 1054.350005] ? getname_flags.part.0+0x1dd/0x4f0 [ 1054.351053] ? _copy_from_user+0xfb/0x1b0 [ 1054.352020] __x64_sys_mount+0x282/0x300 [ 1054.352930] ? copy_mnt_ns+0xa00/0xa00 [ 1054.353831] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.355049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.356226] do_syscall_64+0x33/0x40 [ 1054.357051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.358209] RIP: 0033:0x7f2ae689eb19 [ 1054.359044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.363226] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1054.364967] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1054.366594] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1054.368220] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1054.369844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.371441] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:25:53 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 18) 03:25:53 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="17d8890007000000f05defc71402a8937adf1ee343ff0400a39d47735d31931898763772790000000000001b50c76b1069b134c4c27b05ac57286cb12984515ecdf8cabc3a9e9502375c6b9efe87aa35fd2e485fe34c0198998a4800253bc0270dcd41e817c9cb28b2cd5feadfbe6f90d27abb068c93be4d6af17548031f03e68ff0f79ac9257b019967e10a83f1e1d5270d35f89531470ef4844404000000000000c50900009d7e8455e26fb0d7a24f9a02da0a7039d40358b0a9fec1accc6e2272c87f93867ec21b5c42b9a848f823c9cc0f8e9e259a20b82cd0024053ff71a4c618629c4814f3a966670cd44c1dbda3098d936b8d4aae73d0a073837b6a8749827dcdfe9c68366b3f368af1bd1ab4917ab7007f2107058f93ca73a970b8b46f7421354eefe706c8f83f801a308f257a93380cc2"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:25:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 40) 03:25:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 32) 03:25:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:25:53 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 4) [ 1054.378395] FAULT_INJECTION: forcing a failure. [ 1054.378395] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.379791] CPU: 1 PID: 7622 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1054.380596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.381570] Call Trace: [ 1054.381882] dump_stack+0x107/0x167 [ 1054.382307] should_fail.cold+0x5/0xa [ 1054.382754] should_failslab+0x5/0x20 [ 1054.383196] __kmalloc_track_caller+0x79/0x370 [ 1054.383729] ? v9fs_session_init+0xe9/0x1680 [ 1054.384241] ? kernel_text_address+0xf2/0x120 [ 1054.384765] kstrdup+0x36/0x70 [ 1054.385146] v9fs_session_init+0xe9/0x1680 [ 1054.385639] ? lock_release+0x680/0x680 [ 1054.386099] ? find_held_lock+0x2c/0x110 [ 1054.386576] ? kmem_cache_alloc_trace+0x151/0x320 [ 1054.387139] ? v9fs_show_options+0x690/0x690 [ 1054.387654] ? trace_hardirqs_on+0x5b/0x180 [ 1054.388157] ? kasan_unpoison_shadow+0x33/0x50 [ 1054.388684] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1054.389281] v9fs_mount+0x79/0x8f0 [ 1054.389696] ? v9fs_write_inode+0x60/0x60 [ 1054.390174] legacy_get_tree+0x105/0x220 [ 1054.390647] vfs_get_tree+0x8e/0x300 [ 1054.391079] path_mount+0x1490/0x21e0 [ 1054.391528] ? strncpy_from_user+0x9e/0x470 [ 1054.392027] ? finish_automount+0xa90/0xa90 [ 1054.392529] ? getname_flags.part.0+0x1dd/0x4f0 [ 1054.393069] ? _copy_from_user+0xfb/0x1b0 [ 1054.393565] __x64_sys_mount+0x282/0x300 [ 1054.394035] ? copy_mnt_ns+0xa00/0xa00 [ 1054.394489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.395099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.395702] do_syscall_64+0x33/0x40 [ 1054.396135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.396731] RIP: 0033:0x7fd388488b19 [ 1054.397174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.399304] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1054.400183] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1054.401006] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1054.401839] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1054.402662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.403485] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:25:53 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:25:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 4) [ 1054.412690] FAULT_INJECTION: forcing a failure. [ 1054.412690] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.414074] CPU: 1 PID: 7628 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1054.414871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.415821] Call Trace: [ 1054.416131] dump_stack+0x107/0x167 [ 1054.416556] should_fail.cold+0x5/0xa [ 1054.417000] ? copy_mount_options+0x55/0x180 [ 1054.417515] should_failslab+0x5/0x20 [ 1054.417967] kmem_cache_alloc_trace+0x55/0x320 [ 1054.418494] ? _copy_from_user+0xfb/0x1b0 [ 1054.418976] copy_mount_options+0x55/0x180 [ 1054.419474] __x64_sys_mount+0x1a8/0x300 [ 1054.419945] ? copy_mnt_ns+0xa00/0xa00 [ 1054.420398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.421011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.421614] do_syscall_64+0x33/0x40 [ 1054.422051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.422642] RIP: 0033:0x7f8718ffcb19 [ 1054.423075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.425196] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1054.426084] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1054.426903] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1054.427723] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1054.428571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.429403] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:25:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 41) 03:25:53 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1054.498685] FAULT_INJECTION: forcing a failure. [ 1054.498685] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.501272] CPU: 0 PID: 7632 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1054.502814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.504702] Call Trace: [ 1054.505314] dump_stack+0x107/0x167 [ 1054.506144] should_fail.cold+0x5/0xa [ 1054.507007] ? create_object.isra.0+0x3a/0xa30 [ 1054.508044] should_failslab+0x5/0x20 [ 1054.508906] kmem_cache_alloc+0x5b/0x310 [ 1054.509894] create_object.isra.0+0x3a/0xa30 [ 1054.510887] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1054.512072] kmem_cache_alloc+0x159/0x310 [ 1054.513071] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1054.514350] idr_get_free+0x4b5/0x8f0 [ 1054.515270] idr_alloc_u32+0x170/0x2d0 [ 1054.516161] ? __fprop_inc_percpu_max+0x130/0x130 [ 1054.517313] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1054.518526] ? lock_release+0x680/0x680 [ 1054.519471] idr_alloc+0xc2/0x130 [ 1054.520309] ? idr_alloc_u32+0x2d0/0x2d0 [ 1054.521259] ? rwlock_bug.part.0+0x90/0x90 [ 1054.522275] p9_client_prepare_req.part.0+0x612/0xac0 [ 1054.523514] p9_client_rpc+0x220/0x1370 [ 1054.524470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.525735] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1054.527003] ? pipe_poll+0x21b/0x800 [ 1054.527891] ? p9_fd_close+0x4a0/0x4a0 [ 1054.528811] ? wait_for_partner+0x3c0/0x3c0 [ 1054.529826] ? p9_fd_poll+0x1e0/0x2c0 [ 1054.530746] ? p9_fd_create+0x357/0x4a0 [ 1054.531700] ? p9_conn_create+0x510/0x510 [ 1054.532695] ? p9_client_create+0x798/0x1230 [ 1054.533731] ? kfree+0xd7/0x340 [ 1054.534509] ? do_raw_spin_unlock+0x4f/0x220 [ 1054.535520] p9_client_create+0xa76/0x1230 [ 1054.536543] ? p9_client_flush+0x430/0x430 [ 1054.537537] ? trace_hardirqs_on+0x5b/0x180 [ 1054.538557] ? lockdep_init_map_type+0x2c7/0x780 [ 1054.539683] ? __raw_spin_lock_init+0x36/0x110 [ 1054.540776] v9fs_session_init+0x1dd/0x1680 [ 1054.541782] ? lock_release+0x680/0x680 [ 1054.542694] ? kmem_cache_alloc_trace+0x151/0x320 [ 1054.543837] ? v9fs_show_options+0x690/0x690 [ 1054.544902] ? trace_hardirqs_on+0x5b/0x180 [ 1054.545922] ? kasan_unpoison_shadow+0x33/0x50 [ 1054.547004] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1054.548216] v9fs_mount+0x79/0x8f0 [ 1054.549055] ? v9fs_write_inode+0x60/0x60 [ 1054.550000] legacy_get_tree+0x105/0x220 [ 1054.550963] vfs_get_tree+0x8e/0x300 [ 1054.551808] path_mount+0x1490/0x21e0 [ 1054.552721] ? strncpy_from_user+0x9e/0x470 [ 1054.553709] ? finish_automount+0xa90/0xa90 [ 1054.554685] ? getname_flags.part.0+0x1dd/0x4f0 [ 1054.555739] ? _copy_from_user+0xfb/0x1b0 [ 1054.556689] __x64_sys_mount+0x282/0x300 [ 1054.557611] ? copy_mnt_ns+0xa00/0xa00 [ 1054.558496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.559681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.560850] do_syscall_64+0x33/0x40 [ 1054.561729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.562889] RIP: 0033:0x7f2ae689eb19 [ 1054.563773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.567949] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1054.569743] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1054.571445] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1054.573106] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1054.574815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.576511] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1054.601340] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:26:06 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:26:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 42) 03:26:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 19) 03:26:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 5) 03:26:06 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 5) 03:26:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 33) 03:26:06 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1067.228869] FAULT_INJECTION: forcing a failure. [ 1067.228869] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.231435] CPU: 0 PID: 7652 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1067.231660] FAULT_INJECTION: forcing a failure. [ 1067.231660] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.232951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.232958] Call Trace: [ 1067.232986] dump_stack+0x107/0x167 [ 1067.233011] should_fail.cold+0x5/0xa [ 1067.239200] ? create_object.isra.0+0x3a/0xa30 [ 1067.240204] should_failslab+0x5/0x20 [ 1067.241039] kmem_cache_alloc+0x5b/0x310 [ 1067.241940] create_object.isra.0+0x3a/0xa30 [ 1067.242906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.244034] kmem_cache_alloc_trace+0x151/0x320 [ 1067.245065] ? _copy_from_user+0xfb/0x1b0 [ 1067.245985] copy_mount_options+0x55/0x180 [ 1067.246908] __x64_sys_mount+0x1a8/0x300 [ 1067.247836] ? copy_mnt_ns+0xa00/0xa00 [ 1067.248696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.249879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.251032] do_syscall_64+0x33/0x40 [ 1067.251856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.252988] RIP: 0033:0x7f52d4da5b19 [ 1067.253837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.257917] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1067.259557] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1067.261150] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1067.262762] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1067.264344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.265936] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1067.267543] CPU: 1 PID: 7657 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1067.268856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.270443] Call Trace: [ 1067.270949] dump_stack+0x107/0x167 [ 1067.271644] should_fail.cold+0x5/0xa [ 1067.272386] ? create_object.isra.0+0x3a/0xa30 [ 1067.273249] should_failslab+0x5/0x20 [ 1067.273701] FAULT_INJECTION: forcing a failure. [ 1067.273701] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.273979] kmem_cache_alloc+0x5b/0x310 [ 1067.274000] create_object.isra.0+0x3a/0xa30 [ 1067.274025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.278928] kmem_cache_alloc_trace+0x151/0x320 [ 1067.279807] copy_mount_options+0x55/0x180 [ 1067.280599] __x64_sys_mount+0x1a8/0x300 [ 1067.281358] ? copy_mnt_ns+0xa00/0xa00 [ 1067.282105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.283078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.284044] do_syscall_64+0x33/0x40 [ 1067.284743] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.285709] RIP: 0033:0x7f8718ffcb19 [ 1067.286400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.289815] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1067.291237] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1067.292567] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1067.293899] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1067.295231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.296551] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1067.297934] CPU: 0 PID: 7653 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1067.299437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.301304] Call Trace: [ 1067.301915] dump_stack+0x107/0x167 [ 1067.302732] should_fail.cold+0x5/0xa [ 1067.303575] ? p9_fd_create+0x161/0x4a0 [ 1067.304459] should_failslab+0x5/0x20 [ 1067.305307] kmem_cache_alloc_trace+0x55/0x320 [ 1067.306364] p9_fd_create+0x161/0x4a0 [ 1067.307203] ? p9_conn_create+0x510/0x510 [ 1067.307711] FAULT_INJECTION: forcing a failure. [ 1067.307711] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.308116] ? p9_client_create+0x798/0x1230 [ 1067.308140] ? kfree+0xd7/0x340 [ 1067.308165] ? do_raw_spin_unlock+0x4f/0x220 [ 1067.312850] p9_client_create+0x7ff/0x1230 [ 1067.313748] ? p9_client_flush+0x430/0x430 [ 1067.314804] ? trace_hardirqs_on+0x5b/0x180 [ 1067.315753] ? lockdep_init_map_type+0x2c7/0x780 [ 1067.316721] ? __raw_spin_lock_init+0x36/0x110 [ 1067.317675] v9fs_session_init+0x1dd/0x1680 [ 1067.318560] ? lock_release+0x680/0x680 [ 1067.319392] ? kmem_cache_alloc_trace+0x151/0x320 [ 1067.320389] ? v9fs_show_options+0x690/0x690 [ 1067.321314] ? trace_hardirqs_on+0x5b/0x180 [ 1067.322402] ? kasan_unpoison_shadow+0x33/0x50 [ 1067.323421] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.324709] v9fs_mount+0x79/0x8f0 [ 1067.325456] ? v9fs_write_inode+0x60/0x60 [ 1067.326506] legacy_get_tree+0x105/0x220 [ 1067.327342] vfs_get_tree+0x8e/0x300 [ 1067.328289] path_mount+0x1490/0x21e0 [ 1067.329080] ? strncpy_from_user+0x9e/0x470 [ 1067.330182] ? finish_automount+0xa90/0xa90 [ 1067.331071] ? getname_flags.part.0+0x1dd/0x4f0 [ 1067.332237] ? _copy_from_user+0xfb/0x1b0 [ 1067.333312] __x64_sys_mount+0x282/0x300 [ 1067.334215] ? copy_mnt_ns+0xa00/0xa00 [ 1067.335210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.336282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.337348] do_syscall_64+0x33/0x40 [ 1067.338125] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.339174] RIP: 0033:0x7f5f5e955b19 [ 1067.339935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.344554] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1067.346140] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1067.347613] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1067.349071] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1067.350542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.352002] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1067.353511] CPU: 1 PID: 7655 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1067.354767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.356262] Call Trace: [ 1067.356729] dump_stack+0x107/0x167 [ 1067.357384] should_fail.cold+0x5/0xa [ 1067.358054] ? create_object.isra.0+0x3a/0xa30 [ 1067.358864] should_failslab+0x5/0x20 [ 1067.359535] kmem_cache_alloc+0x5b/0x310 [ 1067.360272] create_object.isra.0+0x3a/0xa30 [ 1067.361061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.361981] __kmalloc_track_caller+0x177/0x370 [ 1067.362796] ? v9fs_session_init+0xe9/0x1680 [ 1067.363584] ? kernel_text_address+0xf2/0x120 [ 1067.364385] kstrdup+0x36/0x70 [ 1067.364962] v9fs_session_init+0xe9/0x1680 [ 1067.365717] ? lock_release+0x680/0x680 [ 1067.366430] ? find_held_lock+0x2c/0x110 [ 1067.367148] ? kmem_cache_alloc_trace+0x151/0x320 [ 1067.368032] ? v9fs_show_options+0x690/0x690 [ 1067.368823] ? trace_hardirqs_on+0x5b/0x180 [ 1067.369603] ? kasan_unpoison_shadow+0x33/0x50 [ 1067.370413] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.371316] v9fs_mount+0x79/0x8f0 [ 1067.371944] ? v9fs_write_inode+0x60/0x60 [ 1067.372674] legacy_get_tree+0x105/0x220 [ 1067.373401] vfs_get_tree+0x8e/0x300 [ 1067.374066] path_mount+0x1490/0x21e0 [ 1067.374747] ? strncpy_from_user+0x9e/0x470 [ 1067.375500] ? finish_automount+0xa90/0xa90 [ 1067.376251] ? getname_flags.part.0+0x1dd/0x4f0 [ 1067.377067] ? _copy_from_user+0xfb/0x1b0 [ 1067.377923] __x64_sys_mount+0x282/0x300 [ 1067.378705] ? copy_mnt_ns+0xa00/0xa00 [ 1067.379391] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.380307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.381219] do_syscall_64+0x33/0x40 [ 1067.381881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.382783] RIP: 0033:0x7fd388488b19 [ 1067.383437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.386703] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1067.388043] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1067.389329] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1067.390608] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1067.391887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.393145] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1067.397433] FAULT_INJECTION: forcing a failure. [ 1067.397433] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.399450] CPU: 1 PID: 7658 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1067.400662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.402140] Call Trace: [ 1067.402606] dump_stack+0x107/0x167 [ 1067.403258] should_fail.cold+0x5/0xa [ 1067.403934] ? create_object.isra.0+0x3a/0xa30 [ 1067.404745] should_failslab+0x5/0x20 [ 1067.405434] kmem_cache_alloc+0x5b/0x310 [ 1067.406156] create_object.isra.0+0x3a/0xa30 [ 1067.406929] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.407837] __kmalloc+0x16e/0x390 [ 1067.408474] p9_fcall_init+0x97/0x290 [ 1067.409153] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1067.410061] p9_client_rpc+0x220/0x1370 [ 1067.410764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.411690] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1067.412626] ? pipe_poll+0x21b/0x800 [ 1067.413280] ? p9_fd_close+0x4a0/0x4a0 [ 1067.413958] ? wait_for_partner+0x3c0/0x3c0 [ 1067.414720] ? p9_fd_poll+0x1e0/0x2c0 [ 1067.415387] ? p9_fd_create+0x357/0x4a0 [ 1067.416087] ? p9_conn_create+0x510/0x510 [ 1067.416808] ? p9_client_create+0x798/0x1230 [ 1067.417587] ? kfree+0xd7/0x340 [ 1067.418164] ? do_raw_spin_unlock+0x4f/0x220 [ 1067.418937] p9_client_create+0xa76/0x1230 [ 1067.419690] ? p9_client_flush+0x430/0x430 [ 1067.420435] ? trace_hardirqs_on+0x5b/0x180 [ 1067.421194] ? lockdep_init_map_type+0x2c7/0x780 [ 1067.422040] ? __raw_spin_lock_init+0x36/0x110 [ 1067.422842] v9fs_session_init+0x1dd/0x1680 [ 1067.423599] ? lock_release+0x680/0x680 [ 1067.424307] ? kmem_cache_alloc_trace+0x151/0x320 [ 1067.425152] ? v9fs_show_options+0x690/0x690 [ 1067.425941] ? trace_hardirqs_on+0x5b/0x180 [ 1067.426687] ? kasan_unpoison_shadow+0x33/0x50 [ 1067.427475] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.428354] v9fs_mount+0x79/0x8f0 [ 1067.428971] ? v9fs_write_inode+0x60/0x60 [ 1067.429687] legacy_get_tree+0x105/0x220 [ 1067.430397] vfs_get_tree+0x8e/0x300 [ 1067.431037] path_mount+0x1490/0x21e0 [ 1067.431699] ? strncpy_from_user+0x9e/0x470 [ 1067.432496] ? finish_automount+0xa90/0xa90 [ 1067.433313] ? getname_flags.part.0+0x1dd/0x4f0 [ 1067.434122] ? _copy_from_user+0xfb/0x1b0 [ 1067.434847] __x64_sys_mount+0x282/0x300 [ 1067.435557] ? copy_mnt_ns+0xa00/0xa00 [ 1067.436238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.437195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.438141] do_syscall_64+0x33/0x40 [ 1067.438816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.439698] RIP: 0033:0x7f2ae689eb19 [ 1067.440391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.443689] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1067.445047] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1067.446330] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1067.447612] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1067.448833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.450140] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1067.459793] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:26:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:06 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1067.533102] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:26:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:06 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:26:06 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 6) 03:26:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 34) 03:26:06 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f", 0x12}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1067.677644] FAULT_INJECTION: forcing a failure. [ 1067.677644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.677662] FAULT_INJECTION: forcing a failure. [ 1067.677662] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.677685] CPU: 1 PID: 7679 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1067.683187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.684358] Call Trace: [ 1067.684731] dump_stack+0x107/0x167 [ 1067.685243] should_fail.cold+0x5/0xa [ 1067.685789] ? create_object.isra.0+0x3a/0xa30 [ 1067.686438] should_failslab+0x5/0x20 [ 1067.686969] kmem_cache_alloc+0x5b/0x310 [ 1067.687532] ? p9_fd_show_options+0x1c0/0x1c0 [ 1067.688167] create_object.isra.0+0x3a/0xa30 [ 1067.688774] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.689493] kmem_cache_alloc_trace+0x151/0x320 [ 1067.690155] p9_fd_create+0x161/0x4a0 [ 1067.690689] ? p9_conn_create+0x510/0x510 [ 1067.691265] ? p9_client_create+0x798/0x1230 [ 1067.691885] ? kfree+0xd7/0x340 [ 1067.692344] ? do_raw_spin_unlock+0x4f/0x220 [ 1067.692957] p9_client_create+0x7ff/0x1230 [ 1067.693562] ? p9_client_flush+0x430/0x430 [ 1067.694153] ? trace_hardirqs_on+0x5b/0x180 [ 1067.694755] ? lockdep_init_map_type+0x2c7/0x780 [ 1067.695415] ? __raw_spin_lock_init+0x36/0x110 [ 1067.696053] v9fs_session_init+0x1dd/0x1680 [ 1067.696661] ? lock_release+0x680/0x680 [ 1067.697230] ? kmem_cache_alloc_trace+0x151/0x320 [ 1067.697900] ? v9fs_show_options+0x690/0x690 [ 1067.698514] ? trace_hardirqs_on+0x5b/0x180 [ 1067.699114] ? kasan_unpoison_shadow+0x33/0x50 [ 1067.699741] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1067.700443] v9fs_mount+0x79/0x8f0 [ 1067.700938] ? v9fs_write_inode+0x60/0x60 [ 1067.701515] legacy_get_tree+0x105/0x220 [ 1067.702076] vfs_get_tree+0x8e/0x300 [ 1067.702587] path_mount+0x1490/0x21e0 [ 1067.703119] ? strncpy_from_user+0x9e/0x470 [ 1067.703730] ? finish_automount+0xa90/0xa90 [ 1067.704327] ? getname_flags.part.0+0x1dd/0x4f0 [ 1067.704987] ? _copy_from_user+0xfb/0x1b0 [ 1067.705572] __x64_sys_mount+0x282/0x300 [ 1067.706145] ? copy_mnt_ns+0xa00/0xa00 [ 1067.706693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.707437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.708149] do_syscall_64+0x33/0x40 [ 1067.708663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.709381] RIP: 0033:0x7f5f5e955b19 [ 1067.709889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.712435] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1067.713481] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1067.714466] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1067.715444] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1067.716414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.717402] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1067.718408] CPU: 0 PID: 7680 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1067.719858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.721553] Call Trace: [ 1067.722107] dump_stack+0x107/0x167 [ 1067.722868] should_fail.cold+0x5/0xa [ 1067.723662] _copy_from_user+0x2e/0x1b0 [ 1067.724488] copy_mount_options+0x76/0x180 [ 1067.725378] __x64_sys_mount+0x1a8/0x300 [ 1067.726211] ? copy_mnt_ns+0xa00/0xa00 [ 1067.727021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.728359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.729515] do_syscall_64+0x33/0x40 [ 1067.730286] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.731332] RIP: 0033:0x7f52d4da5b19 [ 1067.732086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.736721] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1067.738293] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1067.739735] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1067.741173] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1067.742621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.744081] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 03:26:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 6) [ 1067.772479] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1067.774974] FAULT_INJECTION: forcing a failure. [ 1067.774974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.776510] CPU: 1 PID: 7685 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1067.777429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.778519] Call Trace: [ 1067.778875] dump_stack+0x107/0x167 [ 1067.779363] should_fail.cold+0x5/0xa [ 1067.779880] _copy_from_user+0x2e/0x1b0 [ 1067.780412] copy_mount_options+0x76/0x180 [ 1067.780972] __x64_sys_mount+0x1a8/0x300 [ 1067.781515] ? copy_mnt_ns+0xa00/0xa00 [ 1067.782032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1067.782715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1067.783400] do_syscall_64+0x33/0x40 [ 1067.783892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1067.784567] RIP: 0033:0x7f8718ffcb19 [ 1067.785050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.787636] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1067.788629] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1067.789580] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1067.790521] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1067.791457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.792373] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:26:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 7) 03:26:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 35) 03:26:20 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f", 0x12}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:26:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 43) 03:26:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 20) 03:26:20 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x5e, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:26:20 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 7) [ 1082.156461] FAULT_INJECTION: forcing a failure. [ 1082.156461] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.159089] CPU: 0 PID: 7701 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1082.160712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.162706] Call Trace: [ 1082.163341] dump_stack+0x107/0x167 [ 1082.164233] should_fail.cold+0x5/0xa [ 1082.165150] ? create_object.isra.0+0x3a/0xa30 [ 1082.166257] should_failslab+0x5/0x20 [ 1082.167168] kmem_cache_alloc+0x5b/0x310 [ 1082.168160] create_object.isra.0+0x3a/0xa30 [ 1082.169225] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.170457] kmem_cache_alloc+0x159/0x310 [ 1082.171458] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1082.171778] FAULT_INJECTION: forcing a failure. [ 1082.171778] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.172792] idr_get_free+0x4b5/0x8f0 [ 1082.172834] idr_alloc_u32+0x170/0x2d0 [ 1082.176563] ? __fprop_inc_percpu_max+0x130/0x130 [ 1082.177552] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1082.178611] ? lock_release+0x680/0x680 [ 1082.179408] idr_alloc+0xc2/0x130 [ 1082.180093] ? idr_alloc_u32+0x2d0/0x2d0 [ 1082.180932] ? rwlock_bug.part.0+0x90/0x90 [ 1082.181957] p9_client_prepare_req.part.0+0x612/0xac0 [ 1082.183205] p9_client_rpc+0x220/0x1370 [ 1082.184146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.185401] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1082.186673] ? pipe_poll+0x21b/0x800 [ 1082.187556] ? p9_fd_close+0x4a0/0x4a0 [ 1082.188480] ? wait_for_partner+0x3c0/0x3c0 [ 1082.189515] ? p9_fd_poll+0x1e0/0x2c0 [ 1082.190418] ? p9_fd_create+0x357/0x4a0 [ 1082.191353] ? p9_conn_create+0x510/0x510 [ 1082.192327] ? p9_client_create+0x798/0x1230 [ 1082.193387] ? kfree+0xd7/0x340 [ 1082.194169] ? do_raw_spin_unlock+0x4f/0x220 [ 1082.195221] p9_client_create+0xa76/0x1230 [ 1082.196239] ? p9_client_flush+0x430/0x430 [ 1082.197172] ? trace_hardirqs_on+0x5b/0x180 [ 1082.198024] ? lockdep_init_map_type+0x2c7/0x780 [ 1082.198959] ? __raw_spin_lock_init+0x36/0x110 [ 1082.199858] v9fs_session_init+0x1dd/0x1680 [ 1082.200704] ? lock_release+0x680/0x680 [ 1082.201498] ? kmem_cache_alloc_trace+0x151/0x320 [ 1082.202486] ? v9fs_show_options+0x690/0x690 [ 1082.203475] ? trace_hardirqs_on+0x5b/0x180 [ 1082.204485] ? kasan_unpoison_shadow+0x33/0x50 [ 1082.205574] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.206775] v9fs_mount+0x79/0x8f0 [ 1082.207616] ? v9fs_write_inode+0x60/0x60 [ 1082.208584] legacy_get_tree+0x105/0x220 [ 1082.209545] vfs_get_tree+0x8e/0x300 [ 1082.210418] path_mount+0x1490/0x21e0 [ 1082.211317] ? strncpy_from_user+0x9e/0x470 [ 1082.212322] ? finish_automount+0xa90/0xa90 [ 1082.213328] ? getname_flags.part.0+0x1dd/0x4f0 [ 1082.214418] ? _copy_from_user+0xfb/0x1b0 [ 1082.215399] __x64_sys_mount+0x282/0x300 [ 1082.216352] ? copy_mnt_ns+0xa00/0xa00 [ 1082.217262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.218494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.219709] do_syscall_64+0x33/0x40 [ 1082.220448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.221451] RIP: 0033:0x7f2ae689eb19 [ 1082.222188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.226172] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.227937] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1082.229609] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.231254] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.232912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.234572] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1082.236252] CPU: 1 PID: 7696 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1082.237683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.239368] Call Trace: [ 1082.239901] dump_stack+0x107/0x167 [ 1082.240643] should_fail.cold+0x5/0xa [ 1082.241405] ? getname_flags.part.0+0x50/0x4f0 [ 1082.242323] should_failslab+0x5/0x20 [ 1082.243088] kmem_cache_alloc+0x5b/0x310 [ 1082.243909] getname_flags.part.0+0x50/0x4f0 [ 1082.244787] ? _copy_from_user+0xfb/0x1b0 [ 1082.245625] user_path_at_empty+0xa1/0x100 [ 1082.246467] __x64_sys_mount+0x1e9/0x300 [ 1082.247279] ? copy_mnt_ns+0xa00/0xa00 [ 1082.248077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.249127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.250169] do_syscall_64+0x33/0x40 [ 1082.250906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.251931] RIP: 0033:0x7f8718ffcb19 [ 1082.252666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.256336] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.257849] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1082.259283] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.260704] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.262140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.263568] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1082.267652] FAULT_INJECTION: forcing a failure. [ 1082.267652] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.270343] CPU: 0 PID: 7702 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1082.271957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.273922] Call Trace: [ 1082.274553] dump_stack+0x107/0x167 [ 1082.275411] should_fail.cold+0x5/0xa [ 1082.276314] should_failslab+0x5/0x20 [ 1082.277212] __kmalloc_track_caller+0x79/0x370 [ 1082.278300] ? v9fs_session_init+0xe9/0x1680 [ 1082.279256] kstrdup+0x36/0x70 [ 1082.279865] v9fs_session_init+0xe9/0x1680 [ 1082.280667] ? find_held_lock+0x2c/0x110 [ 1082.281446] ? kmem_cache_alloc_trace+0x151/0x320 [ 1082.282369] ? v9fs_show_options+0x690/0x690 [ 1082.283210] ? trace_hardirqs_on+0x5b/0x180 [ 1082.284022] ? kasan_unpoison_shadow+0x33/0x50 [ 1082.284879] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.286061] v9fs_mount+0x79/0x8f0 [ 1082.286905] ? v9fs_write_inode+0x60/0x60 [ 1082.287872] legacy_get_tree+0x105/0x220 [ 1082.288824] vfs_get_tree+0x8e/0x300 [ 1082.289700] path_mount+0x1490/0x21e0 [ 1082.290591] ? strncpy_from_user+0x9e/0x470 [ 1082.291600] ? finish_automount+0xa90/0xa90 [ 1082.292611] ? getname_flags.part.0+0x1dd/0x4f0 [ 1082.293712] ? _copy_from_user+0xfb/0x1b0 [ 1082.294685] __x64_sys_mount+0x282/0x300 [ 1082.295629] ? copy_mnt_ns+0xa00/0xa00 [ 1082.296555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.297786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.298991] do_syscall_64+0x33/0x40 [ 1082.299860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.301057] RIP: 0033:0x7fd388488b19 [ 1082.301929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.305364] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.306798] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1082.308400] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.310048] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.311676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.313322] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1082.326649] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1082.339878] FAULT_INJECTION: forcing a failure. [ 1082.339878] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.340111] FAULT_INJECTION: forcing a failure. [ 1082.340111] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.342528] CPU: 0 PID: 7703 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1082.346013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.347636] Call Trace: [ 1082.348231] dump_stack+0x107/0x167 [ 1082.349054] should_fail.cold+0x5/0xa [ 1082.349929] ? create_object.isra.0+0x3a/0xa30 [ 1082.350953] should_failslab+0x5/0x20 [ 1082.351808] kmem_cache_alloc+0x5b/0x310 [ 1082.352720] ? p9_fd_show_options+0x1c0/0x1c0 [ 1082.353743] create_object.isra.0+0x3a/0xa30 [ 1082.354727] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.355868] kmem_cache_alloc_trace+0x151/0x320 [ 1082.356910] p9_fd_create+0x161/0x4a0 [ 1082.357769] ? p9_conn_create+0x510/0x510 [ 1082.358698] ? p9_client_create+0x798/0x1230 [ 1082.359683] ? kfree+0xd7/0x340 [ 1082.360421] ? do_raw_spin_unlock+0x4f/0x220 [ 1082.361415] p9_client_create+0x7ff/0x1230 [ 1082.362384] ? p9_client_flush+0x430/0x430 [ 1082.363291] ? trace_hardirqs_on+0x5b/0x180 [ 1082.364073] ? lockdep_init_map_type+0x2c7/0x780 [ 1082.364931] ? __raw_spin_lock_init+0x36/0x110 [ 1082.365771] v9fs_session_init+0x1dd/0x1680 [ 1082.366659] ? lock_release+0x680/0x680 [ 1082.367551] ? kmem_cache_alloc_trace+0x151/0x320 [ 1082.368620] ? v9fs_show_options+0x690/0x690 [ 1082.369612] ? trace_hardirqs_on+0x5b/0x180 [ 1082.370570] ? kasan_unpoison_shadow+0x33/0x50 [ 1082.371582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.372709] v9fs_mount+0x79/0x8f0 [ 1082.373507] ? v9fs_write_inode+0x60/0x60 [ 1082.374423] legacy_get_tree+0x105/0x220 [ 1082.375326] vfs_get_tree+0x8e/0x300 [ 1082.376150] path_mount+0x1490/0x21e0 [ 1082.377002] ? strncpy_from_user+0x9e/0x470 [ 1082.377966] ? finish_automount+0xa90/0xa90 [ 1082.378928] ? getname_flags.part.0+0x1dd/0x4f0 [ 1082.379961] ? _copy_from_user+0xfb/0x1b0 [ 1082.380892] __x64_sys_mount+0x282/0x300 [ 1082.381801] ? copy_mnt_ns+0xa00/0xa00 [ 1082.382558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.383498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.384486] do_syscall_64+0x33/0x40 [ 1082.385304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.386446] RIP: 0033:0x7f5f5e955b19 [ 1082.387269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.391307] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.392979] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1082.394546] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.396101] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.397662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.399222] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1082.400804] CPU: 1 PID: 7713 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1082.402204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.403856] Call Trace: [ 1082.404388] dump_stack+0x107/0x167 [ 1082.405116] should_fail.cold+0x5/0xa [ 1082.405887] ? getname_flags.part.0+0x50/0x4f0 [ 1082.406798] should_failslab+0x5/0x20 [ 1082.407553] kmem_cache_alloc+0x5b/0x310 [ 1082.408361] getname_flags.part.0+0x50/0x4f0 [ 1082.409253] ? _copy_from_user+0xfb/0x1b0 [ 1082.410095] user_path_at_empty+0xa1/0x100 [ 1082.410936] __x64_sys_mount+0x1e9/0x300 [ 1082.411748] ? copy_mnt_ns+0xa00/0xa00 [ 1082.412531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.413583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.414608] do_syscall_64+0x33/0x40 [ 1082.415346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.416365] RIP: 0033:0x7f52d4da5b19 [ 1082.417104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.420778] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.422323] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1082.423741] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.425165] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.426594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.428017] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 03:26:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 8) [ 1082.511336] FAULT_INJECTION: forcing a failure. [ 1082.511336] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.513712] CPU: 0 PID: 7720 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1082.515093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.516760] Call Trace: [ 1082.517290] dump_stack+0x107/0x167 [ 1082.518026] should_fail.cold+0x5/0xa [ 1082.518787] ? create_object.isra.0+0x3a/0xa30 [ 1082.519707] should_failslab+0x5/0x20 [ 1082.520472] kmem_cache_alloc+0x5b/0x310 [ 1082.521284] create_object.isra.0+0x3a/0xa30 [ 1082.522164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.523183] kmem_cache_alloc+0x159/0x310 [ 1082.524020] getname_flags.part.0+0x50/0x4f0 [ 1082.524909] ? _copy_from_user+0xfb/0x1b0 [ 1082.525746] user_path_at_empty+0xa1/0x100 [ 1082.526598] __x64_sys_mount+0x1e9/0x300 [ 1082.527406] ? copy_mnt_ns+0xa00/0xa00 [ 1082.528201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.529246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.530289] do_syscall_64+0x33/0x40 [ 1082.531030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.532041] RIP: 0033:0x7f8718ffcb19 [ 1082.532776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.536428] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.537943] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1082.539358] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.540773] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.542189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.543617] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:26:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 44) 03:26:21 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f", 0x12}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1082.578748] FAULT_INJECTION: forcing a failure. 03:26:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1082.578748] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.581107] CPU: 1 PID: 7722 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1082.582408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.583983] Call Trace: [ 1082.584484] dump_stack+0x107/0x167 [ 1082.585178] should_fail.cold+0x5/0xa [ 1082.585918] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1082.587013] should_failslab+0x5/0x20 [ 1082.587735] kmem_cache_alloc+0x5b/0x310 [ 1082.588513] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1082.589593] idr_get_free+0x4b5/0x8f0 [ 1082.590327] idr_alloc_u32+0x170/0x2d0 [ 1082.591062] ? __fprop_inc_percpu_max+0x130/0x130 [ 1082.591985] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1082.592994] ? lock_release+0x680/0x680 [ 1082.593756] idr_alloc+0xc2/0x130 [ 1082.594413] ? idr_alloc_u32+0x2d0/0x2d0 [ 1082.595174] ? rwlock_bug.part.0+0x90/0x90 [ 1082.595994] p9_client_prepare_req.part.0+0x612/0xac0 [ 1082.596987] p9_client_rpc+0x220/0x1370 [ 1082.597504] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1082.597749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.597777] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1082.601510] ? pipe_poll+0x21b/0x800 [ 1082.602213] ? p9_fd_close+0x4a0/0x4a0 [ 1082.602959] ? wait_for_partner+0x3c0/0x3c0 [ 1082.603769] ? p9_fd_poll+0x1e0/0x2c0 [ 1082.604489] ? p9_fd_create+0x357/0x4a0 [ 1082.605232] ? p9_conn_create+0x510/0x510 [ 1082.606017] ? p9_client_create+0x798/0x1230 [ 1082.606846] ? kfree+0xd7/0x340 [ 1082.607463] ? do_raw_spin_unlock+0x4f/0x220 [ 1082.608315] p9_client_create+0xa76/0x1230 [ 1082.609124] ? p9_client_flush+0x430/0x430 [ 1082.609923] ? trace_hardirqs_on+0x5b/0x180 [ 1082.610741] ? lockdep_init_map_type+0x2c7/0x780 [ 1082.611628] ? __raw_spin_lock_init+0x36/0x110 [ 1082.612500] v9fs_session_init+0x1dd/0x1680 [ 1082.613318] ? lock_release+0x680/0x680 [ 1082.614095] ? kmem_cache_alloc_trace+0x151/0x320 [ 1082.615009] ? v9fs_show_options+0x690/0x690 [ 1082.615856] ? trace_hardirqs_on+0x5b/0x180 [ 1082.616666] ? kasan_unpoison_shadow+0x33/0x50 [ 1082.617536] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.618502] v9fs_mount+0x79/0x8f0 [ 1082.619180] ? v9fs_write_inode+0x60/0x60 [ 1082.619956] legacy_get_tree+0x105/0x220 [ 1082.620722] vfs_get_tree+0x8e/0x300 [ 1082.621424] path_mount+0x1490/0x21e0 [ 1082.622163] ? strncpy_from_user+0x9e/0x470 [ 1082.622970] ? finish_automount+0xa90/0xa90 [ 1082.623781] ? getname_flags.part.0+0x1dd/0x4f0 [ 1082.624650] ? _copy_from_user+0xfb/0x1b0 [ 1082.625455] __x64_sys_mount+0x282/0x300 [ 1082.626210] ? copy_mnt_ns+0xa00/0xa00 [ 1082.626940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.627904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.628857] do_syscall_64+0x33/0x40 [ 1082.629564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.630514] RIP: 0033:0x7f2ae689eb19 [ 1082.631201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.634617] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.636018] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1082.637338] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.638670] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.639977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.641311] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:26:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 21) 03:26:21 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x1f4, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:26:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 36) 03:26:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 9) [ 1082.729592] FAULT_INJECTION: forcing a failure. [ 1082.729592] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.731776] CPU: 1 PID: 7733 Comm: syz-executor.3 Not tainted 5.10.244 #1 03:26:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1082.732989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.734637] Call Trace: [ 1082.735123] dump_stack+0x107/0x167 [ 1082.735765] should_fail.cold+0x5/0xa [ 1082.736441] ? p9_fcall_init+0x97/0x290 [ 1082.737151] should_failslab+0x5/0x20 [ 1082.737829] __kmalloc+0x72/0x390 [ 1082.738451] p9_fcall_init+0x97/0x290 [ 1082.739141] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1082.740024] p9_client_rpc+0x220/0x1370 [ 1082.740728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.741659] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1082.742600] ? pipe_poll+0x21b/0x800 [ 1082.743257] ? p9_fd_close+0x4a0/0x4a0 [ 1082.743936] ? wait_for_partner+0x3c0/0x3c0 [ 1082.744689] ? p9_fd_poll+0x1e0/0x2c0 [ 1082.745368] ? p9_fd_create+0x357/0x4a0 [ 1082.746072] ? p9_conn_create+0x510/0x510 [ 1082.746802] ? p9_client_create+0x798/0x1230 [ 1082.747558] ? kfree+0xd7/0x340 [ 1082.748133] ? do_raw_spin_unlock+0x4f/0x220 [ 1082.748909] p9_client_create+0xa76/0x1230 [ 1082.749667] ? p9_client_flush+0x430/0x430 [ 1082.750399] ? trace_hardirqs_on+0x5b/0x180 [ 1082.751163] ? lockdep_init_map_type+0x2c7/0x780 [ 1082.751989] ? __raw_spin_lock_init+0x36/0x110 [ 1082.752801] v9fs_session_init+0x1dd/0x1680 [ 1082.753575] ? lock_release+0x680/0x680 [ 1082.754284] ? kmem_cache_alloc_trace+0x151/0x320 [ 1082.755133] ? v9fs_show_options+0x690/0x690 [ 1082.755914] ? trace_hardirqs_on+0x5b/0x180 [ 1082.756671] ? kasan_unpoison_shadow+0x33/0x50 [ 1082.757475] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.758355] v9fs_mount+0x79/0x8f0 [ 1082.758985] ? v9fs_write_inode+0x60/0x60 [ 1082.759707] legacy_get_tree+0x105/0x220 [ 1082.760413] vfs_get_tree+0x8e/0x300 [ 1082.761053] path_mount+0x1490/0x21e0 [ 1082.761731] ? strncpy_from_user+0x9e/0x470 [ 1082.762490] ? finish_automount+0xa90/0xa90 [ 1082.763253] ? getname_flags.part.0+0x1dd/0x4f0 [ 1082.764064] ? _copy_from_user+0xfb/0x1b0 [ 1082.764785] __x64_sys_mount+0x282/0x300 [ 1082.765495] ? copy_mnt_ns+0xa00/0xa00 [ 1082.766173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.767085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.767977] do_syscall_64+0x33/0x40 [ 1082.768618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.769511] RIP: 0033:0x7f5f5e955b19 [ 1082.770165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.773354] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.774676] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1082.775906] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.777134] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.778383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.779611] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:26:21 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a88", 0x1b}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:26:21 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 8) [ 1082.812413] FAULT_INJECTION: forcing a failure. [ 1082.812413] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.814401] CPU: 0 PID: 7734 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1082.815533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.816907] Call Trace: [ 1082.817346] dump_stack+0x107/0x167 [ 1082.817960] should_fail.cold+0x5/0xa [ 1082.818594] ? create_object.isra.0+0x3a/0xa30 [ 1082.819346] should_failslab+0x5/0x20 [ 1082.819972] kmem_cache_alloc+0x5b/0x310 [ 1082.820639] ? kernel_text_address+0xf2/0x120 [ 1082.821380] create_object.isra.0+0x3a/0xa30 [ 1082.822106] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.822947] kmem_cache_alloc_trace+0x151/0x320 [ 1082.823723] p9_client_create+0xaf/0x1230 [ 1082.824408] ? lock_downgrade+0x6d0/0x6d0 [ 1082.825105] ? p9_client_flush+0x430/0x430 [ 1082.825812] ? trace_hardirqs_on+0x5b/0x180 [ 1082.826518] ? lockdep_init_map_type+0x2c7/0x780 [ 1082.827304] ? __raw_spin_lock_init+0x36/0x110 [ 1082.828060] v9fs_session_init+0x1dd/0x1680 [ 1082.828766] ? lock_release+0x680/0x680 [ 1082.829428] ? kmem_cache_alloc_trace+0x151/0x320 [ 1082.830226] ? v9fs_show_options+0x690/0x690 [ 1082.830951] ? trace_hardirqs_on+0x5b/0x180 [ 1082.831657] ? kasan_unpoison_shadow+0x33/0x50 [ 1082.832404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.832676] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1082.833232] v9fs_mount+0x79/0x8f0 [ 1082.833254] ? v9fs_write_inode+0x60/0x60 [ 1082.836075] legacy_get_tree+0x105/0x220 [ 1082.836741] vfs_get_tree+0x8e/0x300 [ 1082.837351] path_mount+0x1490/0x21e0 [ 1082.837987] ? strncpy_from_user+0x9e/0x470 [ 1082.838696] ? finish_automount+0xa90/0xa90 [ 1082.839398] ? getname_flags.part.0+0x1dd/0x4f0 [ 1082.840158] ? _copy_from_user+0xfb/0x1b0 [ 1082.840845] __x64_sys_mount+0x282/0x300 [ 1082.841523] ? copy_mnt_ns+0xa00/0xa00 [ 1082.842176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.843035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.843876] do_syscall_64+0x33/0x40 [ 1082.844483] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.845322] RIP: 0033:0x7fd388488b19 [ 1082.845937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.848918] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.850160] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1082.851314] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.852464] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.853624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.854783] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1082.866595] FAULT_INJECTION: forcing a failure. [ 1082.866595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.868582] CPU: 0 PID: 7741 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1082.869738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.871166] Call Trace: [ 1082.871613] dump_stack+0x107/0x167 [ 1082.872230] should_fail.cold+0x5/0xa [ 1082.872883] strncpy_from_user+0x34/0x470 [ 1082.873607] getname_flags.part.0+0x95/0x4f0 [ 1082.874372] ? _copy_from_user+0xfb/0x1b0 [ 1082.875092] user_path_at_empty+0xa1/0x100 [ 1082.875817] __x64_sys_mount+0x1e9/0x300 [ 1082.876511] ? copy_mnt_ns+0xa00/0xa00 [ 1082.877183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.878079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.878967] do_syscall_64+0x33/0x40 [ 1082.879609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.880463] RIP: 0033:0x7f8718ffcb19 [ 1082.881087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.884220] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1082.885494] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1082.886700] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1082.887885] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1082.889082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.890272] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:26:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 37) 03:26:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:21 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a88", 0x1b}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="17d8890007000000f05defc71402a8937adf1ee343ff0400a39d47735d31931898763772790000000000001b50c76b1069b134c4c27b05ac57286cb12984515ecdf8cabc3a9e9502375c6b9efe87aa35fd2e485fe34c0198998a4800253bc0270dcd41e817c9cb28b2cd5feadfbe6f90d27abb068c93be4d6af17548031f03e68ff0f79ac9257b019967e10a83f1e1d5270d35f89531470ef4844404000000000000c50900009d7e8455e26fb0d7a24f9a02da0a7039d40358b0a9fec1accc6e2272c87f93867ec21b5c42b9a848f823c9cc0f8e9e259a20b82cd0024053ff71a4c618629c4814f3a966670cd44c1dbda3098d936b8d4aae73d0a073837b6a8749827dcdfe9c68366b3f368af1bd1ab4917ab7007f2107058f93ca73a970b8b46f7421354eefe706c8f83f801a308f257a93380cc2"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:26:21 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x218, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:26:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 10) [ 1082.975223] FAULT_INJECTION: forcing a failure. [ 1082.975223] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.977991] CPU: 1 PID: 7749 Comm: syz-executor.3 Not tainted 5.10.244 #1 03:26:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1082.979057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.980442] Call Trace: [ 1082.980855] dump_stack+0x107/0x167 [ 1082.981403] should_fail.cold+0x5/0xa [ 1082.981982] ? create_object.isra.0+0x3a/0xa30 [ 1082.982668] should_failslab+0x5/0x20 [ 1082.983233] kmem_cache_alloc+0x5b/0x310 [ 1082.983838] create_object.isra.0+0x3a/0xa30 [ 1082.984498] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.985266] __kmalloc+0x16e/0x390 [ 1082.985828] p9_fcall_init+0x97/0x290 [ 1082.986397] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1082.987156] p9_client_rpc+0x220/0x1370 [ 1082.987748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.988541] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1082.989336] ? pipe_poll+0x21b/0x800 [ 1082.989899] ? p9_fd_close+0x4a0/0x4a0 [ 1082.990483] FAULT_INJECTION: forcing a failure. [ 1082.990483] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.992115] ? wait_for_partner+0x3c0/0x3c0 [ 1082.992744] ? p9_fd_poll+0x1e0/0x2c0 [ 1082.993314] ? p9_fd_create+0x357/0x4a0 [ 1082.993909] ? p9_conn_create+0x510/0x510 [ 1082.994525] ? p9_client_create+0x798/0x1230 [ 1082.995175] ? kfree+0xd7/0x340 [ 1082.995662] ? do_raw_spin_unlock+0x4f/0x220 [ 1082.996311] p9_client_create+0xa76/0x1230 [ 1082.996939] ? p9_client_flush+0x430/0x430 [ 1082.997584] ? trace_hardirqs_on+0x5b/0x180 [ 1082.998208] ? lockdep_init_map_type+0x2c7/0x780 [ 1082.998922] ? __raw_spin_lock_init+0x36/0x110 [ 1082.999612] v9fs_session_init+0x1dd/0x1680 [ 1083.000255] ? lock_release+0x680/0x680 [ 1083.000839] ? kmem_cache_alloc_trace+0x151/0x320 [ 1083.001553] ? v9fs_show_options+0x690/0x690 [ 1083.002213] ? trace_hardirqs_on+0x5b/0x180 [ 1083.002849] ? kasan_unpoison_shadow+0x33/0x50 [ 1083.003509] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1083.004253] v9fs_mount+0x79/0x8f0 [ 1083.004769] ? v9fs_write_inode+0x60/0x60 [ 1083.005369] legacy_get_tree+0x105/0x220 [ 1083.005962] vfs_get_tree+0x8e/0x300 [ 1083.006501] path_mount+0x1490/0x21e0 [ 1083.007060] ? strncpy_from_user+0x9e/0x470 [ 1083.007697] ? finish_automount+0xa90/0xa90 [ 1083.008332] ? getname_flags.part.0+0x1dd/0x4f0 [ 1083.009009] ? _copy_from_user+0xfb/0x1b0 [ 1083.009631] __x64_sys_mount+0x282/0x300 [ 1083.010229] ? copy_mnt_ns+0xa00/0xa00 [ 1083.010800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1083.011568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1083.012319] do_syscall_64+0x33/0x40 [ 1083.012869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.013631] RIP: 0033:0x7f5f5e955b19 [ 1083.014173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.016811] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1083.017922] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1083.018966] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1083.020018] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1083.021070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1083.022118] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1083.023193] CPU: 0 PID: 7751 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1083.024587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.026212] Call Trace: [ 1083.026746] dump_stack+0x107/0x167 [ 1083.027459] should_fail.cold+0x5/0xa [ 1083.028210] ? alloc_fs_context+0x57/0x840 [ 1083.029035] should_failslab+0x5/0x20 [ 1083.029785] kmem_cache_alloc_trace+0x55/0x320 [ 1083.030680] alloc_fs_context+0x57/0x840 [ 1083.031467] path_mount+0xab1/0x21e0 [ 1083.032193] ? strncpy_from_user+0x9e/0x470 [ 1083.033046] ? finish_automount+0xa90/0xa90 [ 1083.033899] ? getname_flags.part.0+0x1dd/0x4f0 [ 1083.034810] ? _copy_from_user+0xfb/0x1b0 [ 1083.035615] __x64_sys_mount+0x282/0x300 [ 1083.036415] ? copy_mnt_ns+0xa00/0xa00 [ 1083.036703] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1083.037172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1083.037198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1083.040525] do_syscall_64+0x33/0x40 [ 1083.041237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.042240] RIP: 0033:0x7f8718ffcb19 [ 1083.042963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.046501] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1083.047690] FAULT_INJECTION: forcing a failure. [ 1083.047690] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.047968] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1083.047978] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1083.047996] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1083.053695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1083.055079] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1083.056484] CPU: 1 PID: 7757 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1083.057483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.058664] Call Trace: [ 1083.059047] dump_stack+0x107/0x167 [ 1083.059574] should_fail.cold+0x5/0xa [ 1083.060130] ? create_object.isra.0+0x3a/0xa30 [ 1083.060779] should_failslab+0x5/0x20 [ 1083.061327] kmem_cache_alloc+0x5b/0x310 [ 1083.061922] create_object.isra.0+0x3a/0xa30 [ 1083.062546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1083.063269] kmem_cache_alloc+0x159/0x310 [ 1083.063866] getname_flags.part.0+0x50/0x4f0 [ 1083.064495] ? _copy_from_user+0xfb/0x1b0 [ 1083.065088] user_path_at_empty+0xa1/0x100 [ 1083.065701] __x64_sys_mount+0x1e9/0x300 [ 1083.066278] ? copy_mnt_ns+0xa00/0xa00 [ 1083.066833] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1083.067583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1083.068310] do_syscall_64+0x33/0x40 [ 1083.068837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.069566] RIP: 0033:0x7f52d4da5b19 [ 1083.070093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.072696] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1083.073778] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1083.074786] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1083.075795] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1083.076801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.077820] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1096.819542] FAULT_INJECTION: forcing a failure. [ 1096.819542] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.822005] CPU: 0 PID: 7772 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1096.823449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.825198] Call Trace: [ 1096.825791] dump_stack+0x107/0x167 [ 1096.826571] should_fail.cold+0x5/0xa [ 1096.827547] should_failslab+0x5/0x20 [ 1096.828349] __kmalloc_track_caller+0x79/0x370 [ 1096.828934] FAULT_INJECTION: forcing a failure. [ 1096.828934] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.829316] ? p9_client_create+0x41d/0x1230 [ 1096.831556] kstrdup+0x36/0x70 [ 1096.832245] p9_client_create+0x41d/0x1230 [ 1096.833145] ? lock_downgrade+0x6d0/0x6d0 [ 1096.834043] ? p9_client_flush+0x430/0x430 [ 1096.834944] ? trace_hardirqs_on+0x5b/0x180 [ 1096.835853] ? lockdep_init_map_type+0x2c7/0x780 [ 1096.836850] ? __raw_spin_lock_init+0x36/0x110 [ 1096.837829] v9fs_session_init+0x1dd/0x1680 [ 1096.838740] ? lock_release+0x680/0x680 [ 1096.839579] ? kmem_cache_alloc_trace+0x151/0x320 [ 1096.840589] ? v9fs_show_options+0x690/0x690 [ 1096.841520] ? trace_hardirqs_on+0x5b/0x180 [ 1096.842425] ? kasan_unpoison_shadow+0x33/0x50 [ 1096.843386] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.844457] v9fs_mount+0x79/0x8f0 [ 1096.845201] ? v9fs_write_inode+0x60/0x60 [ 1096.846073] legacy_get_tree+0x105/0x220 [ 1096.846927] vfs_get_tree+0x8e/0x300 [ 1096.847711] path_mount+0x1490/0x21e0 [ 1096.848508] ? strncpy_from_user+0x9e/0x470 [ 1096.849404] ? finish_automount+0xa90/0xa90 [ 1096.850317] ? getname_flags.part.0+0x1dd/0x4f0 [ 1096.851290] ? _copy_from_user+0xfb/0x1b0 [ 1096.852161] __x64_sys_mount+0x282/0x300 [ 1096.853014] ? copy_mnt_ns+0xa00/0xa00 [ 1096.853836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.854937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.856012] do_syscall_64+0x33/0x40 [ 1096.856788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.857864] RIP: 0033:0x7fd388488b19 [ 1096.858640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.862456] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1096.864028] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1096.865512] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1096.867006] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1096.868481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.869960] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1096.871461] CPU: 1 PID: 7777 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1096.872285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.873263] Call Trace: [ 1096.873574] dump_stack+0x107/0x167 [ 1096.874011] should_fail.cold+0x5/0xa [ 1096.874462] ? p9_fcall_init+0x97/0x290 [ 1096.874929] should_failslab+0x5/0x20 [ 1096.875375] __kmalloc+0x72/0x390 [ 1096.875783] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.876380] p9_fcall_init+0x97/0x290 [ 1096.876830] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1096.877430] p9_client_rpc+0x220/0x1370 03:26:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 45) 03:26:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 22) 03:26:35 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x240, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:26:35 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a88", 0x1b}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:26:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 38) 03:26:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 11) 03:26:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:35 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 9) [ 1096.877903] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1096.878645] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1096.879321] ? pipe_poll+0x21b/0x800 [ 1096.879754] ? p9_fd_close+0x4a0/0x4a0 [ 1096.880206] ? wait_for_partner+0x3c0/0x3c0 [ 1096.880709] ? p9_fd_poll+0x1e0/0x2c0 [ 1096.881155] ? p9_fd_create+0x357/0x4a0 [ 1096.881626] ? p9_conn_create+0x510/0x510 [ 1096.882110] ? p9_client_create+0x798/0x1230 [ 1096.882622] ? kfree+0xd7/0x340 [ 1096.883005] ? do_raw_spin_unlock+0x4f/0x220 [ 1096.883520] p9_client_create+0xa76/0x1230 [ 1096.884019] ? p9_client_flush+0x430/0x430 [ 1096.884510] ? trace_hardirqs_on+0x5b/0x180 [ 1096.885011] ? lockdep_init_map_type+0x2c7/0x780 [ 1096.885563] ? __raw_spin_lock_init+0x36/0x110 [ 1096.886105] v9fs_session_init+0x1dd/0x1680 [ 1096.886607] ? lock_release+0x680/0x680 [ 1096.887076] ? kmem_cache_alloc_trace+0x151/0x320 [ 1096.887635] ? v9fs_show_options+0x690/0x690 [ 1096.888166] ? trace_hardirqs_on+0x5b/0x180 [ 1096.888679] ? kasan_unpoison_shadow+0x33/0x50 [ 1096.889215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.889812] v9fs_mount+0x79/0x8f0 [ 1096.890229] ? v9fs_write_inode+0x60/0x60 [ 1096.890709] legacy_get_tree+0x105/0x220 [ 1096.891181] vfs_get_tree+0x8e/0x300 [ 1096.891613] path_mount+0x1490/0x21e0 [ 1096.892063] ? strncpy_from_user+0x9e/0x470 [ 1096.892565] ? finish_automount+0xa90/0xa90 [ 1096.893069] ? getname_flags.part.0+0x1dd/0x4f0 [ 1096.893621] ? _copy_from_user+0xfb/0x1b0 [ 1096.894109] __x64_sys_mount+0x282/0x300 [ 1096.894582] ? copy_mnt_ns+0xa00/0xa00 [ 1096.895038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.895649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.896250] do_syscall_64+0x33/0x40 [ 1096.896684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.897281] RIP: 0033:0x7f5f5e955b19 [ 1096.897722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.899842] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1096.900722] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1096.901550] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1096.902378] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1096.903202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.904026] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1096.912826] FAULT_INJECTION: forcing a failure. [ 1096.912826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.914335] CPU: 1 PID: 7785 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1096.915130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.916093] Call Trace: [ 1096.916400] dump_stack+0x107/0x167 [ 1096.916826] should_fail.cold+0x5/0xa [ 1096.917272] strncpy_from_user+0x34/0x470 [ 1096.917770] getname_flags.part.0+0x95/0x4f0 [ 1096.918279] ? _copy_from_user+0xfb/0x1b0 [ 1096.918769] user_path_at_empty+0xa1/0x100 [ 1096.919262] __x64_sys_mount+0x1e9/0x300 [ 1096.919733] ? copy_mnt_ns+0xa00/0xa00 [ 1096.920188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.920797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.921399] do_syscall_64+0x33/0x40 [ 1096.921842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.922437] RIP: 0033:0x7f52d4da5b19 [ 1096.922875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.924999] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1096.925899] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1096.926723] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1096.927549] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1096.928375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.929199] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1096.932390] FAULT_INJECTION: forcing a failure. [ 1096.932390] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.935017] CPU: 0 PID: 7774 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1096.935557] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1096.936602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.936609] Call Trace: [ 1096.936631] dump_stack+0x107/0x167 [ 1096.941009] should_fail.cold+0x5/0xa [ 1096.941900] ? ___slab_alloc+0x155/0x700 [ 1096.942852] ? create_object.isra.0+0x3a/0xa30 [ 1096.943910] should_failslab+0x5/0x20 [ 1096.944787] kmem_cache_alloc+0x5b/0x310 [ 1096.945752] create_object.isra.0+0x3a/0xa30 [ 1096.946761] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.947945] kmem_cache_alloc+0x159/0x310 [ 1096.948914] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1096.950230] idr_get_free+0x4b5/0x8f0 [ 1096.951119] idr_alloc_u32+0x170/0x2d0 [ 1096.952011] ? __fprop_inc_percpu_max+0x130/0x130 [ 1096.953113] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1096.954341] ? lock_release+0x680/0x680 [ 1096.955249] idr_alloc+0xc2/0x130 [ 1096.956040] ? idr_alloc_u32+0x2d0/0x2d0 [ 1096.956958] ? rwlock_bug.part.0+0x90/0x90 [ 1096.957952] p9_client_prepare_req.part.0+0x612/0xac0 [ 1096.959137] p9_client_rpc+0x220/0x1370 [ 1096.960042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.961247] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1096.962470] ? pipe_poll+0x21b/0x800 [ 1096.963322] ? p9_fd_close+0x4a0/0x4a0 [ 1096.964216] ? wait_for_partner+0x3c0/0x3c0 [ 1096.965202] ? p9_fd_poll+0x1e0/0x2c0 [ 1096.966081] ? p9_fd_create+0x357/0x4a0 [ 1096.966991] ? p9_conn_create+0x510/0x510 [ 1096.967942] ? p9_client_create+0x798/0x1230 [ 1096.968945] ? kfree+0xd7/0x340 [ 1096.969703] ? do_raw_spin_unlock+0x4f/0x220 [ 1096.970694] p9_client_create+0xa76/0x1230 [ 1096.971644] ? p9_client_flush+0x430/0x430 [ 1096.972600] ? trace_hardirqs_on+0x5b/0x180 [ 1096.973563] ? lockdep_init_map_type+0x2c7/0x780 [ 1096.974650] ? __raw_spin_lock_init+0x36/0x110 [ 1096.975690] v9fs_session_init+0x1dd/0x1680 [ 1096.976666] ? lock_release+0x680/0x680 [ 1096.977574] ? kmem_cache_alloc_trace+0x151/0x320 [ 1096.978680] ? v9fs_show_options+0x690/0x690 [ 1096.979690] ? trace_hardirqs_on+0x5b/0x180 [ 1096.980667] ? kasan_unpoison_shadow+0x33/0x50 [ 1096.981704] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.982858] v9fs_mount+0x79/0x8f0 [ 1096.983669] ? v9fs_write_inode+0x60/0x60 [ 1096.984604] legacy_get_tree+0x105/0x220 [ 1096.985524] vfs_get_tree+0x8e/0x300 [ 1096.986369] path_mount+0x1490/0x21e0 [ 1096.987232] ? strncpy_from_user+0x9e/0x470 [ 1096.988201] ? finish_automount+0xa90/0xa90 [ 1096.989167] ? getname_flags.part.0+0x1dd/0x4f0 [ 1096.990224] ? _copy_from_user+0xfb/0x1b0 [ 1096.991165] __x64_sys_mount+0x282/0x300 [ 1096.992075] ? copy_mnt_ns+0xa00/0xa00 [ 1096.992953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.994137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.995296] do_syscall_64+0x33/0x40 [ 1096.996132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.997279] RIP: 0033:0x7f2ae689eb19 [ 1096.998122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.002263] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1097.003960] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1097.005553] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1097.007147] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1097.008751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.010348] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:26:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:35 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 10) [ 1097.020061] FAULT_INJECTION: forcing a failure. [ 1097.020061] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1097.022709] CPU: 0 PID: 7779 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1097.024239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.026112] Call Trace: 03:26:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 39) [ 1097.026704] dump_stack+0x107/0x167 [ 1097.027626] should_fail.cold+0x5/0xa [ 1097.028481] __alloc_pages_nodemask+0x182/0x600 [ 1097.029528] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1097.030883] ? kmem_cache_alloc_trace+0x305/0x320 [ 1097.031838] FAULT_INJECTION: forcing a failure. [ 1097.031838] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.031967] alloc_pages_current+0x187/0x280 [ 1097.031992] allocate_slab+0x26f/0x380 [ 1097.035044] ___slab_alloc+0x470/0x700 [ 1097.035917] ? alloc_fs_context+0x57/0x840 [ 1097.036868] ? alloc_fs_context+0x57/0x840 [ 1097.037829] ? kmem_cache_alloc_trace+0x305/0x320 [ 1097.038902] kmem_cache_alloc_trace+0x305/0x320 [ 1097.039947] alloc_fs_context+0x57/0x840 [ 1097.040858] path_mount+0xab1/0x21e0 [ 1097.041702] ? strncpy_from_user+0x9e/0x470 [ 1097.042661] ? finish_automount+0xa90/0xa90 [ 1097.043634] ? getname_flags.part.0+0x1dd/0x4f0 [ 1097.044669] ? _copy_from_user+0xfb/0x1b0 [ 1097.045600] __x64_sys_mount+0x282/0x300 [ 1097.046526] ? copy_mnt_ns+0xa00/0xa00 [ 1097.047399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.048567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.049829] do_syscall_64+0x33/0x40 [ 1097.050666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.051817] RIP: 0033:0x7f8718ffcb19 [ 1097.052654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.056774] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1097.058482] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1097.060076] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1097.061676] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1097.063274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.064861] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1097.066479] CPU: 1 PID: 7792 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1097.067273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.068198] Call Trace: [ 1097.068493] dump_stack+0x107/0x167 [ 1097.068901] should_fail.cold+0x5/0xa [ 1097.069360] ? alloc_fs_context+0x57/0x840 [ 1097.069840] should_failslab+0x5/0x20 [ 1097.070265] kmem_cache_alloc_trace+0x55/0x320 [ 1097.070778] alloc_fs_context+0x57/0x840 [ 1097.071236] path_mount+0xab1/0x21e0 [ 1097.071654] ? strncpy_from_user+0x9e/0x470 [ 1097.072134] ? finish_automount+0xa90/0xa90 [ 1097.072615] ? getname_flags.part.0+0x1dd/0x4f0 [ 1097.073135] ? _copy_from_user+0xfb/0x1b0 [ 1097.073599] __x64_sys_mount+0x282/0x300 [ 1097.074064] ? copy_mnt_ns+0xa00/0xa00 [ 1097.074501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.075079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.075651] do_syscall_64+0x33/0x40 [ 1097.076064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.076631] RIP: 0033:0x7f52d4da5b19 [ 1097.077042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.079088] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1097.079930] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1097.080721] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1097.081510] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1097.082308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.083100] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 03:26:35 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1097.111367] FAULT_INJECTION: forcing a failure. [ 1097.111367] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.113947] CPU: 0 PID: 7796 Comm: syz-executor.3 Not tainted 5.10.244 #1 03:26:35 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b82", 0x20}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1097.115476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.117428] Call Trace: [ 1097.118052] dump_stack+0x107/0x167 [ 1097.118869] should_fail.cold+0x5/0xa [ 1097.119724] ? create_object.isra.0+0x3a/0xa30 [ 1097.120740] should_failslab+0x5/0x20 [ 1097.121588] kmem_cache_alloc+0x5b/0x310 [ 1097.122517] create_object.isra.0+0x3a/0xa30 [ 1097.123492] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1097.124631] __kmalloc+0x16e/0x390 [ 1097.125429] p9_fcall_init+0x97/0x290 [ 1097.126285] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1097.127425] p9_client_rpc+0x220/0x1370 [ 1097.128311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.129481] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1097.130685] ? pipe_poll+0x21b/0x800 [ 1097.131512] ? p9_fd_close+0x4a0/0x4a0 [ 1097.132383] ? wait_for_partner+0x3c0/0x3c0 [ 1097.133342] ? p9_fd_poll+0x1e0/0x2c0 [ 1097.134242] ? p9_fd_create+0x357/0x4a0 [ 1097.135125] ? p9_conn_create+0x510/0x510 [ 1097.136053] ? p9_client_create+0x798/0x1230 [ 1097.137039] ? kfree+0xd7/0x340 [ 1097.137781] ? do_raw_spin_unlock+0x4f/0x220 [ 1097.138769] p9_client_create+0xa76/0x1230 [ 1097.139716] ? p9_client_flush+0x430/0x430 [ 1097.140661] ? trace_hardirqs_on+0x5b/0x180 [ 1097.141672] ? lockdep_init_map_type+0x2c7/0x780 [ 1097.142732] ? __raw_spin_lock_init+0x36/0x110 [ 1097.143755] v9fs_session_init+0x1dd/0x1680 [ 1097.144723] ? lock_release+0x680/0x680 [ 1097.145628] ? kmem_cache_alloc_trace+0x151/0x320 [ 1097.146787] ? v9fs_show_options+0x690/0x690 [ 1097.147777] ? trace_hardirqs_on+0x5b/0x180 [ 1097.148735] ? kasan_unpoison_shadow+0x33/0x50 [ 1097.149760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1097.150890] v9fs_mount+0x79/0x8f0 [ 1097.151683] ? v9fs_write_inode+0x60/0x60 [ 1097.152605] legacy_get_tree+0x105/0x220 [ 1097.153520] vfs_get_tree+0x8e/0x300 [ 1097.154376] path_mount+0x1490/0x21e0 [ 1097.155236] ? strncpy_from_user+0x9e/0x470 [ 1097.156200] ? finish_automount+0xa90/0xa90 [ 1097.157162] ? getname_flags.part.0+0x1dd/0x4f0 [ 1097.158211] ? _copy_from_user+0xfb/0x1b0 [ 1097.159145] __x64_sys_mount+0x282/0x300 [ 1097.160047] ? copy_mnt_ns+0xa00/0xa00 [ 1097.160920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.162101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.163255] do_syscall_64+0x33/0x40 [ 1097.164084] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.165222] RIP: 0033:0x7f5f5e955b19 [ 1097.166068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.170163] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1097.171862] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1097.173437] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1097.175041] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1097.176631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.178246] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1097.184673] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:26:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:36 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 11) 03:26:36 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b82", 0x20}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1097.258768] FAULT_INJECTION: forcing a failure. [ 1097.258768] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.260081] CPU: 1 PID: 7809 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1097.260849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.261787] Call Trace: [ 1097.262089] dump_stack+0x107/0x167 [ 1097.262496] should_fail.cold+0x5/0xa [ 1097.262927] ? create_object.isra.0+0x3a/0xa30 [ 1097.263435] should_failslab+0x5/0x20 [ 1097.263862] kmem_cache_alloc+0x5b/0x310 [ 1097.264319] create_object.isra.0+0x3a/0xa30 [ 1097.264809] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1097.265382] kmem_cache_alloc_trace+0x151/0x320 [ 1097.265912] alloc_fs_context+0x57/0x840 [ 1097.266371] path_mount+0xab1/0x21e0 [ 1097.266792] ? strncpy_from_user+0x9e/0x470 [ 1097.267276] ? finish_automount+0xa90/0xa90 [ 1097.267758] ? getname_flags.part.0+0x1dd/0x4f0 [ 1097.268278] ? _copy_from_user+0xfb/0x1b0 [ 1097.268750] __x64_sys_mount+0x282/0x300 [ 1097.269203] ? copy_mnt_ns+0xa00/0xa00 [ 1097.269651] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.270243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.270819] do_syscall_64+0x33/0x40 [ 1097.271237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.271811] RIP: 0033:0x7f52d4da5b19 [ 1097.272229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.274295] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1097.275149] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1097.275947] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1097.276746] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1097.277543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.278348] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1097.307006] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:26:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 46) 03:26:50 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 12) 03:26:50 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x3e8, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:26:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 23) 03:26:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x48, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 40) 03:26:50 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b82", 0x20}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:26:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 12) [ 1112.167243] FAULT_INJECTION: forcing a failure. [ 1112.167243] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.169618] CPU: 0 PID: 7825 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1112.171055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.172804] Call Trace: [ 1112.173359] dump_stack+0x107/0x167 [ 1112.174132] should_fail.cold+0x5/0xa [ 1112.174939] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1112.176142] should_failslab+0x5/0x20 [ 1112.176939] kmem_cache_alloc+0x5b/0x310 [ 1112.177818] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1112.178963] idr_get_free+0x4b5/0x8f0 [ 1112.179774] idr_alloc_u32+0x170/0x2d0 [ 1112.180598] ? __fprop_inc_percpu_max+0x130/0x130 [ 1112.181618] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1112.182748] ? lock_release+0x680/0x680 [ 1112.183586] idr_alloc+0xc2/0x130 [ 1112.184311] ? idr_alloc_u32+0x2d0/0x2d0 [ 1112.185160] ? rwlock_bug.part.0+0x90/0x90 [ 1112.186129] p9_client_prepare_req.part.0+0x612/0xac0 [ 1112.187212] p9_client_rpc+0x220/0x1370 [ 1112.188040] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.189139] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1112.190262] ? pipe_poll+0x21b/0x800 [ 1112.191037] ? p9_fd_close+0x4a0/0x4a0 [ 1112.191857] ? wait_for_partner+0x3c0/0x3c0 [ 1112.192755] ? p9_fd_poll+0x1e0/0x2c0 [ 1112.193561] ? p9_fd_create+0x357/0x4a0 [ 1112.194397] ? p9_conn_create+0x510/0x510 [ 1112.195262] ? p9_client_create+0x798/0x1230 [ 1112.196177] ? kfree+0xd7/0x340 [ 1112.196873] ? do_raw_spin_unlock+0x4f/0x220 [ 1112.197811] p9_client_create+0xa76/0x1230 [ 1112.198684] ? p9_client_flush+0x430/0x430 [ 1112.199568] ? trace_hardirqs_on+0x5b/0x180 [ 1112.200468] ? lockdep_init_map_type+0x2c7/0x780 [ 1112.201457] ? __raw_spin_lock_init+0x36/0x110 [ 1112.202426] v9fs_session_init+0x1dd/0x1680 [ 1112.203324] ? lock_release+0x680/0x680 [ 1112.204185] ? kmem_cache_alloc_trace+0x151/0x320 [ 1112.205187] ? v9fs_show_options+0x690/0x690 [ 1112.206122] ? trace_hardirqs_on+0x5b/0x180 [ 1112.207024] ? kasan_unpoison_shadow+0x33/0x50 [ 1112.207977] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1112.209032] v9fs_mount+0x79/0x8f0 [ 1112.209765] ? v9fs_write_inode+0x60/0x60 [ 1112.210643] legacy_get_tree+0x105/0x220 [ 1112.211493] vfs_get_tree+0x8e/0x300 [ 1112.212269] path_mount+0x1490/0x21e0 [ 1112.213070] ? strncpy_from_user+0x9e/0x470 [ 1112.213991] ? finish_automount+0xa90/0xa90 [ 1112.214901] ? getname_flags.part.0+0x1dd/0x4f0 [ 1112.215872] ? _copy_from_user+0xfb/0x1b0 [ 1112.216758] __x64_sys_mount+0x282/0x300 [ 1112.217610] ? copy_mnt_ns+0xa00/0xa00 [ 1112.218443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.219550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.220633] do_syscall_64+0x33/0x40 [ 1112.221422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.222512] RIP: 0033:0x7f5f5e955b19 [ 1112.223290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.227143] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.228729] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1112.230224] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1112.231719] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1112.233197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.234698] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1112.241326] FAULT_INJECTION: forcing a failure. [ 1112.241326] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.243901] CPU: 1 PID: 7833 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1112.245092] FAULT_INJECTION: forcing a failure. [ 1112.245092] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.245350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.249399] Call Trace: [ 1112.249981] dump_stack+0x107/0x167 [ 1112.250760] should_fail.cold+0x5/0xa [ 1112.251566] ? p9pdu_readf+0xadb/0x1d40 [ 1112.252411] should_failslab+0x5/0x20 [ 1112.253220] __kmalloc+0x72/0x390 [ 1112.253979] p9pdu_readf+0xadb/0x1d40 [ 1112.254803] ? pipe_poll+0x21b/0x800 [ 1112.255603] ? p9pdu_writef+0x100/0x100 [ 1112.256448] ? p9_fd_poll+0x1e0/0x2c0 [ 1112.257278] ? p9_fd_create+0x357/0x4a0 [ 1112.258130] ? p9_conn_create+0x510/0x510 [ 1112.259018] ? p9_client_create+0x798/0x1230 [ 1112.259950] ? kfree+0xd7/0x340 [ 1112.260652] ? do_raw_spin_unlock+0x4f/0x220 [ 1112.261590] p9_client_create+0xaee/0x1230 [ 1112.262508] ? p9_client_flush+0x430/0x430 [ 1112.263403] ? trace_hardirqs_on+0x5b/0x180 [ 1112.264328] ? lockdep_init_map_type+0x2c7/0x780 [ 1112.265332] ? __raw_spin_lock_init+0x36/0x110 [ 1112.266314] v9fs_session_init+0x1dd/0x1680 [ 1112.267237] ? lock_release+0x680/0x680 [ 1112.268095] ? kmem_cache_alloc_trace+0x151/0x320 [ 1112.269117] ? v9fs_show_options+0x690/0x690 [ 1112.270082] ? trace_hardirqs_on+0x5b/0x180 [ 1112.270998] ? kasan_unpoison_shadow+0x33/0x50 [ 1112.271968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1112.273046] v9fs_mount+0x79/0x8f0 [ 1112.273822] ? v9fs_write_inode+0x60/0x60 [ 1112.274878] legacy_get_tree+0x105/0x220 [ 1112.275747] vfs_get_tree+0x8e/0x300 [ 1112.276540] path_mount+0x1490/0x21e0 [ 1112.277361] ? strncpy_from_user+0x9e/0x470 [ 1112.278285] ? finish_automount+0xa90/0xa90 [ 1112.279213] ? getname_flags.part.0+0x1dd/0x4f0 [ 1112.280201] ? _copy_from_user+0xfb/0x1b0 [ 1112.281091] __x64_sys_mount+0x282/0x300 [ 1112.281959] ? copy_mnt_ns+0xa00/0xa00 [ 1112.282802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.283915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.285005] do_syscall_64+0x33/0x40 [ 1112.285804] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.286898] RIP: 0033:0x7f2ae689eb19 [ 1112.287692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.291579] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.293198] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1112.294707] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1112.296213] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1112.297723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.299234] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1112.300771] CPU: 0 PID: 7834 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1112.302230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.303975] Call Trace: [ 1112.304535] dump_stack+0x107/0x167 [ 1112.305300] should_fail.cold+0x5/0xa [ 1112.306108] ? legacy_init_fs_context+0x44/0xe0 [ 1112.307104] should_failslab+0x5/0x20 [ 1112.307901] kmem_cache_alloc_trace+0x55/0x320 [ 1112.308864] ? lockdep_init_map_type+0x2c7/0x780 [ 1112.309872] legacy_init_fs_context+0x44/0xe0 [ 1112.310822] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1112.311861] alloc_fs_context+0x4fd/0x840 [ 1112.312742] path_mount+0xab1/0x21e0 [ 1112.313526] ? strncpy_from_user+0x9e/0x470 [ 1112.314437] ? finish_automount+0xa90/0xa90 [ 1112.314518] FAULT_INJECTION: forcing a failure. [ 1112.314518] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.315337] ? getname_flags.part.0+0x1dd/0x4f0 [ 1112.315355] ? _copy_from_user+0xfb/0x1b0 [ 1112.315381] __x64_sys_mount+0x282/0x300 [ 1112.320318] ? copy_mnt_ns+0xa00/0xa00 [ 1112.321141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.322249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.323333] do_syscall_64+0x33/0x40 [ 1112.324114] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.325195] RIP: 0033:0x7f8718ffcb19 [ 1112.325982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.329865] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.331473] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1112.332974] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1112.334478] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1112.335967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.337484] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1112.339017] CPU: 1 PID: 7835 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1112.340464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.342503] Call Trace: [ 1112.343077] dump_stack+0x107/0x167 [ 1112.344053] should_fail.cold+0x5/0xa [ 1112.344975] ? create_object.isra.0+0x3a/0xa30 [ 1112.345946] should_failslab+0x5/0x20 [ 1112.346756] kmem_cache_alloc+0x5b/0x310 [ 1112.347613] ? lock_downgrade+0x6d0/0x6d0 [ 1112.348495] create_object.isra.0+0x3a/0xa30 [ 1112.349418] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1112.350504] __kmalloc_track_caller+0x177/0x370 [ 1112.351484] ? p9_client_create+0x41d/0x1230 [ 1112.352427] kstrdup+0x36/0x70 [ 1112.353128] p9_client_create+0x41d/0x1230 [ 1112.354038] ? lock_downgrade+0x6d0/0x6d0 [ 1112.354917] ? p9_client_flush+0x430/0x430 [ 1112.355823] ? trace_hardirqs_on+0x5b/0x180 [ 1112.356729] ? lockdep_init_map_type+0x2c7/0x780 [ 1112.357730] ? __raw_spin_lock_init+0x36/0x110 [ 1112.358719] v9fs_session_init+0x1dd/0x1680 [ 1112.359660] ? lock_release+0x680/0x680 [ 1112.360535] ? kmem_cache_alloc_trace+0x151/0x320 [ 1112.361585] ? v9fs_show_options+0x690/0x690 [ 1112.362560] ? trace_hardirqs_on+0x5b/0x180 [ 1112.363500] ? kasan_unpoison_shadow+0x33/0x50 [ 1112.364488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1112.365594] v9fs_mount+0x79/0x8f0 [ 1112.366387] ? v9fs_write_inode+0x60/0x60 [ 1112.367294] legacy_get_tree+0x105/0x220 [ 1112.368183] vfs_get_tree+0x8e/0x300 [ 1112.368996] path_mount+0x1490/0x21e0 [ 1112.369844] ? strncpy_from_user+0x9e/0x470 [ 1112.370785] ? finish_automount+0xa90/0xa90 [ 1112.371722] ? getname_flags.part.0+0x1dd/0x4f0 [ 1112.372735] ? _copy_from_user+0xfb/0x1b0 [ 1112.373651] __x64_sys_mount+0x282/0x300 [ 1112.374552] ? copy_mnt_ns+0xa00/0xa00 [ 1112.375422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.376575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.377713] do_syscall_64+0x33/0x40 [ 1112.378546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.379668] RIP: 0033:0x7fd388488b19 [ 1112.380492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.384539] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.386212] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1112.387771] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1112.389329] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1112.390900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.392466] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1112.398348] FAULT_INJECTION: forcing a failure. [ 1112.398348] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.400897] CPU: 1 PID: 7836 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1112.402410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.404229] Call Trace: [ 1112.404817] dump_stack+0x107/0x167 [ 1112.405622] should_fail.cold+0x5/0xa [ 1112.406473] ? legacy_init_fs_context+0x44/0xe0 [ 1112.407496] should_failslab+0x5/0x20 [ 1112.408349] kmem_cache_alloc_trace+0x55/0x320 [ 1112.409359] ? lockdep_init_map_type+0x2c7/0x780 [ 1112.410424] legacy_init_fs_context+0x44/0xe0 [ 1112.411411] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1112.412511] alloc_fs_context+0x4fd/0x840 [ 1112.413433] path_mount+0xab1/0x21e0 [ 1112.414273] ? strncpy_from_user+0x9e/0x470 [ 1112.415231] ? finish_automount+0xa90/0xa90 [ 1112.416183] ? getname_flags.part.0+0x1dd/0x4f0 [ 1112.417211] ? _copy_from_user+0xfb/0x1b0 [ 1112.418149] __x64_sys_mount+0x282/0x300 [ 1112.419043] ? copy_mnt_ns+0xa00/0xa00 [ 1112.419906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.421062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.422220] do_syscall_64+0x33/0x40 [ 1112.423047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.424163] RIP: 0033:0x7f52d4da5b19 [ 1112.424981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.429014] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.430680] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1112.432239] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1112.433805] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1112.435364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.436940] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1112.442710] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:26:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:26:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 13) 03:26:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1112.552628] FAULT_INJECTION: forcing a failure. [ 1112.552628] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.555153] CPU: 1 PID: 7848 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1112.556583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.558347] Call Trace: [ 1112.558916] dump_stack+0x107/0x167 [ 1112.559691] should_fail.cold+0x5/0xa [ 1112.560501] ? create_object.isra.0+0x3a/0xa30 [ 1112.561470] should_failslab+0x5/0x20 [ 1112.562290] kmem_cache_alloc+0x5b/0x310 [ 1112.563167] create_object.isra.0+0x3a/0xa30 [ 1112.564090] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1112.565168] kmem_cache_alloc_trace+0x151/0x320 [ 1112.566160] ? lockdep_init_map_type+0x2c7/0x780 [ 1112.567160] legacy_init_fs_context+0x44/0xe0 [ 1112.568107] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1112.569150] alloc_fs_context+0x4fd/0x840 [ 1112.570036] path_mount+0xab1/0x21e0 [ 1112.570822] ? strncpy_from_user+0x9e/0x470 [ 1112.571730] ? finish_automount+0xa90/0xa90 [ 1112.572638] ? getname_flags.part.0+0x1dd/0x4f0 [ 1112.573612] ? _copy_from_user+0xfb/0x1b0 [ 1112.574499] __x64_sys_mount+0x282/0x300 [ 1112.575350] ? copy_mnt_ns+0xa00/0xa00 [ 1112.576178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.577277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.578374] do_syscall_64+0x33/0x40 [ 1112.579163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.580230] RIP: 0033:0x7f8718ffcb19 [ 1112.581013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.584851] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:26:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 41) [ 1112.586462] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1112.588452] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 03:26:51 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee", 0x22}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1112.589973] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1112.591690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.593182] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:26:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1112.641750] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1112.646767] FAULT_INJECTION: forcing a failure. [ 1112.646767] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.649489] CPU: 1 PID: 7856 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1112.651218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.653300] Call Trace: [ 1112.653998] dump_stack+0x107/0x167 [ 1112.654934] should_fail.cold+0x5/0xa [ 1112.655913] ? create_object.isra.0+0x3a/0xa30 [ 1112.657055] should_failslab+0x5/0x20 [ 1112.658032] kmem_cache_alloc+0x5b/0x310 [ 1112.659074] create_object.isra.0+0x3a/0xa30 [ 1112.660185] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1112.661484] kmem_cache_alloc+0x159/0x310 [ 1112.662575] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1112.663987] idr_get_free+0x4b5/0x8f0 [ 1112.664981] idr_alloc_u32+0x170/0x2d0 [ 1112.666006] ? __fprop_inc_percpu_max+0x130/0x130 [ 1112.667238] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1112.668585] ? lock_release+0x680/0x680 [ 1112.669602] idr_alloc+0xc2/0x130 [ 1112.670499] ? idr_alloc_u32+0x2d0/0x2d0 [ 1112.671525] ? rwlock_bug.part.0+0x90/0x90 [ 1112.672616] p9_client_prepare_req.part.0+0x612/0xac0 [ 1112.673957] p9_client_rpc+0x220/0x1370 [ 1112.674980] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.676319] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1112.677666] ? pipe_poll+0x21b/0x800 [ 1112.678616] ? p9_fd_close+0x4a0/0x4a0 [ 1112.679611] ? wait_for_partner+0x3c0/0x3c0 [ 1112.680721] ? p9_fd_poll+0x1e0/0x2c0 [ 1112.681708] ? p9_fd_create+0x357/0x4a0 [ 1112.682721] ? p9_conn_create+0x510/0x510 [ 1112.683777] ? p9_client_create+0x798/0x1230 [ 1112.684891] ? kfree+0xd7/0x340 [ 1112.685717] ? do_raw_spin_unlock+0x4f/0x220 [ 1112.686858] p9_client_create+0xa76/0x1230 [ 1112.687935] ? p9_client_flush+0x430/0x430 [ 1112.689006] ? trace_hardirqs_on+0x5b/0x180 [ 1112.690119] ? lockdep_init_map_type+0x2c7/0x780 [ 1112.691318] ? __raw_spin_lock_init+0x36/0x110 [ 1112.692491] v9fs_session_init+0x1dd/0x1680 [ 1112.693570] ? lock_release+0x680/0x680 [ 1112.694584] ? kmem_cache_alloc_trace+0x151/0x320 [ 1112.695777] ? v9fs_show_options+0x690/0x690 [ 1112.696889] ? trace_hardirqs_on+0x5b/0x180 [ 1112.697977] ? kasan_unpoison_shadow+0x33/0x50 [ 1112.699125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1112.700405] v9fs_mount+0x79/0x8f0 [ 1112.701295] ? v9fs_write_inode+0x60/0x60 [ 1112.702358] legacy_get_tree+0x105/0x220 [ 1112.703385] vfs_get_tree+0x8e/0x300 [ 1112.704322] path_mount+0x1490/0x21e0 [ 1112.705276] ? strncpy_from_user+0x9e/0x470 [ 1112.706370] ? finish_automount+0xa90/0xa90 [ 1112.707441] ? getname_flags.part.0+0x1dd/0x4f0 [ 1112.708611] ? _copy_from_user+0xfb/0x1b0 [ 1112.709660] __x64_sys_mount+0x282/0x300 [ 1112.710684] ? copy_mnt_ns+0xa00/0xa00 [ 1112.711668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.712978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.714267] do_syscall_64+0x33/0x40 [ 1112.715194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.716464] RIP: 0033:0x7f5f5e955b19 [ 1112.717396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.721934] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1112.723813] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1112.725577] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1112.727357] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1112.729093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.730846] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:27:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 47) [ 1125.639995] FAULT_INJECTION: forcing a failure. [ 1125.639995] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.642425] CPU: 1 PID: 7867 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1125.643856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.645591] Call Trace: [ 1125.646155] dump_stack+0x107/0x167 [ 1125.646915] should_fail.cold+0x5/0xa [ 1125.647716] ? create_object.isra.0+0x3a/0xa30 [ 1125.648667] should_failslab+0x5/0x20 [ 1125.649461] kmem_cache_alloc+0x5b/0x310 [ 1125.650322] create_object.isra.0+0x3a/0xa30 [ 1125.651236] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1125.652295] __kmalloc+0x16e/0x390 [ 1125.653040] p9pdu_readf+0xadb/0x1d40 [ 1125.653839] ? pipe_poll+0x21b/0x800 [ 1125.654633] ? p9pdu_writef+0x100/0x100 [ 1125.655461] ? p9_fd_poll+0x1e0/0x2c0 [ 1125.656277] ? p9_fd_create+0x357/0x4a0 [ 1125.657105] ? p9_conn_create+0x510/0x510 [ 1125.657981] ? p9_client_create+0x798/0x1230 [ 1125.658890] ? kfree+0xd7/0x340 [ 1125.659553] ? do_raw_spin_unlock+0x4f/0x220 [ 1125.660448] p9_client_create+0xaee/0x1230 [ 1125.661308] ? p9_client_flush+0x430/0x430 [ 1125.662178] ? trace_hardirqs_on+0x5b/0x180 [ 1125.663051] ? lockdep_init_map_type+0x2c7/0x780 [ 1125.664013] ? __raw_spin_lock_init+0x36/0x110 [ 1125.664949] v9fs_session_init+0x1dd/0x1680 [ 1125.665827] ? lock_release+0x680/0x680 [ 1125.666666] ? kmem_cache_alloc_trace+0x151/0x320 [ 1125.667650] ? v9fs_show_options+0x690/0x690 [ 1125.668559] ? trace_hardirqs_on+0x5b/0x180 [ 1125.669441] ? kasan_unpoison_shadow+0x33/0x50 [ 1125.670380] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1125.671400] v9fs_mount+0x79/0x8f0 [ 1125.672050] FAULT_INJECTION: forcing a failure. [ 1125.672050] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.672127] ? v9fs_write_inode+0x60/0x60 [ 1125.675247] legacy_get_tree+0x105/0x220 [ 1125.676075] vfs_get_tree+0x8e/0x300 [ 1125.676825] path_mount+0x1490/0x21e0 [ 1125.677606] ? strncpy_from_user+0x9e/0x470 [ 1125.678487] ? finish_automount+0xa90/0xa90 [ 1125.679354] ? getname_flags.part.0+0x1dd/0x4f0 [ 1125.680290] ? _copy_from_user+0xfb/0x1b0 [ 1125.681128] __x64_sys_mount+0x282/0x300 [ 1125.681957] ? copy_mnt_ns+0xa00/0xa00 [ 1125.682757] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.683813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.684893] do_syscall_64+0x33/0x40 [ 1125.685656] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1125.686731] RIP: 0033:0x7f2ae689eb19 [ 1125.687479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.691318] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1125.692853] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1125.694311] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1125.695756] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1125.697191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.698639] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1125.700112] CPU: 0 PID: 7879 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1125.701544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.703280] Call Trace: [ 1125.703840] dump_stack+0x107/0x167 [ 1125.704605] should_fail.cold+0x5/0xa [ 1125.705401] should_failslab+0x5/0x20 [ 1125.706207] __kmalloc_track_caller+0x79/0x370 [ 1125.707162] ? p9_client_create+0x51e/0x1230 [ 1125.708046] FAULT_INJECTION: forcing a failure. [ 1125.708046] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.708083] kmemdup_nul+0x2d/0xa0 [ 1125.711065] p9_client_create+0x51e/0x1230 [ 1125.711955] ? p9_client_flush+0x430/0x430 [ 1125.712843] ? trace_hardirqs_on+0x5b/0x180 [ 1125.713739] ? lockdep_init_map_type+0x2c7/0x780 [ 1125.714728] ? __raw_spin_lock_init+0x36/0x110 [ 1125.715659] v9fs_session_init+0x1dd/0x1680 [ 1125.716526] ? lock_release+0x680/0x680 [ 1125.717352] ? kmem_cache_alloc_trace+0x151/0x320 [ 1125.718336] ? v9fs_show_options+0x690/0x690 [ 1125.719241] ? trace_hardirqs_on+0x5b/0x180 [ 1125.720108] ? kasan_unpoison_shadow+0x33/0x50 [ 1125.721040] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1125.722073] v9fs_mount+0x79/0x8f0 [ 1125.722795] ? v9fs_write_inode+0x60/0x60 [ 1125.723632] legacy_get_tree+0x105/0x220 [ 1125.724465] vfs_get_tree+0x8e/0x300 [ 1125.725210] path_mount+0x1490/0x21e0 [ 1125.726004] ? strncpy_from_user+0x9e/0x470 [ 1125.726867] ? finish_automount+0xa90/0xa90 [ 1125.727746] ? getname_flags.part.0+0x1dd/0x4f0 [ 1125.728682] ? _copy_from_user+0xfb/0x1b0 [ 1125.729545] __x64_sys_mount+0x282/0x300 [ 1125.730371] ? copy_mnt_ns+0xa00/0xa00 [ 1125.731177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.732231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.733274] do_syscall_64+0x33/0x40 [ 1125.734042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1125.735083] RIP: 0033:0x7fd388488b19 [ 1125.735829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.739559] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1125.741093] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1125.742546] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1125.744002] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1125.745445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.746892] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1125.748417] CPU: 1 PID: 7880 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1125.749849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.751594] Call Trace: [ 1125.752146] dump_stack+0x107/0x167 [ 1125.752909] should_fail.cold+0x5/0xa [ 1125.753708] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1125.754248] FAULT_INJECTION: forcing a failure. [ 1125.754248] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.754912] should_failslab+0x5/0x20 [ 1125.754931] kmem_cache_alloc+0x5b/0x310 [ 1125.754964] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1125.759952] idr_get_free+0x4b5/0x8f0 [ 1125.760762] idr_alloc_u32+0x170/0x2d0 [ 1125.761580] ? __fprop_inc_percpu_max+0x130/0x130 [ 1125.762598] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1125.763713] ? lock_release+0x680/0x680 [ 1125.764546] idr_alloc+0xc2/0x130 [ 1125.765270] ? idr_alloc_u32+0x2d0/0x2d0 [ 1125.766124] ? rwlock_bug.part.0+0x90/0x90 [ 1125.767021] p9_client_prepare_req.part.0+0x612/0xac0 [ 1125.768106] p9_client_rpc+0x220/0x1370 [ 1125.768936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.770047] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1125.771161] ? pipe_poll+0x21b/0x800 [ 1125.771933] ? p9_fd_close+0x4a0/0x4a0 [ 1125.772746] ? wait_for_partner+0x3c0/0x3c0 [ 1125.773645] ? p9_fd_poll+0x1e0/0x2c0 [ 1125.774458] ? p9_fd_create+0x357/0x4a0 [ 1125.775288] ? p9_conn_create+0x510/0x510 [ 1125.776152] ? p9_client_create+0x798/0x1230 [ 1125.777068] ? kfree+0xd7/0x340 [ 1125.777755] ? do_raw_spin_unlock+0x4f/0x220 [ 1125.778685] p9_client_create+0xa76/0x1230 [ 1125.779579] ? p9_client_flush+0x430/0x430 [ 1125.780469] ? trace_hardirqs_on+0x5b/0x180 [ 1125.781372] ? lockdep_init_map_type+0x2c7/0x780 [ 1125.782372] ? __raw_spin_lock_init+0x36/0x110 [ 1125.783330] v9fs_session_init+0x1dd/0x1680 [ 1125.784229] ? lock_release+0x680/0x680 [ 1125.785075] ? kmem_cache_alloc_trace+0x151/0x320 [ 1125.786085] ? v9fs_show_options+0x690/0x690 [ 1125.787008] ? trace_hardirqs_on+0x5b/0x180 [ 1125.787908] ? kasan_unpoison_shadow+0x33/0x50 [ 1125.788860] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1125.789920] v9fs_mount+0x79/0x8f0 [ 1125.790684] ? v9fs_write_inode+0x60/0x60 [ 1125.791551] legacy_get_tree+0x105/0x220 [ 1125.792407] vfs_get_tree+0x8e/0x300 [ 1125.793185] path_mount+0x1490/0x21e0 [ 1125.793989] ? strncpy_from_user+0x9e/0x470 [ 1125.794896] ? finish_automount+0xa90/0xa90 [ 1125.795798] ? getname_flags.part.0+0x1dd/0x4f0 [ 1125.796768] ? _copy_from_user+0xfb/0x1b0 [ 1125.797641] __x64_sys_mount+0x282/0x300 [ 1125.798499] ? copy_mnt_ns+0xa00/0xa00 [ 1125.799315] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.800409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.801490] do_syscall_64+0x33/0x40 [ 1125.802270] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1125.803344] RIP: 0033:0x7f5f5e955b19 [ 1125.804120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.807971] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1125.809561] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1125.811056] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1125.812544] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1125.814038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.815526] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1125.817048] CPU: 0 PID: 7872 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1125.818469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.820166] Call Trace: [ 1125.820714] dump_stack+0x107/0x167 [ 1125.821255] FAULT_INJECTION: forcing a failure. [ 1125.821255] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.821460] should_fail.cold+0x5/0xa [ 1125.824529] ? create_object.isra.0+0x3a/0xa30 [ 1125.825479] should_failslab+0x5/0x20 [ 1125.826295] kmem_cache_alloc+0x5b/0x310 [ 1125.827173] create_object.isra.0+0x3a/0xa30 [ 1125.828069] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1125.829126] kmem_cache_alloc_trace+0x151/0x320 [ 1125.830112] ? lockdep_init_map_type+0x2c7/0x780 [ 1125.831093] legacy_init_fs_context+0x44/0xe0 [ 1125.832025] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1125.833043] alloc_fs_context+0x4fd/0x840 [ 1125.833892] path_mount+0xab1/0x21e0 [ 1125.834664] ? strncpy_from_user+0x9e/0x470 [ 1125.835551] ? finish_automount+0xa90/0xa90 [ 1125.836448] ? getname_flags.part.0+0x1dd/0x4f0 [ 1125.837386] ? _copy_from_user+0xfb/0x1b0 [ 1125.838265] __x64_sys_mount+0x282/0x300 [ 1125.839092] ? copy_mnt_ns+0xa00/0xa00 [ 1125.839892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.840999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.842080] do_syscall_64+0x33/0x40 [ 1125.842854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1125.843921] RIP: 0033:0x7f52d4da5b19 [ 1125.844681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.848466] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1125.850026] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1125.851499] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1125.852956] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1125.854576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.856407] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1125.858279] CPU: 1 PID: 7878 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1125.859732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.861478] Call Trace: [ 1125.862037] dump_stack+0x107/0x167 [ 1125.862799] should_fail.cold+0x5/0xa [ 1125.863593] ? v9fs_mount+0x5a/0x8f0 [ 1125.864372] should_failslab+0x5/0x20 [ 1125.865165] kmem_cache_alloc_trace+0x55/0x320 [ 1125.866124] ? v9fs_write_inode+0x60/0x60 [ 1125.866985] v9fs_mount+0x5a/0x8f0 [ 1125.867701] ? v9fs_write_inode+0x60/0x60 [ 1125.868563] legacy_get_tree+0x105/0x220 03:27:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 42) 03:27:04 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 13) 03:27:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 24) 03:27:04 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:27:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x74, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:27:04 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 14) 03:27:04 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee", 0x22}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1125.869392] vfs_get_tree+0x8e/0x300 [ 1125.870509] path_mount+0x1490/0x21e0 [ 1125.871328] ? strncpy_from_user+0x9e/0x470 [ 1125.872199] ? finish_automount+0xa90/0xa90 [ 1125.873075] ? getname_flags.part.0+0x1dd/0x4f0 [ 1125.874034] ? _copy_from_user+0xfb/0x1b0 [ 1125.874875] __x64_sys_mount+0x282/0x300 [ 1125.875700] ? copy_mnt_ns+0xa00/0xa00 [ 1125.876497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.877556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.878609] do_syscall_64+0x33/0x40 [ 1125.879357] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1125.880419] RIP: 0033:0x7f8718ffcb19 [ 1125.881170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.884861] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1125.886403] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1125.887843] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1125.889286] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1125.890734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.892184] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1125.908430] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:27:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:27:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 25) 03:27:04 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee", 0x22}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1126.045323] FAULT_INJECTION: forcing a failure. [ 1126.045323] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.047812] CPU: 0 PID: 7890 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1126.049202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.050887] Call Trace: [ 1126.051428] dump_stack+0x107/0x167 [ 1126.052168] should_fail.cold+0x5/0xa [ 1126.052949] ? create_object.isra.0+0x3a/0xa30 [ 1126.053866] should_failslab+0x5/0x20 [ 1126.054652] kmem_cache_alloc+0x5b/0x310 [ 1126.055479] create_object.isra.0+0x3a/0xa30 [ 1126.056370] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.057405] __kmalloc_track_caller+0x177/0x370 [ 1126.058358] ? p9_client_create+0x51e/0x1230 [ 1126.059422] kmemdup_nul+0x2d/0xa0 [ 1126.060351] p9_client_create+0x51e/0x1230 [ 1126.061507] ? p9_client_flush+0x430/0x430 [ 1126.062622] ? trace_hardirqs_on+0x5b/0x180 [ 1126.063784] ? lockdep_init_map_type+0x2c7/0x780 [ 1126.065017] ? __raw_spin_lock_init+0x36/0x110 [ 1126.066265] v9fs_session_init+0x1dd/0x1680 [ 1126.067396] ? lock_release+0x680/0x680 [ 1126.068260] ? kmem_cache_alloc_trace+0x151/0x320 [ 1126.069383] ? v9fs_show_options+0x690/0x690 [ 1126.070384] ? trace_hardirqs_on+0x5b/0x180 [ 1126.071529] ? kasan_unpoison_shadow+0x33/0x50 [ 1126.072745] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.074319] v9fs_mount+0x79/0x8f0 [ 1126.075309] ? v9fs_write_inode+0x60/0x60 [ 1126.076445] legacy_get_tree+0x105/0x220 [ 1126.077569] vfs_get_tree+0x8e/0x300 [ 1126.078583] path_mount+0x1490/0x21e0 [ 1126.079398] ? strncpy_from_user+0x9e/0x470 [ 1126.080317] ? finish_automount+0xa90/0xa90 [ 1126.081232] ? getname_flags.part.0+0x1dd/0x4f0 [ 1126.082266] ? _copy_from_user+0xfb/0x1b0 [ 1126.083163] __x64_sys_mount+0x282/0x300 [ 1126.084031] ? copy_mnt_ns+0xa00/0xa00 [ 1126.084871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.086005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.087116] do_syscall_64+0x33/0x40 [ 1126.087917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.089020] RIP: 0033:0x7fd388488b19 [ 1126.089828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.093811] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1126.095468] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1126.097012] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1126.098565] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1126.100115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.101673] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1126.138472] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1140.416259] FAULT_INJECTION: forcing a failure. [ 1140.416259] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.417700] CPU: 1 PID: 7905 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1140.418534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.419561] Call Trace: [ 1140.419887] dump_stack+0x107/0x167 [ 1140.420323] should_fail.cold+0x5/0xa [ 1140.420782] should_failslab+0x5/0x20 [ 1140.421236] __kmalloc_track_caller+0x79/0x370 [ 1140.421775] ? kasprintf+0xbb/0xf0 [ 1140.422234] ? __delete_object+0xb3/0x100 [ 1140.422728] kvasprintf+0xb5/0x150 [ 1140.423174] ? bust_spinlocks+0xe0/0xe0 [ 1140.423648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.424275] kasprintf+0xbb/0xf0 [ 1140.424706] ? kvasprintf_const+0x1a0/0x1a0 [ 1140.425214] ? kmem_cache_free+0x249/0x2d0 [ 1140.425716] ? p9_client_create+0xbfa/0x1230 [ 1140.426253] p9_client_create+0xc1b/0x1230 [ 1140.426756] ? p9_client_flush+0x430/0x430 [ 1140.427254] ? trace_hardirqs_on+0x5b/0x180 [ 1140.427764] ? lockdep_init_map_type+0x2c7/0x780 [ 1140.428351] ? __raw_spin_lock_init+0x36/0x110 [ 1140.428893] v9fs_session_init+0x1dd/0x1680 [ 1140.429399] ? lock_release+0x680/0x680 [ 1140.429894] ? kmem_cache_alloc_trace+0x151/0x320 [ 1140.430481] ? v9fs_show_options+0x690/0x690 [ 1140.431037] ? trace_hardirqs_on+0x5b/0x180 [ 1140.431548] ? kasan_unpoison_shadow+0x33/0x50 [ 1140.432111] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.432711] v9fs_mount+0x79/0x8f0 [ 1140.433148] ? v9fs_write_inode+0x60/0x60 [ 1140.433638] legacy_get_tree+0x105/0x220 [ 1140.434129] vfs_get_tree+0x8e/0x300 [ 1140.434575] path_mount+0x1490/0x21e0 [ 1140.435026] ? strncpy_from_user+0x9e/0x470 [ 1140.435562] ? finish_automount+0xa90/0xa90 [ 1140.436074] ? getname_flags.part.0+0x1dd/0x4f0 [ 1140.436620] ? _copy_from_user+0xfb/0x1b0 [ 1140.437135] __x64_sys_mount+0x282/0x300 [ 1140.437616] ? copy_mnt_ns+0xa00/0xa00 [ 1140.438107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.438742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.439350] do_syscall_64+0x33/0x40 [ 1140.439789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.440392] RIP: 0033:0x7f2ae689eb19 03:27:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 43) 03:27:19 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 14) 03:27:19 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 26) 03:27:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x13f, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:27:19 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:27:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 15) 03:27:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 48) 03:27:19 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee17", 0x23}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1140.440851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.443496] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.444392] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1140.445228] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1140.446064] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1140.446918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.447748] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1140.454285] FAULT_INJECTION: forcing a failure. [ 1140.454285] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.455656] CPU: 1 PID: 7916 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1140.456292] FAULT_INJECTION: forcing a failure. [ 1140.456292] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.456491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.456504] Call Trace: [ 1140.460195] dump_stack+0x107/0x167 [ 1140.460651] should_fail.cold+0x5/0xa [ 1140.461119] ? v9fs_mount+0x5a/0x8f0 [ 1140.461574] should_failslab+0x5/0x20 [ 1140.462051] kmem_cache_alloc_trace+0x55/0x320 [ 1140.462644] ? v9fs_write_inode+0x60/0x60 [ 1140.463158] v9fs_mount+0x5a/0x8f0 [ 1140.463595] ? v9fs_write_inode+0x60/0x60 [ 1140.464101] legacy_get_tree+0x105/0x220 [ 1140.464599] vfs_get_tree+0x8e/0x300 [ 1140.465055] path_mount+0x1490/0x21e0 [ 1140.465524] ? strncpy_from_user+0x9e/0x470 [ 1140.466059] ? finish_automount+0xa90/0xa90 [ 1140.466613] ? getname_flags.part.0+0x1dd/0x4f0 [ 1140.467159] ? _copy_from_user+0xfb/0x1b0 [ 1140.467671] __x64_sys_mount+0x282/0x300 [ 1140.468169] ? copy_mnt_ns+0xa00/0xa00 [ 1140.468656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.469291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.469924] do_syscall_64+0x33/0x40 [ 1140.470390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.471016] RIP: 0033:0x7f52d4da5b19 [ 1140.471467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.473700] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.474604] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1140.475504] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1140.476372] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1140.477237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.478127] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1140.479023] CPU: 0 PID: 7913 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1140.480513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.482290] Call Trace: [ 1140.482868] dump_stack+0x107/0x167 [ 1140.483652] should_fail.cold+0x5/0xa [ 1140.484489] should_failslab+0x5/0x20 [ 1140.485297] __kmalloc_track_caller+0x79/0x370 [ 1140.486321] ? parse_opts.part.0+0x8e/0x340 [ 1140.487250] kstrdup+0x36/0x70 [ 1140.487942] parse_opts.part.0+0x8e/0x340 [ 1140.488872] ? p9_fd_show_options+0x1c0/0x1c0 [ 1140.490062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.491455] ? quarantine_put+0x8b/0x1a0 [ 1140.492511] ? trace_hardirqs_on+0x5b/0x180 [ 1140.493640] ? kfree+0xd7/0x340 [ 1140.494540] p9_fd_create+0x98/0x4a0 [ 1140.495358] ? p9_conn_create+0x510/0x510 [ 1140.496458] ? p9_client_create+0x798/0x1230 [ 1140.497405] ? kfree+0xd7/0x340 [ 1140.498122] ? do_raw_spin_unlock+0x4f/0x220 [ 1140.499077] p9_client_create+0x7ff/0x1230 [ 1140.499998] ? p9_client_flush+0x430/0x430 [ 1140.500913] ? trace_hardirqs_on+0x5b/0x180 [ 1140.501834] ? lockdep_init_map_type+0x2c7/0x780 [ 1140.502876] ? __raw_spin_lock_init+0x36/0x110 [ 1140.503869] v9fs_session_init+0x1dd/0x1680 [ 1140.504793] ? lock_release+0x680/0x680 [ 1140.505653] ? kmem_cache_alloc_trace+0x151/0x320 [ 1140.506693] ? v9fs_show_options+0x690/0x690 [ 1140.507654] ? trace_hardirqs_on+0x5b/0x180 [ 1140.508576] ? kasan_unpoison_shadow+0x33/0x50 03:27:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x150, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1140.509545] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 03:27:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 49) [ 1140.510806] v9fs_mount+0x79/0x8f0 [ 1140.511624] ? v9fs_write_inode+0x60/0x60 [ 1140.512504] legacy_get_tree+0x105/0x220 [ 1140.513360] vfs_get_tree+0x8e/0x300 [ 1140.514156] path_mount+0x1490/0x21e0 [ 1140.514974] ? strncpy_from_user+0x9e/0x470 [ 1140.515896] ? finish_automount+0xa90/0xa90 [ 1140.516916] ? getname_flags.part.0+0x1dd/0x4f0 [ 1140.517330] FAULT_INJECTION: forcing a failure. [ 1140.517330] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.517931] ? _copy_from_user+0xfb/0x1b0 [ 1140.517962] __x64_sys_mount+0x282/0x300 [ 1140.520948] ? copy_mnt_ns+0xa00/0xa00 [ 1140.521786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.522904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.524003] do_syscall_64+0x33/0x40 [ 1140.524811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.525902] RIP: 0033:0x7fd388488b19 [ 1140.526720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.530630] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.532240] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1140.533756] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1140.535295] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1140.536821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.538353] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1140.539912] CPU: 1 PID: 7906 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1140.540760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.541528] 9pnet: Insufficient options for proto=fd [ 1140.541750] Call Trace: 03:27:19 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 15) [ 1140.541775] dump_stack+0x107/0x167 [ 1140.543762] should_fail.cold+0x5/0xa [ 1140.544231] ? create_object.isra.0+0x3a/0xa30 [ 1140.544842] should_failslab+0x5/0x20 [ 1140.545323] kmem_cache_alloc+0x5b/0x310 [ 1140.545812] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1140.546444] create_object.isra.0+0x3a/0xa30 [ 1140.546726] FAULT_INJECTION: forcing a failure. [ 1140.546726] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.546965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.546985] kmem_cache_alloc_trace+0x151/0x320 [ 1140.550436] ? v9fs_write_inode+0x60/0x60 [ 1140.550921] v9fs_mount+0x5a/0x8f0 [ 1140.551337] ? v9fs_write_inode+0x60/0x60 [ 1140.551826] legacy_get_tree+0x105/0x220 [ 1140.552307] vfs_get_tree+0x8e/0x300 [ 1140.552745] path_mount+0x1490/0x21e0 [ 1140.553196] ? strncpy_from_user+0x9e/0x470 [ 1140.553684] ? finish_automount+0xa90/0xa90 [ 1140.554217] ? getname_flags.part.0+0x1dd/0x4f0 [ 1140.554743] ? _copy_from_user+0xfb/0x1b0 [ 1140.555244] __x64_sys_mount+0x282/0x300 [ 1140.555705] ? copy_mnt_ns+0xa00/0xa00 [ 1140.556168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.556759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.557370] do_syscall_64+0x33/0x40 [ 1140.557794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.558418] RIP: 0033:0x7f8718ffcb19 [ 1140.558839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.561003] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.561857] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1140.562673] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1140.563469] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1140.564264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.565060] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1140.565882] CPU: 0 PID: 7902 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1140.567371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.569133] Call Trace: [ 1140.569569] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1140.569684] dump_stack+0x107/0x167 [ 1140.571474] should_fail.cold+0x5/0xa [ 1140.572266] ? create_object.isra.0+0x3a/0xa30 [ 1140.573211] should_failslab+0x5/0x20 [ 1140.574014] kmem_cache_alloc+0x5b/0x310 [ 1140.574865] create_object.isra.0+0x3a/0xa30 [ 1140.575775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.576850] kmem_cache_alloc+0x159/0x310 [ 1140.577722] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1140.578918] idr_get_free+0x4b5/0x8f0 [ 1140.579734] idr_alloc_u32+0x170/0x2d0 [ 1140.580559] ? __fprop_inc_percpu_max+0x130/0x130 [ 1140.581570] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1140.582701] ? lock_release+0x680/0x680 [ 1140.583543] idr_alloc+0xc2/0x130 [ 1140.584279] ? idr_alloc_u32+0x2d0/0x2d0 [ 1140.585121] ? rwlock_bug.part.0+0x90/0x90 [ 1140.586026] p9_client_prepare_req.part.0+0x612/0xac0 [ 1140.587119] p9_client_rpc+0x220/0x1370 [ 1140.587955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.589054] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1140.590191] ? pipe_poll+0x21b/0x800 [ 1140.590975] ? p9_fd_close+0x4a0/0x4a0 [ 1140.591973] ? wait_for_partner+0x3c0/0x3c0 [ 1140.593109] ? p9_fd_poll+0x1e0/0x2c0 [ 1140.594136] ? p9_fd_create+0x357/0x4a0 [ 1140.595187] ? p9_conn_create+0x510/0x510 [ 1140.596260] ? p9_client_create+0x798/0x1230 [ 1140.597351] ? kfree+0xd7/0x340 [ 1140.598063] ? do_raw_spin_unlock+0x4f/0x220 [ 1140.599063] p9_client_create+0xa76/0x1230 [ 1140.599983] ? p9_client_flush+0x430/0x430 [ 1140.600893] ? trace_hardirqs_on+0x5b/0x180 [ 1140.601830] ? lockdep_init_map_type+0x2c7/0x780 [ 1140.602860] ? __raw_spin_lock_init+0x36/0x110 [ 1140.603844] v9fs_session_init+0x1dd/0x1680 [ 1140.604775] ? lock_release+0x680/0x680 [ 1140.605639] ? kmem_cache_alloc_trace+0x151/0x320 [ 1140.606688] ? v9fs_show_options+0x690/0x690 [ 1140.607640] ? trace_hardirqs_on+0x5b/0x180 [ 1140.608564] ? kasan_unpoison_shadow+0x33/0x50 [ 1140.609558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.610659] v9fs_mount+0x79/0x8f0 [ 1140.611428] ? v9fs_write_inode+0x60/0x60 [ 1140.612312] legacy_get_tree+0x105/0x220 [ 1140.613189] vfs_get_tree+0x8e/0x300 [ 1140.613994] path_mount+0x1490/0x21e0 [ 1140.614856] ? strncpy_from_user+0x9e/0x470 [ 1140.615782] ? finish_automount+0xa90/0xa90 [ 1140.616705] ? getname_flags.part.0+0x1dd/0x4f0 [ 1140.617699] ? _copy_from_user+0xfb/0x1b0 [ 1140.618629] __x64_sys_mount+0x282/0x300 [ 1140.619539] ? copy_mnt_ns+0xa00/0xa00 [ 1140.620424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.621555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.622687] do_syscall_64+0x33/0x40 [ 1140.623488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.624586] RIP: 0033:0x7f5f5e955b19 [ 1140.625388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.629300] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.630954] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1140.632479] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1140.633997] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1140.635540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.637056] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1140.682794] FAULT_INJECTION: forcing a failure. [ 1140.682794] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.684271] CPU: 1 PID: 7927 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1140.685153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.686094] Call Trace: [ 1140.686413] dump_stack+0x107/0x167 [ 1140.686831] should_fail.cold+0x5/0xa [ 1140.687271] ? create_object.isra.0+0x3a/0xa30 [ 1140.687793] should_failslab+0x5/0x20 [ 1140.688234] kmem_cache_alloc+0x5b/0x310 [ 1140.688795] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1140.689516] create_object.isra.0+0x3a/0xa30 [ 1140.690131] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.690843] kmem_cache_alloc_trace+0x151/0x320 [ 1140.691494] ? v9fs_write_inode+0x60/0x60 [ 1140.692059] v9fs_mount+0x5a/0x8f0 [ 1140.692553] ? v9fs_write_inode+0x60/0x60 [ 1140.693121] legacy_get_tree+0x105/0x220 [ 1140.693679] vfs_get_tree+0x8e/0x300 [ 1140.694204] path_mount+0x1490/0x21e0 [ 1140.694739] ? strncpy_from_user+0x9e/0x470 [ 1140.695332] ? finish_automount+0xa90/0xa90 [ 1140.695922] ? getname_flags.part.0+0x1dd/0x4f0 [ 1140.696575] ? _copy_from_user+0xfb/0x1b0 [ 1140.697156] __x64_sys_mount+0x282/0x300 [ 1140.697715] ? copy_mnt_ns+0xa00/0xa00 [ 1140.698268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.698988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.699695] do_syscall_64+0x33/0x40 [ 1140.700205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.700910] RIP: 0033:0x7f52d4da5b19 [ 1140.701432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.703954] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.705002] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1140.705983] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1140.706972] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1140.707938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.708914] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1140.717085] FAULT_INJECTION: forcing a failure. [ 1140.717085] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.718672] CPU: 1 PID: 7928 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1140.719610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.720742] Call Trace: [ 1140.721114] dump_stack+0x107/0x167 [ 1140.721619] should_fail.cold+0x5/0xa [ 1140.722160] should_failslab+0x5/0x20 [ 1140.722685] __kmalloc_track_caller+0x79/0x370 [ 1140.723305] ? kasprintf+0xbb/0xf0 [ 1140.723800] ? __delete_object+0xb3/0x100 [ 1140.724369] kvasprintf+0xb5/0x150 [ 1140.724864] ? bust_spinlocks+0xe0/0xe0 [ 1140.725417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.726134] kasprintf+0xbb/0xf0 [ 1140.726551] ? kvasprintf_const+0x1a0/0x1a0 [ 1140.727142] ? kmem_cache_free+0x249/0x2d0 [ 1140.727733] ? p9_client_create+0xbfa/0x1230 [ 1140.728338] p9_client_create+0xc1b/0x1230 [ 1140.728929] ? p9_client_flush+0x430/0x430 [ 1140.729514] ? trace_hardirqs_on+0x5b/0x180 [ 1140.730114] ? lockdep_init_map_type+0x2c7/0x780 [ 1140.730771] ? __raw_spin_lock_init+0x36/0x110 [ 1140.731396] v9fs_session_init+0x1dd/0x1680 [ 1140.731990] ? lock_release+0x680/0x680 [ 1140.732546] ? kmem_cache_alloc_trace+0x151/0x320 [ 1140.733221] ? v9fs_show_options+0x690/0x690 [ 1140.733823] ? trace_hardirqs_on+0x5b/0x180 [ 1140.734427] ? kasan_unpoison_shadow+0x33/0x50 [ 1140.735051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.735745] v9fs_mount+0x79/0x8f0 [ 1140.736236] ? v9fs_write_inode+0x60/0x60 [ 1140.736803] legacy_get_tree+0x105/0x220 [ 1140.737367] vfs_get_tree+0x8e/0x300 [ 1140.737873] path_mount+0x1490/0x21e0 [ 1140.738397] ? strncpy_from_user+0x9e/0x470 [ 1140.738988] ? finish_automount+0xa90/0xa90 [ 1140.739570] ? getname_flags.part.0+0x1dd/0x4f0 [ 1140.740205] ? _copy_from_user+0xfb/0x1b0 [ 1140.740775] __x64_sys_mount+0x282/0x300 [ 1140.741329] ? copy_mnt_ns+0xa00/0xa00 [ 1140.741865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.742585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.743296] do_syscall_64+0x33/0x40 [ 1140.743816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.744523] RIP: 0033:0x7f2ae689eb19 [ 1140.745028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.747544] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.748586] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1140.749564] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1140.750544] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1140.751514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.752500] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:27:19 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 27) [ 1140.793618] FAULT_INJECTION: forcing a failure. [ 1140.793618] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.796145] CPU: 0 PID: 7930 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1140.797954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.800150] Call Trace: [ 1140.800861] dump_stack+0x107/0x167 [ 1140.801759] should_fail.cold+0x5/0xa [ 1140.802595] ? create_object.isra.0+0x3a/0xa30 [ 1140.803574] should_failslab+0x5/0x20 [ 1140.804395] kmem_cache_alloc+0x5b/0x310 [ 1140.805250] ? legacy_get_tree+0x105/0x220 [ 1140.806192] create_object.isra.0+0x3a/0xa30 [ 1140.807127] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.808227] __kmalloc_track_caller+0x177/0x370 [ 1140.809212] ? parse_opts.part.0+0x8e/0x340 [ 1140.810197] kstrdup+0x36/0x70 [ 1140.810904] parse_opts.part.0+0x8e/0x340 [ 1140.811807] ? p9_fd_show_options+0x1c0/0x1c0 [ 1140.812787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.813930] ? quarantine_put+0x8b/0x1a0 [ 1140.814824] ? trace_hardirqs_on+0x5b/0x180 [ 1140.815759] ? kfree+0xd7/0x340 [ 1140.816484] p9_fd_create+0x98/0x4a0 [ 1140.817280] ? p9_conn_create+0x510/0x510 [ 1140.818199] ? p9_client_create+0x798/0x1230 [ 1140.819160] ? kfree+0xd7/0x340 [ 1140.819875] ? do_raw_spin_unlock+0x4f/0x220 [ 1140.820843] p9_client_create+0x7ff/0x1230 [ 1140.821780] ? p9_client_flush+0x430/0x430 [ 1140.822715] ? trace_hardirqs_on+0x5b/0x180 [ 1140.823653] ? lockdep_init_map_type+0x2c7/0x780 [ 1140.824682] ? __raw_spin_lock_init+0x36/0x110 [ 1140.825693] v9fs_session_init+0x1dd/0x1680 [ 1140.826656] ? lock_release+0x680/0x680 [ 1140.827537] ? kmem_cache_alloc_trace+0x151/0x320 [ 1140.828586] ? v9fs_show_options+0x690/0x690 [ 1140.829564] ? trace_hardirqs_on+0x5b/0x180 [ 1140.830515] ? kasan_unpoison_shadow+0x33/0x50 [ 1140.831507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1140.832615] v9fs_mount+0x79/0x8f0 [ 1140.833410] ? v9fs_write_inode+0x60/0x60 [ 1140.834312] legacy_get_tree+0x105/0x220 [ 1140.835196] vfs_get_tree+0x8e/0x300 [ 1140.836012] path_mount+0x1490/0x21e0 [ 1140.836850] ? strncpy_from_user+0x9e/0x470 [ 1140.837795] ? finish_automount+0xa90/0xa90 [ 1140.838746] ? getname_flags.part.0+0x1dd/0x4f0 [ 1140.839760] ? _copy_from_user+0xfb/0x1b0 [ 1140.840667] __x64_sys_mount+0x282/0x300 [ 1140.841559] ? copy_mnt_ns+0xa00/0xa00 [ 1140.842422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.843568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.844689] do_syscall_64+0x33/0x40 [ 1140.845507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1140.846638] RIP: 0033:0x7fd388488b19 [ 1140.847447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.851434] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.853087] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1140.854659] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1140.856207] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1140.857759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.859314] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:27:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 28) 03:27:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 44) 03:27:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 16) 03:27:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x21c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:27:34 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x1802, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:27:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 50) 03:27:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 16) 03:27:34 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee17", 0x23}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="17d8890007000000f05defc71402a8937adf1ee343ff0400a39d47735d31931898763772790000000000001b50c76b1069b134c4c27b05ac57286cb12984515ecdf8cabc3a9e9502375c6b9efe87aa35fd2e485fe34c0198998a4800253bc0270dcd41e817c9cb28b2cd5feadfbe6f90d27abb068c93be4d6af17548031f03e68ff0f79ac9257b019967e10a83f1e1d5270d35f89531470ef4844404000000000000c50900009d7e8455e26fb0d7a24f9a02da0a7039d40358b0a9fec1accc6e2272c87f93867ec21b5c42b9a848f823c9cc0f8e9e259a20b82cd0024053ff71a4c618629c4814f3a966670cd44c1dbda3098d936b8d4aae73d0a073837b6a8749827dcdfe9c68366b3f368af1bd1ab4917ab7007f2107058f93ca73a970b8b46f7421354eefe706c8f83f801a308f257a93380cc2"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1155.494664] FAULT_INJECTION: forcing a failure. [ 1155.494664] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.497194] CPU: 1 PID: 7941 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1155.498643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.500370] Call Trace: [ 1155.500928] dump_stack+0x107/0x167 [ 1155.501690] should_fail.cold+0x5/0xa [ 1155.502493] should_failslab+0x5/0x20 [ 1155.503292] __kmalloc_track_caller+0x79/0x370 [ 1155.504240] ? match_number+0xaf/0x1d0 [ 1155.505051] kmemdup_nul+0x2d/0xa0 [ 1155.505792] match_number+0xaf/0x1d0 [ 1155.506578] ? match_u64+0x190/0x190 [ 1155.507359] ? __kmalloc_track_caller+0x2c6/0x370 [ 1155.508360] ? memcpy+0x39/0x60 [ 1155.509063] parse_opts.part.0+0x1f3/0x340 [ 1155.509957] ? p9_fd_show_options+0x1c0/0x1c0 [ 1155.510957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.512043] ? trace_hardirqs_on+0x5b/0x180 [ 1155.512950] ? kfree+0xd7/0x340 [ 1155.513642] p9_fd_create+0x98/0x4a0 [ 1155.514425] ? p9_conn_create+0x510/0x510 [ 1155.515288] ? p9_client_create+0x798/0x1230 [ 1155.516200] ? kfree+0xd7/0x340 [ 1155.516890] ? do_raw_spin_unlock+0x4f/0x220 [ 1155.517817] p9_client_create+0x7ff/0x1230 [ 1155.518721] ? p9_client_flush+0x430/0x430 [ 1155.519603] ? trace_hardirqs_on+0x5b/0x180 [ 1155.520505] ? lockdep_init_map_type+0x2c7/0x780 [ 1155.521506] ? __raw_spin_lock_init+0x36/0x110 [ 1155.522166] FAULT_INJECTION: forcing a failure. [ 1155.522166] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.522472] v9fs_session_init+0x1dd/0x1680 [ 1155.522499] ? lock_release+0x680/0x680 [ 1155.526490] ? kmem_cache_alloc_trace+0x151/0x320 [ 1155.527494] ? v9fs_show_options+0x690/0x690 [ 1155.528416] ? trace_hardirqs_on+0x5b/0x180 [ 1155.529320] ? kasan_unpoison_shadow+0x33/0x50 [ 1155.530300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1155.531352] v9fs_mount+0x79/0x8f0 [ 1155.532090] ? v9fs_write_inode+0x60/0x60 [ 1155.532947] legacy_get_tree+0x105/0x220 [ 1155.533788] vfs_get_tree+0x8e/0x300 [ 1155.534583] path_mount+0x1490/0x21e0 [ 1155.535389] ? strncpy_from_user+0x9e/0x470 [ 1155.536291] ? finish_automount+0xa90/0xa90 [ 1155.537201] ? getname_flags.part.0+0x1dd/0x4f0 [ 1155.538180] ? _copy_from_user+0xfb/0x1b0 [ 1155.539069] __x64_sys_mount+0x282/0x300 [ 1155.539913] ? copy_mnt_ns+0xa00/0xa00 [ 1155.540724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.541817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.542913] do_syscall_64+0x33/0x40 [ 1155.543694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.544758] RIP: 0033:0x7fd388488b19 [ 1155.545532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.549378] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1155.550975] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1155.552456] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1155.553940] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1155.555434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.556916] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1155.558453] CPU: 0 PID: 7949 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1155.559887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.561603] Call Trace: [ 1155.562157] dump_stack+0x107/0x167 [ 1155.562922] should_fail.cold+0x5/0xa [ 1155.563727] should_failslab+0x5/0x20 [ 1155.564523] __kmalloc_track_caller+0x79/0x370 [ 1155.565466] ? v9fs_session_init+0xa7/0x1680 [ 1155.566378] ? kernel_text_address+0xf2/0x120 [ 1155.567335] kstrdup+0x36/0x70 [ 1155.568001] v9fs_session_init+0xa7/0x1680 [ 1155.568893] ? lock_release+0x680/0x680 [ 1155.569723] ? find_held_lock+0x2c/0x110 [ 1155.570593] ? kmem_cache_alloc_trace+0x151/0x320 [ 1155.571195] FAULT_INJECTION: forcing a failure. [ 1155.571195] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.571627] ? v9fs_show_options+0x690/0x690 [ 1155.571662] ? trace_hardirqs_on+0x5b/0x180 [ 1155.571682] ? kasan_unpoison_shadow+0x33/0x50 [ 1155.576929] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1155.577993] v9fs_mount+0x79/0x8f0 [ 1155.578754] ? v9fs_write_inode+0x60/0x60 [ 1155.579635] legacy_get_tree+0x105/0x220 [ 1155.580489] vfs_get_tree+0x8e/0x300 [ 1155.581268] path_mount+0x1490/0x21e0 [ 1155.582062] ? strncpy_from_user+0x9e/0x470 [ 1155.582973] ? finish_automount+0xa90/0xa90 [ 1155.583887] ? getname_flags.part.0+0x1dd/0x4f0 [ 1155.584857] ? _copy_from_user+0xfb/0x1b0 [ 1155.585731] __x64_sys_mount+0x282/0x300 [ 1155.586585] ? copy_mnt_ns+0xa00/0xa00 [ 1155.587410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.588490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.589555] do_syscall_64+0x33/0x40 [ 1155.590340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.591410] RIP: 0033:0x7f8718ffcb19 [ 1155.592187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.596010] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1155.597572] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1155.599046] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1155.600522] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1155.601983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.603479] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1155.604971] CPU: 1 PID: 7951 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1155.606436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.608186] Call Trace: [ 1155.608759] dump_stack+0x107/0x167 [ 1155.609538] should_fail.cold+0x5/0xa [ 1155.610357] should_failslab+0x5/0x20 [ 1155.611158] __kmalloc_track_caller+0x79/0x370 [ 1155.612115] ? kstrdup_const+0x53/0x80 [ 1155.612324] FAULT_INJECTION: forcing a failure. [ 1155.612324] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.612928] ? kasprintf+0xbb/0xf0 [ 1155.612950] kstrdup+0x36/0x70 [ 1155.616573] kstrdup_const+0x53/0x80 [ 1155.617360] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1155.618431] p9_client_create+0xc6a/0x1230 [ 1155.619334] ? p9_client_flush+0x430/0x430 [ 1155.620224] ? trace_hardirqs_on+0x5b/0x180 [ 1155.621133] ? lockdep_init_map_type+0x2c7/0x780 [ 1155.622133] ? __raw_spin_lock_init+0x36/0x110 [ 1155.623113] v9fs_session_init+0x1dd/0x1680 [ 1155.624022] ? lock_release+0x680/0x680 [ 1155.624869] ? kmem_cache_alloc_trace+0x151/0x320 [ 1155.625882] ? v9fs_show_options+0x690/0x690 [ 1155.626834] ? trace_hardirqs_on+0x5b/0x180 [ 1155.627743] ? kasan_unpoison_shadow+0x33/0x50 [ 1155.628702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1155.629771] v9fs_mount+0x79/0x8f0 [ 1155.630531] ? v9fs_write_inode+0x60/0x60 [ 1155.631401] legacy_get_tree+0x105/0x220 [ 1155.632257] vfs_get_tree+0x8e/0x300 [ 1155.633038] path_mount+0x1490/0x21e0 [ 1155.633849] ? strncpy_from_user+0x9e/0x470 [ 1155.634767] ? finish_automount+0xa90/0xa90 [ 1155.635679] ? getname_flags.part.0+0x1dd/0x4f0 [ 1155.636658] ? _copy_from_user+0xfb/0x1b0 [ 1155.637540] __x64_sys_mount+0x282/0x300 [ 1155.638412] ? copy_mnt_ns+0xa00/0xa00 [ 1155.639237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.640347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.641434] do_syscall_64+0x33/0x40 [ 1155.642220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.643308] RIP: 0033:0x7f2ae689eb19 [ 1155.644089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.647980] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1155.649571] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1155.651072] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1155.652570] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1155.654069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.655581] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1155.657121] CPU: 0 PID: 7953 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1155.657180] kmem_cache_create(9p-fcall-cache-259) failed with error -12 [ 1155.658560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.658567] Call Trace: [ 1155.658588] dump_stack+0x107/0x167 [ 1155.658611] should_fail.cold+0x5/0xa [ 1155.663642] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1155.664788] should_failslab+0x5/0x20 [ 1155.665558] kmem_cache_alloc+0x5b/0x310 [ 1155.666394] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1155.667511] idr_get_free+0x4b5/0x8f0 [ 1155.668288] idr_alloc_u32+0x170/0x2d0 [ 1155.669054] ? __fprop_inc_percpu_max+0x130/0x130 [ 1155.670027] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1155.671096] ? lock_release+0x680/0x680 [ 1155.671888] idr_alloc+0xc2/0x130 [ 1155.672587] ? idr_alloc_u32+0x2d0/0x2d0 [ 1155.673406] ? rwlock_bug.part.0+0x90/0x90 [ 1155.674267] p9_client_prepare_req.part.0+0x612/0xac0 [ 1155.675322] p9_client_rpc+0x220/0x1370 [ 1155.676104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.677175] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1155.678262] ? pipe_poll+0x21b/0x800 [ 1155.679007] ? p9_fd_close+0x4a0/0x4a0 [ 1155.679777] ? wait_for_partner+0x3c0/0x3c0 [ 1155.680635] ? p9_fd_poll+0x1e0/0x2c0 [ 1155.681403] ? p9_fd_create+0x357/0x4a0 [ 1155.682186] ? p9_conn_create+0x510/0x510 [ 1155.683000] ? p9_client_create+0x798/0x1230 [ 1155.683872] ? kfree+0xd7/0x340 [ 1155.684526] ? do_raw_spin_unlock+0x4f/0x220 [ 1155.685416] p9_client_create+0xa76/0x1230 [ 1155.686257] ? p9_client_flush+0x430/0x430 [ 1155.687097] ? trace_hardirqs_on+0x5b/0x180 [ 1155.687951] ? lockdep_init_map_type+0x2c7/0x780 [ 1155.688884] ? __raw_spin_lock_init+0x36/0x110 [ 1155.689794] v9fs_session_init+0x1dd/0x1680 [ 1155.690652] ? lock_release+0x680/0x680 [ 1155.691448] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1155.692511] ? trace_hardirqs_on+0x5b/0x180 [ 1155.693377] ? v9fs_show_options+0x690/0x690 [ 1155.694261] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1155.695273] ? kasan_unpoison_shadow+0x33/0x50 [ 1155.696168] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1155.697183] v9fs_mount+0x79/0x8f0 [ 1155.697885] ? v9fs_write_inode+0x60/0x60 [ 1155.698716] legacy_get_tree+0x105/0x220 [ 1155.699522] vfs_get_tree+0x8e/0x300 [ 1155.700255] path_mount+0x1490/0x21e0 [ 1155.700992] ? strncpy_from_user+0x9e/0x470 [ 1155.701848] ? finish_automount+0xa90/0xa90 [ 1155.702701] ? getname_flags.part.0+0x1dd/0x4f0 [ 1155.703611] ? _copy_from_user+0xfb/0x1b0 [ 1155.704426] __x64_sys_mount+0x282/0x300 [ 1155.705228] ? copy_mnt_ns+0xa00/0xa00 [ 1155.705980] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.707016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.708066] do_syscall_64+0x33/0x40 [ 1155.708797] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.709804] RIP: 0033:0x7f5f5e955b19 [ 1155.710541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.714102] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1155.715598] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1155.716984] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1155.718418] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1155.719782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.721163] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1155.722591] CPU: 1 PID: 7951 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1155.724035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.724108] 9pnet: Insufficient options for proto=fd [ 1155.725780] Call Trace: [ 1155.725801] dump_stack+0x107/0x167 [ 1155.725827] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1155.725855] p9_client_create+0xc6a/0x1230 [ 1155.730067] ? p9_client_flush+0x430/0x430 [ 1155.730970] ? trace_hardirqs_on+0x5b/0x180 [ 1155.731879] ? lockdep_init_map_type+0x2c7/0x780 [ 1155.732878] ? __raw_spin_lock_init+0x36/0x110 [ 1155.733842] v9fs_session_init+0x1dd/0x1680 [ 1155.734760] ? lock_release+0x680/0x680 [ 1155.735619] ? kmem_cache_alloc_trace+0x151/0x320 [ 1155.736252] FAULT_INJECTION: forcing a failure. [ 1155.736252] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.736644] ? v9fs_show_options+0x690/0x690 [ 1155.739689] ? trace_hardirqs_on+0x5b/0x180 [ 1155.740597] ? kasan_unpoison_shadow+0x33/0x50 [ 1155.741554] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1155.742631] v9fs_mount+0x79/0x8f0 [ 1155.743378] ? v9fs_write_inode+0x60/0x60 [ 1155.744246] legacy_get_tree+0x105/0x220 [ 1155.745103] vfs_get_tree+0x8e/0x300 [ 1155.745892] path_mount+0x1490/0x21e0 [ 1155.746707] ? strncpy_from_user+0x9e/0x470 [ 1155.747619] ? finish_automount+0xa90/0xa90 [ 1155.748525] ? getname_flags.part.0+0x1dd/0x4f0 [ 1155.749506] ? _copy_from_user+0xfb/0x1b0 [ 1155.750398] __x64_sys_mount+0x282/0x300 [ 1155.751263] ? copy_mnt_ns+0xa00/0xa00 [ 1155.752084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.753191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.754288] do_syscall_64+0x33/0x40 [ 1155.755071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.756148] RIP: 0033:0x7f2ae689eb19 [ 1155.756930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.760821] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1155.762424] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1155.763931] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1155.765437] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1155.766958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.768452] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1155.769981] CPU: 0 PID: 7948 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1155.771295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.772841] Call Trace: [ 1155.773354] dump_stack+0x107/0x167 [ 1155.774024] should_fail.cold+0x5/0xa [ 1155.774765] should_failslab+0x5/0x20 [ 1155.775480] __kmalloc_track_caller+0x79/0x370 [ 1155.776332] ? v9fs_session_init+0xa7/0x1680 [ 1155.777160] ? kernel_text_address+0xf2/0x120 [ 1155.778011] kstrdup+0x36/0x70 [ 1155.778634] v9fs_session_init+0xa7/0x1680 [ 1155.779431] ? lock_release+0x680/0x680 [ 1155.780182] ? find_held_lock+0x2c/0x110 [ 1155.780943] ? kmem_cache_alloc_trace+0x151/0x320 [ 1155.781863] ? v9fs_show_options+0x690/0x690 [ 1155.782731] ? trace_hardirqs_on+0x5b/0x180 [ 1155.783543] ? kasan_unpoison_shadow+0x33/0x50 [ 1155.784396] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1155.785352] v9fs_mount+0x79/0x8f0 [ 1155.786007] ? v9fs_write_inode+0x60/0x60 [ 1155.786794] legacy_get_tree+0x105/0x220 [ 1155.787559] vfs_get_tree+0x8e/0x300 [ 1155.788265] path_mount+0x1490/0x21e0 [ 1155.788976] ? strncpy_from_user+0x9e/0x470 [ 1155.789786] ? finish_automount+0xa90/0xa90 [ 1155.790626] ? getname_flags.part.0+0x1dd/0x4f0 [ 1155.791496] ? _copy_from_user+0xfb/0x1b0 [ 1155.792272] __x64_sys_mount+0x282/0x300 [ 1155.793021] ? copy_mnt_ns+0xa00/0xa00 [ 1155.793755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1155.794737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1155.795694] do_syscall_64+0x33/0x40 [ 1155.796011] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1155.796389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1155.796400] RIP: 0033:0x7f52d4da5b19 [ 1155.796425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1155.803383] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1155.804779] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1155.806088] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1155.807410] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1155.808718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1155.810040] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 03:27:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 29) 03:27:34 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x4002, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:27:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 51) 03:27:34 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee17", 0x23}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:27:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x262, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:27:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 17) [ 1155.966848] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1155.970102] FAULT_INJECTION: forcing a failure. [ 1155.970102] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.972142] CPU: 0 PID: 7969 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1155.973298] FAULT_INJECTION: forcing a failure. [ 1155.973298] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.975099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1155.976483] Call Trace: [ 1155.976929] dump_stack+0x107/0x167 [ 1155.977546] should_fail.cold+0x5/0xa [ 1155.978196] should_failslab+0x5/0x20 [ 1155.978840] __kmalloc_track_caller+0x79/0x370 [ 1155.979610] ? kstrdup_const+0x53/0x80 [ 1155.980258] ? kasprintf+0xbb/0xf0 [ 1155.980840] kstrdup+0x36/0x70 [ 1155.981391] kstrdup_const+0x53/0x80 [ 1155.982004] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1155.982867] p9_client_create+0xc6a/0x1230 [ 1155.983590] ? p9_client_flush+0x430/0x430 [ 1155.984314] ? trace_hardirqs_on+0x5b/0x180 [ 1155.985017] ? lockdep_init_map_type+0x2c7/0x780 [ 1155.985821] ? __raw_spin_lock_init+0x36/0x110 [ 1155.986595] v9fs_session_init+0x1dd/0x1680 [ 1155.987321] ? lock_release+0x680/0x680 [ 1155.987982] ? kmem_cache_alloc_trace+0x151/0x320 [ 1155.988776] ? v9fs_show_options+0x690/0x690 [ 1155.989509] ? trace_hardirqs_on+0x5b/0x180 [ 1155.990220] ? kasan_unpoison_shadow+0x33/0x50 [ 1155.990970] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1155.991802] v9fs_mount+0x79/0x8f0 [ 1155.992393] ? v9fs_write_inode+0x60/0x60 [ 1155.993070] legacy_get_tree+0x105/0x220 [ 1155.993754] vfs_get_tree+0x8e/0x300 [ 1155.994388] path_mount+0x1490/0x21e0 [ 1155.995037] ? strncpy_from_user+0x9e/0x470 [ 1155.995762] ? finish_automount+0xa90/0xa90 [ 1155.996481] ? getname_flags.part.0+0x1dd/0x4f0 [ 1155.997256] ? _copy_from_user+0xfb/0x1b0 [ 1155.997934] __x64_sys_mount+0x282/0x300 [ 1155.998621] ? copy_mnt_ns+0xa00/0xa00 [ 1155.999276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1156.000139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1156.000984] do_syscall_64+0x33/0x40 [ 1156.001595] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1156.002417] RIP: 0033:0x7f2ae689eb19 [ 1156.003015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.005989] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1156.007261] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1156.008421] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1156.009587] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1156.010774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1156.011953] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1156.013175] CPU: 1 PID: 7972 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1156.013218] kmem_cache_create(9p-fcall-cache-261) failed with error -12 [ 1156.014704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1156.014713] Call Trace: [ 1156.014744] dump_stack+0x107/0x167 [ 1156.018876] should_fail.cold+0x5/0xa [ 1156.019684] ? create_object.isra.0+0x3a/0xa30 [ 1156.020640] should_failslab+0x5/0x20 [ 1156.021446] kmem_cache_alloc+0x5b/0x310 [ 1156.022320] create_object.isra.0+0x3a/0xa30 [ 1156.023246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.024328] __kmalloc_track_caller+0x177/0x370 [ 1156.025313] ? v9fs_session_init+0xa7/0x1680 [ 1156.026245] ? kernel_text_address+0xf2/0x120 [ 1156.027203] kstrdup+0x36/0x70 [ 1156.027883] v9fs_session_init+0xa7/0x1680 [ 1156.028776] ? lock_release+0x680/0x680 [ 1156.029629] ? find_held_lock+0x2c/0x110 [ 1156.030506] ? kmem_cache_alloc_trace+0x151/0x320 [ 1156.031521] ? v9fs_show_options+0x690/0x690 [ 1156.032455] ? trace_hardirqs_on+0x5b/0x180 [ 1156.033368] ? kasan_unpoison_shadow+0x33/0x50 [ 1156.034344] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.035413] v9fs_mount+0x79/0x8f0 [ 1156.036168] ? v9fs_write_inode+0x60/0x60 [ 1156.037042] legacy_get_tree+0x105/0x220 [ 1156.037896] vfs_get_tree+0x8e/0x300 [ 1156.038687] path_mount+0x1490/0x21e0 [ 1156.039493] ? strncpy_from_user+0x9e/0x470 [ 1156.040408] ? finish_automount+0xa90/0xa90 [ 1156.041318] ? getname_flags.part.0+0x1dd/0x4f0 [ 1156.042318] ? _copy_from_user+0xfb/0x1b0 [ 1156.043205] __x64_sys_mount+0x282/0x300 [ 1156.044056] ? copy_mnt_ns+0xa00/0xa00 [ 1156.044878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1156.045995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1156.047093] do_syscall_64+0x33/0x40 [ 1156.047883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1156.048969] RIP: 0033:0x7f52d4da5b19 [ 1156.049754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.053648] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1156.055260] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1156.056772] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1156.058305] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1156.059832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1156.061340] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1156.062912] CPU: 0 PID: 7969 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1156.063943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1156.065374] Call Trace: [ 1156.065891] dump_stack+0x107/0x167 [ 1156.066556] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1156.067379] p9_client_create+0xc6a/0x1230 [ 1156.068047] ? p9_client_flush+0x430/0x430 [ 1156.068700] ? trace_hardirqs_on+0x5b/0x180 [ 1156.069362] ? lockdep_init_map_type+0x2c7/0x780 [ 1156.070091] ? __raw_spin_lock_init+0x36/0x110 [ 1156.070817] v9fs_session_init+0x1dd/0x1680 [ 1156.071469] ? lock_release+0x680/0x680 [ 1156.072067] ? kmem_cache_alloc_trace+0x151/0x320 [ 1156.072784] ? v9fs_show_options+0x690/0x690 [ 1156.073461] ? trace_hardirqs_on+0x5b/0x180 [ 1156.074113] ? kasan_unpoison_shadow+0x33/0x50 [ 1156.074808] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.075600] v9fs_mount+0x79/0x8f0 [ 1156.076139] ? v9fs_write_inode+0x60/0x60 [ 1156.076884] legacy_get_tree+0x105/0x220 [ 1156.077647] vfs_get_tree+0x8e/0x300 [ 1156.078388] path_mount+0x1490/0x21e0 [ 1156.079142] ? strncpy_from_user+0x9e/0x470 [ 1156.079924] ? finish_automount+0xa90/0xa90 [ 1156.080738] ? getname_flags.part.0+0x1dd/0x4f0 [ 1156.081617] ? _copy_from_user+0xfb/0x1b0 [ 1156.082419] __x64_sys_mount+0x282/0x300 03:27:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 45) [ 1156.083205] ? copy_mnt_ns+0xa00/0xa00 [ 1156.084136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1156.085139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1156.086125] do_syscall_64+0x33/0x40 [ 1156.086866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1156.087838] RIP: 0033:0x7f2ae689eb19 [ 1156.088552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.092066] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1156.093500] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1156.094854] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1156.096201] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1156.097530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1156.098567] FAULT_INJECTION: forcing a failure. [ 1156.098567] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.098874] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1156.102945] CPU: 1 PID: 7974 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1156.104391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1156.106145] Call Trace: [ 1156.106715] dump_stack+0x107/0x167 [ 1156.107477] should_fail.cold+0x5/0xa [ 1156.108277] ? create_object.isra.0+0x3a/0xa30 [ 1156.109228] should_failslab+0x5/0x20 [ 1156.110033] kmem_cache_alloc+0x5b/0x310 [ 1156.110902] create_object.isra.0+0x3a/0xa30 [ 1156.111820] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.112888] __kmalloc_track_caller+0x177/0x370 [ 1156.113863] ? match_number+0xaf/0x1d0 [ 1156.114691] kmemdup_nul+0x2d/0xa0 [ 1156.115434] match_number+0xaf/0x1d0 [ 1156.116212] ? match_u64+0x190/0x190 [ 1156.116991] ? __kmalloc_track_caller+0x2c6/0x370 [ 1156.117993] ? memcpy+0x39/0x60 [ 1156.118706] parse_opts.part.0+0x1f3/0x340 [ 1156.119586] ? p9_fd_show_options+0x1c0/0x1c0 [ 1156.120528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1156.121620] ? trace_hardirqs_on+0x5b/0x180 [ 1156.122532] ? kfree+0xd7/0x340 [ 1156.123235] p9_fd_create+0x98/0x4a0 [ 1156.124020] ? p9_conn_create+0x510/0x510 [ 1156.124885] ? p9_client_create+0x798/0x1230 [ 1156.125808] ? kfree+0xd7/0x340 [ 1156.126506] ? do_raw_spin_unlock+0x4f/0x220 [ 1156.127427] p9_client_create+0x7ff/0x1230 [ 1156.128315] ? p9_client_flush+0x430/0x430 [ 1156.129198] ? trace_hardirqs_on+0x5b/0x180 [ 1156.130097] ? lockdep_init_map_type+0x2c7/0x780 [ 1156.131097] ? __raw_spin_lock_init+0x36/0x110 [ 1156.132057] v9fs_session_init+0x1dd/0x1680 [ 1156.132957] ? lock_release+0x680/0x680 [ 1156.133794] ? kmem_cache_alloc_trace+0x151/0x320 [ 1156.134813] ? v9fs_show_options+0x690/0x690 [ 1156.135737] ? trace_hardirqs_on+0x5b/0x180 [ 1156.136642] ? kasan_unpoison_shadow+0x33/0x50 [ 1156.137591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.138667] v9fs_mount+0x79/0x8f0 [ 1156.139409] ? v9fs_write_inode+0x60/0x60 [ 1156.140271] legacy_get_tree+0x105/0x220 [ 1156.141118] vfs_get_tree+0x8e/0x300 [ 1156.141894] path_mount+0x1490/0x21e0 [ 1156.142706] ? strncpy_from_user+0x9e/0x470 [ 1156.143603] ? finish_automount+0xa90/0xa90 [ 1156.144508] ? getname_flags.part.0+0x1dd/0x4f0 [ 1156.145477] ? _copy_from_user+0xfb/0x1b0 [ 1156.146366] __x64_sys_mount+0x282/0x300 [ 1156.147214] ? copy_mnt_ns+0xa00/0xa00 [ 1156.148036] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1156.149139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1156.150214] do_syscall_64+0x33/0x40 [ 1156.151004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1156.152063] RIP: 0033:0x7fd388488b19 [ 1156.152825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.156644] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1156.158205] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1156.159679] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1156.161136] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1156.162629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1156.164086] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:27:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 17) 03:27:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1156.200108] FAULT_INJECTION: forcing a failure. [ 1156.200108] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.202388] CPU: 1 PID: 7977 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1156.203818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1156.205530] Call Trace: [ 1156.206070] dump_stack+0x107/0x167 [ 1156.206835] should_fail.cold+0x5/0xa [ 1156.207616] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1156.208565] FAULT_INJECTION: forcing a failure. [ 1156.208565] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.208786] should_failslab+0x5/0x20 [ 1156.208805] kmem_cache_alloc+0x5b/0x310 [ 1156.208834] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1156.213137] idr_get_free+0x4b5/0x8f0 [ 1156.213929] idr_alloc_u32+0x170/0x2d0 [ 1156.214743] ? __fprop_inc_percpu_max+0x130/0x130 [ 1156.215736] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 1156.216829] ? lock_release+0x680/0x680 [ 1156.217635] idr_alloc+0xc2/0x130 [ 1156.218353] ? idr_alloc_u32+0x2d0/0x2d0 [ 1156.219169] ? rwlock_bug.part.0+0x90/0x90 [ 1156.220040] p9_client_prepare_req.part.0+0x612/0xac0 [ 1156.221088] p9_client_rpc+0x220/0x1370 [ 1156.221914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1156.222991] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1156.224064] ? pipe_poll+0x21b/0x800 [ 1156.224812] ? p9_fd_close+0x4a0/0x4a0 [ 1156.225601] ? wait_for_partner+0x3c0/0x3c0 [ 1156.226480] ? p9_fd_poll+0x1e0/0x2c0 [ 1156.227261] ? p9_fd_create+0x357/0x4a0 [ 1156.228062] ? p9_conn_create+0x510/0x510 [ 1156.228898] ? p9_client_create+0x798/0x1230 [ 1156.229784] ? kfree+0xd7/0x340 [ 1156.230456] ? do_raw_spin_unlock+0x4f/0x220 [ 1156.231357] p9_client_create+0xa76/0x1230 [ 1156.232223] ? p9_client_flush+0x430/0x430 [ 1156.233079] ? trace_hardirqs_on+0x5b/0x180 [ 1156.233954] ? lockdep_init_map_type+0x2c7/0x780 [ 1156.234934] ? __raw_spin_lock_init+0x36/0x110 [ 1156.235872] v9fs_session_init+0x1dd/0x1680 [ 1156.236742] ? lock_release+0x680/0x680 [ 1156.237552] ? kmem_cache_alloc_trace+0x151/0x320 [ 1156.238606] ? v9fs_show_options+0x690/0x690 [ 1156.239511] ? trace_hardirqs_on+0x5b/0x180 [ 1156.240380] ? kasan_unpoison_shadow+0x33/0x50 [ 1156.241301] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.242344] v9fs_mount+0x79/0x8f0 [ 1156.243055] ? v9fs_write_inode+0x60/0x60 [ 1156.243878] legacy_get_tree+0x105/0x220 [ 1156.244688] vfs_get_tree+0x8e/0x300 [ 1156.245433] path_mount+0x1490/0x21e0 [ 1156.246199] ? strncpy_from_user+0x9e/0x470 [ 1156.247074] ? finish_automount+0xa90/0xa90 [ 1156.247932] ? getname_flags.part.0+0x1dd/0x4f0 [ 1156.248861] ? _copy_from_user+0xfb/0x1b0 [ 1156.249704] __x64_sys_mount+0x282/0x300 [ 1156.250536] ? copy_mnt_ns+0xa00/0xa00 [ 1156.251319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1156.252366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1156.253395] do_syscall_64+0x33/0x40 [ 1156.254145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1156.255175] RIP: 0033:0x7f5f5e955b19 [ 1156.255916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.259592] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1156.261115] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1156.262548] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1156.263979] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1156.265407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1156.266832] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1156.268280] CPU: 0 PID: 7978 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1156.269259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1156.270388] Call Trace: [ 1156.270780] dump_stack+0x107/0x167 [ 1156.271275] should_fail.cold+0x5/0xa [ 1156.271793] ? create_object.isra.0+0x3a/0xa30 [ 1156.272414] should_failslab+0x5/0x20 [ 1156.272928] kmem_cache_alloc+0x5b/0x310 [ 1156.273484] create_object.isra.0+0x3a/0xa30 [ 1156.274083] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.274788] __kmalloc_track_caller+0x177/0x370 [ 1156.275418] ? v9fs_session_init+0xa7/0x1680 [ 1156.276014] ? kernel_text_address+0xf2/0x120 [ 1156.276619] kstrdup+0x36/0x70 [ 1156.277058] v9fs_session_init+0xa7/0x1680 [ 1156.277631] ? lock_release+0x680/0x680 [ 1156.278172] ? find_held_lock+0x2c/0x110 [ 1156.278740] ? kmem_cache_alloc_trace+0x151/0x320 [ 1156.279414] ? v9fs_show_options+0x690/0x690 [ 1156.280016] ? trace_hardirqs_on+0x5b/0x180 [ 1156.280608] ? kasan_unpoison_shadow+0x33/0x50 [ 1156.281223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1156.281920] v9fs_mount+0x79/0x8f0 [ 1156.282403] ? v9fs_write_inode+0x60/0x60 [ 1156.282957] legacy_get_tree+0x105/0x220 [ 1156.283508] vfs_get_tree+0x8e/0x300 [ 1156.284009] path_mount+0x1490/0x21e0 [ 1156.284522] ? strncpy_from_user+0x9e/0x470 [ 1156.285110] ? finish_automount+0xa90/0xa90 [ 1156.285697] ? getname_flags.part.0+0x1dd/0x4f0 [ 1156.286329] ? _copy_from_user+0xfb/0x1b0 [ 1156.286896] __x64_sys_mount+0x282/0x300 [ 1156.287445] ? copy_mnt_ns+0xa00/0xa00 [ 1156.287975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1156.288683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1156.289388] do_syscall_64+0x33/0x40 [ 1156.289884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1156.290586] RIP: 0033:0x7f8718ffcb19 [ 1156.291101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1156.293562] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1156.294601] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1156.295549] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1156.296510] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1156.297452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1156.298410] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:27:46 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 18) 03:27:46 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x0, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:27:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 46) 03:27:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 52) 03:27:46 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x5000, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1168.035177] FAULT_INJECTION: forcing a failure. [ 1168.035177] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.036508] CPU: 0 PID: 7999 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1168.037287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.038235] Call Trace: [ 1168.038546] dump_stack+0x107/0x167 [ 1168.038968] should_fail.cold+0x5/0xa [ 1168.039407] should_failslab+0x5/0x20 [ 1168.039587] FAULT_INJECTION: forcing a failure. [ 1168.039587] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.039840] __kmalloc_track_caller+0x79/0x370 [ 1168.039859] ? v9fs_session_init+0xa7/0x1680 [ 1168.043645] ? kernel_text_address+0xf2/0x120 [ 1168.044155] kstrdup+0x36/0x70 [ 1168.044532] v9fs_session_init+0xa7/0x1680 [ 1168.045020] ? lock_release+0x680/0x680 [ 1168.045475] ? find_held_lock+0x2c/0x110 [ 1168.045942] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.046500] ? v9fs_show_options+0x690/0x690 [ 1168.047004] ? trace_hardirqs_on+0x5b/0x180 [ 1168.047498] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.048018] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.048595] v9fs_mount+0x79/0x8f0 [ 1168.049001] ? v9fs_write_inode+0x60/0x60 [ 1168.049470] legacy_get_tree+0x105/0x220 [ 1168.049935] vfs_get_tree+0x8e/0x300 [ 1168.050356] path_mount+0x1490/0x21e0 [ 1168.050802] ? strncpy_from_user+0x9e/0x470 [ 1168.051300] ? finish_automount+0xa90/0xa90 [ 1168.051796] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.052329] ? _copy_from_user+0xfb/0x1b0 [ 1168.052806] __x64_sys_mount+0x282/0x300 [ 1168.053264] ? copy_mnt_ns+0xa00/0xa00 [ 1168.053709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.054303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.054902] do_syscall_64+0x33/0x40 [ 1168.055333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.055922] RIP: 0033:0x7f8718ffcb19 [ 1168.056352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.058451] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.059347] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1168.060163] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.060979] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.061793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.062610] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1168.063445] CPU: 1 PID: 7991 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1168.065187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.065514] FAULT_INJECTION: forcing a failure. [ 1168.065514] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.067303] Call Trace: [ 1168.067328] dump_stack+0x107/0x167 [ 1168.067353] should_fail.cold+0x5/0xa [ 1168.071106] should_failslab+0x5/0x20 [ 1168.072068] __kmalloc_track_caller+0x79/0x370 [ 1168.073218] ? kstrdup_const+0x53/0x80 [ 1168.074198] ? kasprintf+0xbb/0xf0 [ 1168.075110] kstrdup+0x36/0x70 [ 1168.075923] kstrdup_const+0x53/0x80 [ 1168.076871] kmem_cache_create_usercopy+0x12f/0x2f0 [ 1168.078142] p9_client_create+0xc6a/0x1230 [ 1168.079180] ? p9_client_flush+0x430/0x430 [ 1168.080133] ? trace_hardirqs_on+0x5b/0x180 [ 1168.081108] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.082183] ? __raw_spin_lock_init+0x36/0x110 [ 1168.083229] v9fs_session_init+0x1dd/0x1680 [ 1168.084203] ? lock_release+0x680/0x680 [ 1168.085109] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.086195] ? v9fs_show_options+0x690/0x690 [ 1168.087211] ? trace_hardirqs_on+0x5b/0x180 [ 1168.088183] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.089203] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.090342] v9fs_mount+0x79/0x8f0 [ 1168.091160] ? v9fs_write_inode+0x60/0x60 [ 1168.092095] legacy_get_tree+0x105/0x220 [ 1168.093008] vfs_get_tree+0x8e/0x300 [ 1168.093847] path_mount+0x1490/0x21e0 [ 1168.094720] ? strncpy_from_user+0x9e/0x470 [ 1168.095689] ? finish_automount+0xa90/0xa90 [ 1168.096667] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.097716] ? _copy_from_user+0xfb/0x1b0 [ 1168.098664] __x64_sys_mount+0x282/0x300 [ 1168.099577] ? copy_mnt_ns+0xa00/0xa00 [ 1168.100458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.101634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.102800] do_syscall_64+0x33/0x40 [ 1168.103642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.104802] RIP: 0033:0x7f2ae689eb19 [ 1168.105648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.109789] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.111501] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1168.113109] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.114729] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.116333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.117936] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1168.119571] CPU: 0 PID: 8001 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1168.120367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.120842] kmem_cache_create(9p-fcall-cache-266) failed with error -12 [ 1168.121313] Call Trace: [ 1168.121325] dump_stack+0x107/0x167 [ 1168.121337] should_fail.cold+0x5/0xa [ 1168.121347] should_failslab+0x5/0x20 [ 1168.121357] __kmalloc_track_caller+0x79/0x370 [ 1168.121367] ? match_number+0xaf/0x1d0 [ 1168.121376] ? kfree+0xd7/0x340 [ 1168.121386] kmemdup_nul+0x2d/0xa0 [ 1168.121397] match_number+0xaf/0x1d0 [ 1168.121407] ? match_u64+0x190/0x190 [ 1168.121417] ? __kmalloc_track_caller+0x2c6/0x370 [ 1168.121426] ? memcpy+0x39/0x60 [ 1168.121437] parse_opts.part.0+0x1f3/0x340 [ 1168.121448] ? p9_fd_show_options+0x1c0/0x1c0 [ 1168.121460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.121469] ? trace_hardirqs_on+0x5b/0x180 [ 1168.121480] ? kfree+0xd7/0x340 [ 1168.121492] p9_fd_create+0x98/0x4a0 [ 1168.121501] ? p9_conn_create+0x510/0x510 [ 1168.121510] ? p9_client_create+0x798/0x1230 [ 1168.121520] ? kfree+0xd7/0x340 [ 1168.121527] ? do_raw_spin_unlock+0x4f/0x220 [ 1168.121545] p9_client_create+0x7ff/0x1230 [ 1168.133102] ? p9_client_flush+0x430/0x430 [ 1168.133588] ? trace_hardirqs_on+0x5b/0x180 [ 1168.134083] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.134627] ? __raw_spin_lock_init+0x36/0x110 [ 1168.135148] v9fs_session_init+0x1dd/0x1680 [ 1168.135634] ? lock_release+0x680/0x680 [ 1168.136090] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.136639] ? v9fs_show_options+0x690/0x690 [ 1168.137147] ? trace_hardirqs_on+0x5b/0x180 [ 1168.137640] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.138155] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.138742] v9fs_mount+0x79/0x8f0 [ 1168.139145] ? v9fs_write_inode+0x60/0x60 [ 1168.139611] legacy_get_tree+0x105/0x220 [ 1168.140075] vfs_get_tree+0x8e/0x300 [ 1168.140496] path_mount+0x1490/0x21e0 [ 1168.140934] ? strncpy_from_user+0x9e/0x470 [ 1168.141423] ? finish_automount+0xa90/0xa90 [ 1168.141910] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.142455] ? _copy_from_user+0xfb/0x1b0 [ 1168.142931] __x64_sys_mount+0x282/0x300 [ 1168.143394] ? copy_mnt_ns+0xa00/0xa00 [ 1168.143838] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.144432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.145025] do_syscall_64+0x33/0x40 [ 1168.145450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.146040] RIP: 0033:0x7fd388488b19 [ 1168.146472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.148572] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.149448] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1168.150257] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.151081] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.151894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.152702] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1168.153536] CPU: 1 PID: 7991 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1168.153550] 9pnet: Insufficient options for proto=fd [ 1168.155083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.155093] Call Trace: [ 1168.158094] dump_stack+0x107/0x167 [ 1168.158931] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1168.160110] p9_client_create+0xc6a/0x1230 [ 1168.161069] ? p9_client_flush+0x430/0x430 [ 1168.162021] ? trace_hardirqs_on+0x5b/0x180 [ 1168.163000] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.164063] ? __raw_spin_lock_init+0x36/0x110 [ 1168.165093] v9fs_session_init+0x1dd/0x1680 [ 1168.166062] ? lock_release+0x680/0x680 [ 1168.166972] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.168055] ? v9fs_show_options+0x690/0x690 [ 1168.169051] ? trace_hardirqs_on+0x5b/0x180 [ 1168.170021] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.171054] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.172191] v9fs_mount+0x79/0x8f0 [ 1168.172989] ? v9fs_write_inode+0x60/0x60 [ 1168.173915] legacy_get_tree+0x105/0x220 [ 1168.174836] vfs_get_tree+0x8e/0x300 [ 1168.175672] path_mount+0x1490/0x21e0 [ 1168.176530] ? strncpy_from_user+0x9e/0x470 [ 1168.177498] ? finish_automount+0xa90/0xa90 [ 1168.178474] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.179513] ? _copy_from_user+0xfb/0x1b0 [ 1168.180448] __x64_sys_mount+0x282/0x300 [ 1168.181359] ? copy_mnt_ns+0xa00/0xa00 [ 1168.182235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.183420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.184583] do_syscall_64+0x33/0x40 [ 1168.185425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.186586] RIP: 0033:0x7f2ae689eb19 [ 1168.187423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.191545] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.193251] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1168.194860] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.196463] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.198062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.199667] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:27:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x31e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:27:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 30) 03:27:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 18) [ 1168.207313] FAULT_INJECTION: forcing a failure. [ 1168.207313] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.208591] CPU: 0 PID: 8004 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1168.209364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.210311] Call Trace: [ 1168.210619] dump_stack+0x107/0x167 [ 1168.211034] should_fail.cold+0x5/0xa [ 1168.211466] should_failslab+0x5/0x20 [ 1168.211901] __kmalloc_track_caller+0x79/0x370 [ 1168.212417] ? v9fs_session_init+0xe9/0x1680 [ 1168.212918] ? kernel_text_address+0xf2/0x120 [ 1168.213428] kstrdup+0x36/0x70 [ 1168.213793] v9fs_session_init+0xe9/0x1680 [ 1168.214276] ? lock_release+0x680/0x680 [ 1168.214739] ? find_held_lock+0x2c/0x110 [ 1168.215204] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.215751] ? v9fs_show_options+0x690/0x690 [ 1168.216007] FAULT_INJECTION: forcing a failure. [ 1168.216007] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.216262] ? trace_hardirqs_on+0x5b/0x180 [ 1168.219201] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.219718] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.220292] v9fs_mount+0x79/0x8f0 [ 1168.220693] ? v9fs_write_inode+0x60/0x60 [ 1168.221162] legacy_get_tree+0x105/0x220 [ 1168.221627] vfs_get_tree+0x8e/0x300 [ 1168.222048] path_mount+0x1490/0x21e0 [ 1168.222493] ? strncpy_from_user+0x9e/0x470 [ 1168.222985] ? finish_automount+0xa90/0xa90 [ 1168.223472] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.224002] ? _copy_from_user+0xfb/0x1b0 [ 1168.224479] __x64_sys_mount+0x282/0x300 [ 1168.224937] ? copy_mnt_ns+0xa00/0xa00 [ 1168.225386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.225982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.226577] do_syscall_64+0x33/0x40 [ 1168.226999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.227579] RIP: 0033:0x7f52d4da5b19 [ 1168.228008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.230089] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.230962] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1168.231769] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.232581] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.233392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.234210] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1168.235069] CPU: 1 PID: 8005 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1168.236544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.238262] Call Trace: [ 1168.238834] dump_stack+0x107/0x167 [ 1168.239597] should_fail.cold+0x5/0xa [ 1168.240385] ? p9pdu_readf+0xadb/0x1d40 [ 1168.241221] should_failslab+0x5/0x20 [ 1168.242007] __kmalloc+0x72/0x390 [ 1168.242736] p9pdu_readf+0xadb/0x1d40 [ 1168.243541] ? pipe_poll+0x21b/0x800 [ 1168.244317] ? p9pdu_writef+0x100/0x100 [ 1168.245138] ? p9_fd_poll+0x1e0/0x2c0 [ 1168.245930] ? p9_fd_create+0x357/0x4a0 [ 1168.246762] ? p9_conn_create+0x510/0x510 03:27:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 19) [ 1168.247616] ? p9_client_create+0x798/0x1230 [ 1168.248677] ? kfree+0xd7/0x340 [ 1168.249342] ? do_raw_spin_unlock+0x4f/0x220 [ 1168.250265] p9_client_create+0xaee/0x1230 [ 1168.251170] ? p9_client_flush+0x430/0x430 [ 1168.252047] ? trace_hardirqs_on+0x5b/0x180 [ 1168.252946] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.253927] ? __raw_spin_lock_init+0x36/0x110 [ 1168.254896] v9fs_session_init+0x1dd/0x1680 [ 1168.255799] ? lock_release+0x680/0x680 [ 1168.256636] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.257638] ? v9fs_show_options+0x690/0x690 [ 1168.258572] ? trace_hardirqs_on+0x5b/0x180 03:27:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 31) [ 1168.259470] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.260535] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.261590] v9fs_mount+0x79/0x8f0 [ 1168.262329] ? v9fs_write_inode+0x60/0x60 [ 1168.263204] legacy_get_tree+0x105/0x220 [ 1168.264055] vfs_get_tree+0x8e/0x300 [ 1168.264829] path_mount+0x1490/0x21e0 [ 1168.265629] ? strncpy_from_user+0x9e/0x470 [ 1168.266551] ? finish_automount+0xa90/0xa90 [ 1168.267440] ? getname_flags.part.0+0x1dd/0x4f0 03:27:47 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 19) [ 1168.268403] ? _copy_from_user+0xfb/0x1b0 [ 1168.269389] __x64_sys_mount+0x282/0x300 [ 1168.270234] ? copy_mnt_ns+0xa00/0xa00 [ 1168.271053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.272153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.273233] do_syscall_64+0x33/0x40 [ 1168.274004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.275085] RIP: 0033:0x7f5f5e955b19 [ 1168.275866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.279675] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.281252] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1168.282738] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.284213] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.285715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.287203] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 [ 1168.299183] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value [ 1168.334385] FAULT_INJECTION: forcing a failure. [ 1168.334385] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.336767] CPU: 1 PID: 8017 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1168.338180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.339920] Call Trace: [ 1168.340467] dump_stack+0x107/0x167 [ 1168.341239] should_fail.cold+0x5/0xa [ 1168.342035] ? create_object.isra.0+0x3a/0xa30 [ 1168.343014] should_failslab+0x5/0x20 [ 1168.343802] kmem_cache_alloc+0x5b/0x310 [ 1168.344657] create_object.isra.0+0x3a/0xa30 [ 1168.345583] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 03:27:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 47) [ 1168.346654] __kmalloc_track_caller+0x177/0x370 [ 1168.347857] ? v9fs_session_init+0xe9/0x1680 [ 1168.348766] ? kernel_text_address+0xf2/0x120 [ 1168.349704] kstrdup+0x36/0x70 [ 1168.350382] v9fs_session_init+0xe9/0x1680 [ 1168.351271] ? lock_release+0x680/0x680 [ 1168.352101] ? find_held_lock+0x2c/0x110 [ 1168.352951] ? kmem_cache_alloc_trace+0x151/0x320 03:27:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 53) [ 1168.353958] ? v9fs_show_options+0x690/0x690 [ 1168.354994] ? trace_hardirqs_on+0x5b/0x180 [ 1168.355892] ? kasan_unpoison_shadow+0x33/0x50 03:27:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x368, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1168.356830] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.357993] v9fs_mount+0x79/0x8f0 [ 1168.358741] ? v9fs_write_inode+0x60/0x60 [ 1168.359597] legacy_get_tree+0x105/0x220 [ 1168.360445] vfs_get_tree+0x8e/0x300 [ 1168.361215] path_mount+0x1490/0x21e0 [ 1168.362016] ? strncpy_from_user+0x9e/0x470 [ 1168.362933] ? finish_automount+0xa90/0xa90 [ 1168.363837] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.364827] ? _copy_from_user+0xfb/0x1b0 [ 1168.365705] __x64_sys_mount+0x282/0x300 [ 1168.366564] ? copy_mnt_ns+0xa00/0xa00 [ 1168.367375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.368470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.369545] do_syscall_64+0x33/0x40 [ 1168.370319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.371400] RIP: 0033:0x7f52d4da5b19 [ 1168.372170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.375998] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.377565] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1168.379054] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.380537] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.382020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.383509] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1168.396081] FAULT_INJECTION: forcing a failure. [ 1168.396081] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.398490] CPU: 1 PID: 8016 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1168.399917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.401635] Call Trace: [ 1168.402179] dump_stack+0x107/0x167 [ 1168.402953] should_fail.cold+0x5/0xa [ 1168.403739] ? create_object.isra.0+0x3a/0xa30 [ 1168.404680] should_failslab+0x5/0x20 [ 1168.405472] kmem_cache_alloc+0x5b/0x310 [ 1168.406318] create_object.isra.0+0x3a/0xa30 [ 1168.407232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.408296] __kmalloc_track_caller+0x177/0x370 [ 1168.409254] ? v9fs_session_init+0xe9/0x1680 [ 1168.410161] ? kernel_text_address+0xf2/0x120 [ 1168.411106] kstrdup+0x36/0x70 [ 1168.411784] v9fs_session_init+0xe9/0x1680 [ 1168.412669] ? lock_release+0x680/0x680 [ 1168.413502] ? find_held_lock+0x2c/0x110 [ 1168.414357] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.415367] ? v9fs_show_options+0x690/0x690 [ 1168.416292] ? trace_hardirqs_on+0x5b/0x180 [ 1168.417191] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.418174] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.419245] v9fs_mount+0x79/0x8f0 [ 1168.419983] ? v9fs_write_inode+0x60/0x60 [ 1168.420842] legacy_get_tree+0x105/0x220 [ 1168.421705] vfs_get_tree+0x8e/0x300 [ 1168.422495] path_mount+0x1490/0x21e0 [ 1168.423298] ? strncpy_from_user+0x9e/0x470 [ 1168.424203] ? finish_automount+0xa90/0xa90 [ 1168.425105] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.426072] ? _copy_from_user+0xfb/0x1b0 [ 1168.426954] __x64_sys_mount+0x282/0x300 [ 1168.427798] ? copy_mnt_ns+0xa00/0xa00 [ 1168.428607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.429709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.430800] do_syscall_64+0x33/0x40 [ 1168.431578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.432648] RIP: 0033:0x7f8718ffcb19 [ 1168.433426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.437278] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.438856] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1168.440349] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.441827] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.443314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.444796] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1168.447494] FAULT_INJECTION: forcing a failure. [ 1168.447494] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.448840] CPU: 0 PID: 8015 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1168.449624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.450573] Call Trace: [ 1168.450879] dump_stack+0x107/0x167 [ 1168.451294] should_fail.cold+0x5/0xa [ 1168.451734] ? create_object.isra.0+0x3a/0xa30 [ 1168.452267] should_failslab+0x5/0x20 [ 1168.452707] kmem_cache_alloc+0x5b/0x310 [ 1168.453172] create_object.isra.0+0x3a/0xa30 [ 1168.453684] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.454263] __kmalloc_track_caller+0x177/0x370 [ 1168.454802] ? match_number+0xaf/0x1d0 [ 1168.455247] kmemdup_nul+0x2d/0xa0 [ 1168.455650] match_number+0xaf/0x1d0 [ 1168.456075] ? match_u64+0x190/0x190 [ 1168.456497] ? __kmalloc_track_caller+0x2c6/0x370 [ 1168.457042] ? memcpy+0x39/0x60 [ 1168.457418] parse_opts.part.0+0x1f3/0x340 [ 1168.457900] ? p9_fd_show_options+0x1c0/0x1c0 [ 1168.458422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.459019] ? trace_hardirqs_on+0x5b/0x180 [ 1168.459507] ? kfree+0xd7/0x340 [ 1168.459894] p9_fd_create+0x98/0x4a0 [ 1168.460322] ? p9_conn_create+0x510/0x510 [ 1168.460799] ? p9_client_create+0x798/0x1230 [ 1168.461298] ? kfree+0xd7/0x340 [ 1168.461670] ? do_raw_spin_unlock+0x4f/0x220 [ 1168.462175] p9_client_create+0x7ff/0x1230 [ 1168.462665] ? p9_client_flush+0x430/0x430 [ 1168.463148] ? trace_hardirqs_on+0x5b/0x180 [ 1168.463643] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.464184] ? __raw_spin_lock_init+0x36/0x110 [ 1168.464706] v9fs_session_init+0x1dd/0x1680 [ 1168.465199] ? lock_release+0x680/0x680 [ 1168.465664] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.466227] ? v9fs_show_options+0x690/0x690 [ 1168.466739] ? trace_hardirqs_on+0x5b/0x180 [ 1168.467232] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.467747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.468326] v9fs_mount+0x79/0x8f0 [ 1168.468727] ? v9fs_write_inode+0x60/0x60 [ 1168.469200] legacy_get_tree+0x105/0x220 [ 1168.469672] vfs_get_tree+0x8e/0x300 [ 1168.470100] path_mount+0x1490/0x21e0 [ 1168.470557] ? strncpy_from_user+0x9e/0x470 [ 1168.471047] ? finish_automount+0xa90/0xa90 [ 1168.471538] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.472071] ? _copy_from_user+0xfb/0x1b0 [ 1168.472556] __x64_sys_mount+0x282/0x300 [ 1168.473019] ? copy_mnt_ns+0xa00/0xa00 [ 1168.473464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.474068] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.474670] do_syscall_64+0x33/0x40 [ 1168.475100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.475685] RIP: 0033:0x7fd388488b19 [ 1168.476111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.478217] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.479100] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1168.479912] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.480735] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.481561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.482372] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:27:47 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x5e00, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1168.513172] FAULT_INJECTION: forcing a failure. [ 1168.513172] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.514570] CPU: 0 PID: 8024 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1168.515346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.516288] Call Trace: [ 1168.516599] dump_stack+0x107/0x167 [ 1168.517019] should_fail.cold+0x5/0xa [ 1168.517458] ? create_object.isra.0+0x3a/0xa30 [ 1168.517983] should_failslab+0x5/0x20 [ 1168.518423] kmem_cache_alloc+0x5b/0x310 [ 1168.518892] create_object.isra.0+0x3a/0xa30 [ 1168.519401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.519991] __kmalloc+0x16e/0x390 [ 1168.520396] p9pdu_readf+0xadb/0x1d40 [ 1168.520837] ? pipe_poll+0x21b/0x800 [ 1168.521264] ? p9pdu_writef+0x100/0x100 [ 1168.521715] ? wait_woken+0x250/0x250 [ 1168.522158] ? p9_fd_create+0x357/0x4a0 [ 1168.522617] ? p9_conn_create+0x510/0x510 [ 1168.523087] ? p9_client_create+0x798/0x1230 [ 1168.523589] ? kfree+0xd7/0x340 [ 1168.523962] ? do_raw_spin_unlock+0x4f/0x220 [ 1168.524470] p9_client_create+0xaee/0x1230 [ 1168.524960] ? p9_client_flush+0x430/0x430 [ 1168.525446] ? trace_hardirqs_on+0x5b/0x180 [ 1168.525945] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.526519] ? __raw_spin_lock_init+0x36/0x110 [ 1168.527043] v9fs_session_init+0x1dd/0x1680 [ 1168.527539] ? lock_release+0x680/0x680 [ 1168.527996] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.528541] ? v9fs_show_options+0x690/0x690 [ 1168.529044] ? trace_hardirqs_on+0x5b/0x180 [ 1168.529540] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.530069] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.530661] v9fs_mount+0x79/0x8f0 [ 1168.531070] ? v9fs_write_inode+0x60/0x60 [ 1168.531547] legacy_get_tree+0x105/0x220 [ 1168.532009] vfs_get_tree+0x8e/0x300 [ 1168.532435] path_mount+0x1490/0x21e0 [ 1168.532881] ? strncpy_from_user+0x9e/0x470 [ 1168.533375] ? finish_automount+0xa90/0xa90 [ 1168.533871] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.534411] ? _copy_from_user+0xfb/0x1b0 [ 1168.534896] __x64_sys_mount+0x282/0x300 [ 1168.535362] ? copy_mnt_ns+0xa00/0xa00 [ 1168.535813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.536413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.537006] do_syscall_64+0x33/0x40 [ 1168.537433] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.538025] RIP: 0033:0x7f5f5e955b19 [ 1168.538461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.540575] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.541443] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1168.542266] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.543098] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.543916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.544743] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:27:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3bd, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:27:47 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x0, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1168.576649] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:27:47 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x0, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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"]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1168.633231] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615؉" or missing value 03:27:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:27:47 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0xe803, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:27:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 20) [ 1168.758840] FAULT_INJECTION: forcing a failure. [ 1168.758840] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.760231] CPU: 0 PID: 8038 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1168.761004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.761936] Call Trace: [ 1168.762241] dump_stack+0x107/0x167 [ 1168.762665] should_fail.cold+0x5/0xa [ 1168.763099] ? __kmem_cache_create+0x10e/0x520 [ 1168.763618] should_failslab+0x5/0x20 [ 1168.764050] kmem_cache_alloc_node+0x55/0x330 [ 1168.764561] __kmem_cache_create+0x10e/0x520 [ 1168.765064] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1168.765634] p9_client_create+0xc6a/0x1230 [ 1168.766123] ? p9_client_flush+0x430/0x430 [ 1168.766616] ? trace_hardirqs_on+0x5b/0x180 [ 1168.767111] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.767652] ? __raw_spin_lock_init+0x36/0x110 [ 1168.768177] v9fs_session_init+0x1dd/0x1680 [ 1168.768671] ? lock_release+0x680/0x680 [ 1168.769132] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.769680] ? v9fs_show_options+0x690/0x690 [ 1168.770183] ? trace_hardirqs_on+0x5b/0x180 [ 1168.770681] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.771199] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.771774] v9fs_mount+0x79/0x8f0 [ 1168.772177] ? v9fs_write_inode+0x60/0x60 [ 1168.772647] legacy_get_tree+0x105/0x220 [ 1168.773109] vfs_get_tree+0x8e/0x300 [ 1168.773534] path_mount+0x1490/0x21e0 [ 1168.773973] ? strncpy_from_user+0x9e/0x470 [ 1168.774469] ? finish_automount+0xa90/0xa90 [ 1168.774957] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.775487] ? _copy_from_user+0xfb/0x1b0 [ 1168.775961] __x64_sys_mount+0x282/0x300 [ 1168.776422] ? copy_mnt_ns+0xa00/0xa00 [ 1168.776866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.777462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.778045] do_syscall_64+0x33/0x40 [ 1168.778474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.779058] RIP: 0033:0x7f2ae689eb19 [ 1168.779483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.781565] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.782442] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1168.783251] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.784064] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.784873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.785681] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1168.786580] kmem_cache_create(9p-fcall-cache-271) failed with error -22 [ 1168.787366] CPU: 0 PID: 8038 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1168.788142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.789084] Call Trace: [ 1168.789382] dump_stack+0x107/0x167 [ 1168.789796] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1168.790399] p9_client_create+0xc6a/0x1230 [ 1168.790890] ? p9_client_flush+0x430/0x430 [ 1168.791369] ? trace_hardirqs_on+0x5b/0x180 [ 1168.791858] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.792394] ? __raw_spin_lock_init+0x36/0x110 [ 1168.792913] v9fs_session_init+0x1dd/0x1680 [ 1168.793405] ? lock_release+0x680/0x680 [ 1168.793867] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.794411] ? v9fs_show_options+0x690/0x690 [ 1168.794935] ? trace_hardirqs_on+0x5b/0x180 [ 1168.795431] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.795947] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.796526] v9fs_mount+0x79/0x8f0 [ 1168.796941] ? v9fs_write_inode+0x60/0x60 [ 1168.797410] legacy_get_tree+0x105/0x220 [ 1168.797869] vfs_get_tree+0x8e/0x300 [ 1168.798303] path_mount+0x1490/0x21e0 [ 1168.798747] ? strncpy_from_user+0x9e/0x470 [ 1168.799236] ? finish_automount+0xa90/0xa90 [ 1168.799726] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.800257] ? _copy_from_user+0xfb/0x1b0 [ 1168.800732] __x64_sys_mount+0x282/0x300 [ 1168.801192] ? copy_mnt_ns+0xa00/0xa00 [ 1168.801637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.802235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.802833] do_syscall_64+0x33/0x40 [ 1168.803255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.803836] RIP: 0033:0x7f2ae689eb19 [ 1168.804260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.806358] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.807230] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1168.808037] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.808849] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.809660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.810479] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1168.812494] FAULT_INJECTION: forcing a failure. [ 1168.812494] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.813954] CPU: 0 PID: 8045 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1168.814745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.815692] Call Trace: [ 1168.815992] dump_stack+0x107/0x167 [ 1168.816405] should_fail.cold+0x5/0xa [ 1168.816839] ? p9_client_create+0xaf/0x1230 [ 1168.817329] should_failslab+0x5/0x20 [ 1168.817760] kmem_cache_alloc_trace+0x55/0x320 [ 1168.818281] ? find_held_lock+0x2c/0x110 [ 1168.818756] p9_client_create+0xaf/0x1230 [ 1168.819228] ? lock_downgrade+0x6d0/0x6d0 [ 1168.819705] ? p9_client_flush+0x430/0x430 [ 1168.820187] ? trace_hardirqs_on+0x5b/0x180 [ 1168.820676] ? lockdep_init_map_type+0x2c7/0x780 [ 1168.821219] ? __raw_spin_lock_init+0x36/0x110 [ 1168.821738] v9fs_session_init+0x1dd/0x1680 [ 1168.822227] ? lock_release+0x680/0x680 [ 1168.822689] ? kmem_cache_alloc_trace+0x151/0x320 [ 1168.823235] ? v9fs_show_options+0x690/0x690 [ 1168.823734] ? trace_hardirqs_on+0x5b/0x180 [ 1168.824224] ? kasan_unpoison_shadow+0x33/0x50 [ 1168.824737] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1168.825309] v9fs_mount+0x79/0x8f0 [ 1168.825715] ? v9fs_write_inode+0x60/0x60 [ 1168.826193] legacy_get_tree+0x105/0x220 [ 1168.826663] vfs_get_tree+0x8e/0x300 [ 1168.827083] path_mount+0x1490/0x21e0 [ 1168.827516] ? strncpy_from_user+0x9e/0x470 [ 1168.828003] ? finish_automount+0xa90/0xa90 [ 1168.828492] ? getname_flags.part.0+0x1dd/0x4f0 [ 1168.829017] ? _copy_from_user+0xfb/0x1b0 [ 1168.829490] __x64_sys_mount+0x282/0x300 [ 1168.829957] ? copy_mnt_ns+0xa00/0xa00 [ 1168.830400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1168.831000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1168.831583] do_syscall_64+0x33/0x40 [ 1168.832005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1168.832590] RIP: 0033:0x7f8718ffcb19 [ 1168.833014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.835106] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.835971] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1168.836783] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1168.837588] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1168.838397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.839231] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:28:03 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 20) 03:28:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 54) 03:28:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 21) 03:28:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1184.847225] FAULT_INJECTION: forcing a failure. [ 1184.847225] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.849695] CPU: 0 PID: 8055 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1184.850551] FAULT_INJECTION: forcing a failure. [ 1184.850551] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.851125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1184.851132] Call Trace: [ 1184.851159] dump_stack+0x107/0x167 [ 1184.851184] should_fail.cold+0x5/0xa [ 1184.857234] ? create_object.isra.0+0x3a/0xa30 [ 1184.858180] should_failslab+0x5/0x20 [ 1184.858980] kmem_cache_alloc+0x5b/0x310 [ 1184.859822] create_object.isra.0+0x3a/0xa30 [ 1184.860725] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1184.861783] kmem_cache_alloc_node+0x169/0x330 [ 1184.862741] __kmem_cache_create+0x10e/0x520 [ 1184.863667] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1184.864724] p9_client_create+0xc6a/0x1230 [ 1184.865618] ? p9_client_flush+0x430/0x430 [ 1184.866494] ? trace_hardirqs_on+0x5b/0x180 [ 1184.867409] ? lockdep_init_map_type+0x2c7/0x780 [ 1184.868394] ? __raw_spin_lock_init+0x36/0x110 [ 1184.869353] v9fs_session_init+0x1dd/0x1680 [ 1184.870249] ? lock_release+0x680/0x680 [ 1184.871096] ? kmem_cache_alloc_trace+0x151/0x320 [ 1184.872096] ? v9fs_show_options+0x690/0x690 [ 1184.873012] ? trace_hardirqs_on+0x5b/0x180 [ 1184.873916] ? kasan_unpoison_shadow+0x33/0x50 [ 1184.874871] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1184.875921] v9fs_mount+0x79/0x8f0 [ 1184.876652] ? v9fs_write_inode+0x60/0x60 [ 1184.877519] legacy_get_tree+0x105/0x220 [ 1184.878358] vfs_get_tree+0x8e/0x300 [ 1184.879136] path_mount+0x1490/0x21e0 [ 1184.879933] ? strncpy_from_user+0x9e/0x470 [ 1184.880829] ? finish_automount+0xa90/0xa90 [ 1184.881727] ? getname_flags.part.0+0x1dd/0x4f0 [ 1184.882707] ? _copy_from_user+0xfb/0x1b0 [ 1184.883600] __x64_sys_mount+0x282/0x300 [ 1184.884454] ? copy_mnt_ns+0xa00/0xa00 [ 1184.885278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1184.886392] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1184.887492] do_syscall_64+0x33/0x40 [ 1184.888280] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1184.889357] RIP: 0033:0x7f2ae689eb19 [ 1184.890147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1184.894063] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1184.895675] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1184.897186] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1184.898712] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1184.900219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1184.901731] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1184.903306] CPU: 1 PID: 8056 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1184.904786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1184.906540] Call Trace: [ 1184.907129] dump_stack+0x107/0x167 [ 1184.907905] should_fail.cold+0x5/0xa [ 1184.908710] ? create_object.isra.0+0x3a/0xa30 [ 1184.909671] should_failslab+0x5/0x20 [ 1184.910472] kmem_cache_alloc+0x5b/0x310 [ 1184.911361] ? kernel_text_address+0xf2/0x120 [ 1184.912309] create_object.isra.0+0x3a/0xa30 [ 1184.913228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1184.914293] kmem_cache_alloc_trace+0x151/0x320 [ 1184.915287] ? find_held_lock+0x2c/0x110 [ 1184.916159] p9_client_create+0xaf/0x1230 [ 1184.917023] ? lock_downgrade+0x6d0/0x6d0 [ 1184.917898] ? p9_client_flush+0x430/0x430 [ 1184.918816] ? trace_hardirqs_on+0x5b/0x180 [ 1184.919729] ? lockdep_init_map_type+0x2c7/0x780 [ 1184.920719] ? __raw_spin_lock_init+0x36/0x110 [ 1184.921678] v9fs_session_init+0x1dd/0x1680 [ 1184.922586] ? lock_release+0x680/0x680 [ 1184.923459] ? kmem_cache_alloc_trace+0x151/0x320 [ 1184.924482] ? v9fs_show_options+0x690/0x690 [ 1184.925411] ? trace_hardirqs_on+0x5b/0x180 [ 1184.926319] ? kasan_unpoison_shadow+0x33/0x50 [ 1184.927310] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1184.928371] v9fs_mount+0x79/0x8f0 [ 1184.929110] ? v9fs_write_inode+0x60/0x60 [ 1184.929971] legacy_get_tree+0x105/0x220 [ 1184.930848] vfs_get_tree+0x8e/0x300 [ 1184.931632] path_mount+0x1490/0x21e0 [ 1184.932436] ? strncpy_from_user+0x9e/0x470 [ 1184.933345] ? finish_automount+0xa90/0xa90 [ 1184.934249] ? getname_flags.part.0+0x1dd/0x4f0 [ 1184.935248] ? _copy_from_user+0xfb/0x1b0 [ 1184.936128] __x64_sys_mount+0x282/0x300 [ 1184.936985] ? copy_mnt_ns+0xa00/0xa00 [ 1184.937810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1184.938931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1184.940009] do_syscall_64+0x33/0x40 [ 1184.940796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1184.941871] RIP: 0033:0x7f8718ffcb19 [ 1184.942674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1184.946553] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1184.948177] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1184.949660] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1184.951182] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1184.952668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1184.954154] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1184.960484] FAULT_INJECTION: forcing a failure. [ 1184.960484] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.960690] FAULT_INJECTION: forcing a failure. [ 1184.960690] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.962947] CPU: 1 PID: 8058 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1184.962958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1184.962964] Call Trace: [ 1184.962988] dump_stack+0x107/0x167 [ 1184.963012] should_fail.cold+0x5/0xa [ 1184.963033] ? p9_client_create+0xaf/0x1230 [ 1184.963059] should_failslab+0x5/0x20 [ 1184.972330] kmem_cache_alloc_trace+0x55/0x320 [ 1184.973296] ? find_held_lock+0x2c/0x110 [ 1184.974154] p9_client_create+0xaf/0x1230 [ 1184.975048] ? lock_downgrade+0x6d0/0x6d0 [ 1184.975929] ? p9_client_flush+0x430/0x430 [ 1184.976823] ? trace_hardirqs_on+0x5b/0x180 [ 1184.977727] ? lockdep_init_map_type+0x2c7/0x780 [ 1184.978754] ? __raw_spin_lock_init+0x36/0x110 [ 1184.979726] v9fs_session_init+0x1dd/0x1680 [ 1184.980630] ? lock_release+0x680/0x680 [ 1184.981477] ? kmem_cache_alloc_trace+0x151/0x320 [ 1184.982489] ? v9fs_show_options+0x690/0x690 [ 1184.983455] ? trace_hardirqs_on+0x5b/0x180 [ 1184.984362] ? kasan_unpoison_shadow+0x33/0x50 [ 1184.985317] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1184.986387] v9fs_mount+0x79/0x8f0 [ 1184.987152] ? v9fs_write_inode+0x60/0x60 [ 1184.988025] legacy_get_tree+0x105/0x220 [ 1184.988883] vfs_get_tree+0x8e/0x300 [ 1184.989661] path_mount+0x1490/0x21e0 [ 1184.990467] ? strncpy_from_user+0x9e/0x470 [ 1184.991404] ? finish_automount+0xa90/0xa90 [ 1184.992319] ? getname_flags.part.0+0x1dd/0x4f0 [ 1184.993298] ? _copy_from_user+0xfb/0x1b0 [ 1184.994177] __x64_sys_mount+0x282/0x300 [ 1184.995063] ? copy_mnt_ns+0xa00/0xa00 [ 1184.995882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1184.996982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1184.998070] do_syscall_64+0x33/0x40 [ 1184.998871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1184.999963] RIP: 0033:0x7f52d4da5b19 [ 1185.000758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1185.004695] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1185.006301] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1185.007832] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1185.009342] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1185.010878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1185.012384] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1185.013915] CPU: 0 PID: 8062 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1185.015380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1185.017139] Call Trace: [ 1185.017698] dump_stack+0x107/0x167 [ 1185.018478] should_fail.cold+0x5/0xa [ 1185.019292] ? create_object.isra.0+0x3a/0xa30 [ 1185.020260] should_failslab+0x5/0x20 [ 1185.021064] kmem_cache_alloc+0x5b/0x310 [ 1185.021927] create_object.isra.0+0x3a/0xa30 [ 1185.022862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1185.023939] __kmalloc_track_caller+0x177/0x370 [ 1185.024933] ? match_number+0xaf/0x1d0 [ 1185.025756] kmemdup_nul+0x2d/0xa0 [ 1185.026521] FAULT_INJECTION: forcing a failure. [ 1185.026521] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.026539] match_number+0xaf/0x1d0 [ 1185.026565] ? match_u64+0x190/0x190 [ 1185.030445] ? __kmalloc_track_caller+0x2c6/0x370 [ 1185.031474] ? memcpy+0x39/0x60 [ 1185.032181] parse_opts.part.0+0x1f3/0x340 [ 1185.033084] ? p9_fd_show_options+0x1c0/0x1c0 [ 1185.034041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1185.035158] ? trace_hardirqs_on+0x5b/0x180 [ 1185.036086] ? kfree+0xd7/0x340 [ 1185.036788] p9_fd_create+0x98/0x4a0 [ 1185.037585] ? p9_conn_create+0x510/0x510 [ 1185.038468] ? p9_client_create+0x798/0x1230 [ 1185.039416] ? kfree+0xd7/0x340 [ 1185.040111] ? do_raw_spin_unlock+0x4f/0x220 [ 1185.041063] p9_client_create+0x7ff/0x1230 [ 1185.041966] ? p9_client_flush+0x430/0x430 [ 1185.042876] ? trace_hardirqs_on+0x5b/0x180 [ 1185.043790] ? lockdep_init_map_type+0x2c7/0x780 [ 1185.044793] ? __raw_spin_lock_init+0x36/0x110 [ 1185.045767] v9fs_session_init+0x1dd/0x1680 [ 1185.046689] ? lock_release+0x680/0x680 [ 1185.047537] ? kmem_cache_alloc_trace+0x151/0x320 [ 1185.048558] ? v9fs_show_options+0x690/0x690 [ 1185.049503] ? trace_hardirqs_on+0x5b/0x180 [ 1185.050409] ? kasan_unpoison_shadow+0x33/0x50 [ 1185.051375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1185.052448] v9fs_mount+0x79/0x8f0 [ 1185.053206] ? v9fs_write_inode+0x60/0x60 [ 1185.054076] legacy_get_tree+0x105/0x220 [ 1185.054947] vfs_get_tree+0x8e/0x300 [ 1185.055731] path_mount+0x1490/0x21e0 [ 1185.056540] ? strncpy_from_user+0x9e/0x470 [ 1185.057448] ? finish_automount+0xa90/0xa90 [ 1185.058357] ? getname_flags.part.0+0x1dd/0x4f0 [ 1185.059345] ? _copy_from_user+0xfb/0x1b0 [ 1185.060227] __x64_sys_mount+0x282/0x300 [ 1185.061083] ? copy_mnt_ns+0xa00/0xa00 [ 1185.061911] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1185.063021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1185.064111] do_syscall_64+0x33/0x40 [ 1185.064886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1185.065951] RIP: 0033:0x7fd388488b19 [ 1185.066735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1185.070590] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1185.072190] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1185.073680] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1185.075175] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1185.076660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1185.078144] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1185.079676] CPU: 1 PID: 8067 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 1185.081092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1185.082794] Call Trace: 03:28:03 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 32) 03:28:03 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:28:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 48) 03:28:03 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0xf401, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1185.083331] dump_stack+0x107/0x167 [ 1185.084286] should_fail.cold+0x5/0xa [ 1185.085075] should_failslab+0x5/0x20 [ 1185.085862] __kmalloc_track_caller+0x79/0x370 [ 1185.086812] ? kasprintf+0xbb/0xf0 [ 1185.087531] ? __delete_object+0xb3/0x100 [ 1185.088367] kvasprintf+0xb5/0x150 [ 1185.089092] ? bust_spinlocks+0xe0/0xe0 [ 1185.089896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1185.090986] kasprintf+0xbb/0xf0 [ 1185.091661] ? kvasprintf_const+0x1a0/0x1a0 [ 1185.092534] ? kmem_cache_free+0x249/0x2d0 [ 1185.093395] ? p9_client_create+0xbfa/0x1230 [ 1185.094286] p9_client_create+0xc1b/0x1230 [ 1185.095174] ? p9_client_flush+0x430/0x430 [ 1185.096019] ? trace_hardirqs_on+0x5b/0x180 [ 1185.096884] ? lockdep_init_map_type+0x2c7/0x780 [ 1185.097838] ? __raw_spin_lock_init+0x36/0x110 [ 1185.098784] v9fs_session_init+0x1dd/0x1680 [ 1185.099649] ? lock_release+0x680/0x680 [ 1185.100459] ? kmem_cache_alloc_trace+0x151/0x320 [ 1185.101431] ? v9fs_show_options+0x690/0x690 [ 1185.102329] ? trace_hardirqs_on+0x5b/0x180 [ 1185.103228] ? kasan_unpoison_shadow+0x33/0x50 [ 1185.104154] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1185.105171] v9fs_mount+0x79/0x8f0 [ 1185.105884] ? v9fs_write_inode+0x60/0x60 [ 1185.106738] legacy_get_tree+0x105/0x220 [ 1185.107568] vfs_get_tree+0x8e/0x300 [ 1185.108317] path_mount+0x1490/0x21e0 [ 1185.109085] ? strncpy_from_user+0x9e/0x470 [ 1185.109949] ? finish_automount+0xa90/0xa90 [ 1185.110836] ? getname_flags.part.0+0x1dd/0x4f0 [ 1185.111767] ? _copy_from_user+0xfb/0x1b0 [ 1185.112609] __x64_sys_mount+0x282/0x300 [ 1185.113424] ? copy_mnt_ns+0xa00/0xa00 [ 1185.114211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1185.115331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1185.116372] do_syscall_64+0x33/0x40 [ 1185.117136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1185.118208] RIP: 0033:0x7f5f5e955b19 [ 1185.119020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1185.122905] RSP: 002b:00007f5f5becb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1185.124518] RAX: ffffffffffffffda RBX: 00007f5f5ea68f60 RCX: 00007f5f5e955b19 [ 1185.126013] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1185.127538] RBP: 00007f5f5becb1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1185.129023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1185.130531] R13: 00007fffab405e2f R14: 00007f5f5becb300 R15: 0000000000022000 03:28:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:04 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0xff0f, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:28:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 22) 03:28:17 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:28:17 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 21) 03:28:17 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 33) 03:28:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 55) 03:28:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:17 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x80000, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:28:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 49) [ 1198.284242] FAULT_INJECTION: forcing a failure. [ 1198.284242] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.285673] CPU: 1 PID: 8097 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1198.286495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1198.287509] Call Trace: [ 1198.287832] dump_stack+0x107/0x167 [ 1198.288280] should_fail.cold+0x5/0xa [ 1198.288742] should_failslab+0x5/0x20 [ 1198.289203] __kmalloc_track_caller+0x79/0x370 [ 1198.289761] ? p9_client_create+0x41d/0x1230 [ 1198.290295] kstrdup+0x36/0x70 [ 1198.290687] p9_client_create+0x41d/0x1230 [ 1198.291213] ? lock_downgrade+0x6d0/0x6d0 [ 1198.291715] ? p9_client_flush+0x430/0x430 [ 1198.292217] ? trace_hardirqs_on+0x5b/0x180 [ 1198.292734] ? lockdep_init_map_type+0x2c7/0x780 [ 1198.293312] ? __raw_spin_lock_init+0x36/0x110 [ 1198.293689] FAULT_INJECTION: forcing a failure. [ 1198.293689] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.293868] v9fs_session_init+0x1dd/0x1680 [ 1198.296691] ? lock_release+0x680/0x680 [ 1198.297168] ? kmem_cache_alloc_trace+0x151/0x320 [ 1198.297743] ? v9fs_show_options+0x690/0x690 [ 1198.298275] ? trace_hardirqs_on+0x5b/0x180 [ 1198.298800] ? kasan_unpoison_shadow+0x33/0x50 [ 1198.299349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.299952] v9fs_mount+0x79/0x8f0 [ 1198.300388] ? v9fs_write_inode+0x60/0x60 [ 1198.300882] legacy_get_tree+0x105/0x220 [ 1198.301382] vfs_get_tree+0x8e/0x300 [ 1198.301837] path_mount+0x1490/0x21e0 [ 1198.302306] ? strncpy_from_user+0x9e/0x470 [ 1198.302849] ? finish_automount+0xa90/0xa90 [ 1198.303372] ? getname_flags.part.0+0x1dd/0x4f0 [ 1198.303937] ? _copy_from_user+0xfb/0x1b0 [ 1198.304446] __x64_sys_mount+0x282/0x300 [ 1198.304945] ? copy_mnt_ns+0xa00/0xa00 [ 1198.305420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1198.306062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1198.306691] do_syscall_64+0x33/0x40 [ 1198.307164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1198.307793] RIP: 0033:0x7f8718ffcb19 [ 1198.308245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1198.310488] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1198.311433] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1198.312295] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1198.313160] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1198.314029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.314917] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1198.315804] CPU: 0 PID: 8092 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1198.317345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1198.319359] Call Trace: [ 1198.319996] dump_stack+0x107/0x167 [ 1198.320873] should_fail.cold+0x5/0xa [ 1198.321790] ? create_object.isra.0+0x3a/0xa30 [ 1198.322897] should_failslab+0x5/0x20 [ 1198.323805] kmem_cache_alloc+0x5b/0x310 [ 1198.324780] ? kernel_text_address+0xf2/0x120 [ 1198.325864] create_object.isra.0+0x3a/0xa30 [ 1198.326925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.328143] kmem_cache_alloc_trace+0x151/0x320 [ 1198.329258] ? find_held_lock+0x2c/0x110 [ 1198.330245] p9_client_create+0xaf/0x1230 [ 1198.331262] ? lock_downgrade+0x6d0/0x6d0 [ 1198.332265] ? p9_client_flush+0x430/0x430 [ 1198.333279] ? trace_hardirqs_on+0x5b/0x180 [ 1198.334314] ? lockdep_init_map_type+0x2c7/0x780 [ 1198.335551] ? __raw_spin_lock_init+0x36/0x110 [ 1198.336650] v9fs_session_init+0x1dd/0x1680 [ 1198.337677] ? lock_release+0x680/0x680 [ 1198.338637] ? kmem_cache_alloc_trace+0x151/0x320 [ 1198.339791] ? v9fs_show_options+0x690/0x690 [ 1198.340851] ? trace_hardirqs_on+0x5b/0x180 [ 1198.341879] ? kasan_unpoison_shadow+0x33/0x50 [ 1198.342986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.344194] v9fs_mount+0x79/0x8f0 [ 1198.345040] ? v9fs_write_inode+0x60/0x60 [ 1198.346022] legacy_get_tree+0x105/0x220 [ 1198.347020] vfs_get_tree+0x8e/0x300 [ 1198.347903] path_mount+0x1490/0x21e0 [ 1198.348818] ? strncpy_from_user+0x9e/0x470 [ 1198.349843] ? finish_automount+0xa90/0xa90 [ 1198.350859] ? getname_flags.part.0+0x1dd/0x4f0 [ 1198.351964] ? _copy_from_user+0xfb/0x1b0 [ 1198.352950] __x64_sys_mount+0x282/0x300 [ 1198.353914] ? copy_mnt_ns+0xa00/0xa00 [ 1198.354849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1198.356086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1198.357305] do_syscall_64+0x33/0x40 [ 1198.358184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1198.359425] RIP: 0033:0x7f52d4da5b19 [ 1198.360305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1198.364663] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1198.366439] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1198.368128] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1198.369808] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1198.371498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.373177] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 03:28:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1198.414976] FAULT_INJECTION: forcing a failure. [ 1198.414976] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.416300] CPU: 1 PID: 8107 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1198.417086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1198.418036] Call Trace: [ 1198.418344] dump_stack+0x107/0x167 [ 1198.418780] should_fail.cold+0x5/0xa [ 1198.419238] ? create_object.isra.0+0x3a/0xa30 [ 1198.419760] should_failslab+0x5/0x20 [ 1198.420194] kmem_cache_alloc+0x5b/0x310 [ 1198.420659] ? p9_fd_show_options+0x1c0/0x1c0 [ 1198.421179] create_object.isra.0+0x3a/0xa30 [ 1198.421677] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.422265] kmem_cache_alloc_trace+0x151/0x320 [ 1198.422810] p9_fd_create+0x161/0x4a0 [ 1198.423250] ? p9_conn_create+0x510/0x510 [ 1198.423721] ? p9_client_create+0x798/0x1230 [ 1198.424227] ? kfree+0xd7/0x340 [ 1198.424600] ? do_raw_spin_unlock+0x4f/0x220 [ 1198.425105] p9_client_create+0x7ff/0x1230 [ 1198.425588] ? p9_client_flush+0x430/0x430 [ 1198.426069] ? trace_hardirqs_on+0x5b/0x180 [ 1198.426555] ? lockdep_init_map_type+0x2c7/0x780 [ 1198.427109] ? __raw_spin_lock_init+0x36/0x110 [ 1198.427627] v9fs_session_init+0x1dd/0x1680 [ 1198.428117] ? lock_release+0x680/0x680 [ 1198.428567] ? kmem_cache_alloc_trace+0x151/0x320 [ 1198.429107] ? v9fs_show_options+0x690/0x690 [ 1198.429604] ? trace_hardirqs_on+0x5b/0x180 [ 1198.430092] ? kasan_unpoison_shadow+0x33/0x50 [ 1198.430602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.431199] v9fs_mount+0x79/0x8f0 [ 1198.431600] ? v9fs_write_inode+0x60/0x60 [ 1198.432079] legacy_get_tree+0x105/0x220 [ 1198.432539] vfs_get_tree+0x8e/0x300 [ 1198.432962] path_mount+0x1490/0x21e0 [ 1198.433394] ? strncpy_from_user+0x9e/0x470 [ 1198.433875] ? finish_automount+0xa90/0xa90 [ 1198.434372] ? getname_flags.part.0+0x1dd/0x4f0 [ 1198.434912] ? _copy_from_user+0xfb/0x1b0 [ 1198.435388] __x64_sys_mount+0x282/0x300 [ 1198.435843] ? copy_mnt_ns+0xa00/0xa00 [ 1198.436292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1198.436881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1198.437466] do_syscall_64+0x33/0x40 [ 1198.437884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1198.438459] RIP: 0033:0x7fd388488b19 [ 1198.438906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1198.440971] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1198.441831] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1198.442636] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1198.443456] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1198.444257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.445058] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:28:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 23) 03:28:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:17 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0xb19f0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1198.493642] FAULT_INJECTION: forcing a failure. 03:28:17 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1198.493642] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.496512] CPU: 0 PID: 8115 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1198.498055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1198.499938] Call Trace: [ 1198.500529] dump_stack+0x107/0x167 [ 1198.501348] should_fail.cold+0x5/0xa [ 1198.502199] ? create_object.isra.0+0x3a/0xa30 [ 1198.503231] should_failslab+0x5/0x20 [ 1198.504083] kmem_cache_alloc+0x5b/0x310 [ 1198.504991] ? lock_downgrade+0x6d0/0x6d0 [ 1198.505923] create_object.isra.0+0x3a/0xa30 [ 1198.506925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.508070] __kmalloc_track_caller+0x177/0x370 [ 1198.509122] ? p9_client_create+0x41d/0x1230 [ 1198.510116] kstrdup+0x36/0x70 [ 1198.510305] FAULT_INJECTION: forcing a failure. [ 1198.510305] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.510847] p9_client_create+0x41d/0x1230 [ 1198.513015] ? lock_downgrade+0x6d0/0x6d0 [ 1198.513955] ? p9_client_flush+0x430/0x430 [ 1198.514931] ? trace_hardirqs_on+0x5b/0x180 [ 1198.515903] ? lockdep_init_map_type+0x2c7/0x780 [ 1198.516968] ? __raw_spin_lock_init+0x36/0x110 [ 1198.518006] v9fs_session_init+0x1dd/0x1680 [ 1198.518982] ? lock_release+0x680/0x680 [ 1198.519885] ? kmem_cache_alloc_trace+0x151/0x320 [ 1198.520967] ? v9fs_show_options+0x690/0x690 [ 1198.521962] ? trace_hardirqs_on+0x5b/0x180 [ 1198.522947] ? kasan_unpoison_shadow+0x33/0x50 [ 1198.523958] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.525108] v9fs_mount+0x79/0x8f0 [ 1198.525904] ? v9fs_write_inode+0x60/0x60 [ 1198.526838] legacy_get_tree+0x105/0x220 [ 1198.527757] vfs_get_tree+0x8e/0x300 [ 1198.528592] path_mount+0x1490/0x21e0 [ 1198.529452] ? strncpy_from_user+0x9e/0x470 [ 1198.530418] ? finish_automount+0xa90/0xa90 [ 1198.531399] ? getname_flags.part.0+0x1dd/0x4f0 [ 1198.532441] ? _copy_from_user+0xfb/0x1b0 [ 1198.533374] __x64_sys_mount+0x282/0x300 [ 1198.534280] ? copy_mnt_ns+0xa00/0xa00 [ 1198.535171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1198.536333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1198.537498] do_syscall_64+0x33/0x40 [ 1198.538329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1198.539477] RIP: 0033:0x7f8718ffcb19 [ 1198.540314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1198.544439] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1198.546136] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1198.547748] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1198.549342] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1198.550942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.552526] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1198.554139] CPU: 1 PID: 8106 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1198.555005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1198.555933] Call Trace: [ 1198.556230] dump_stack+0x107/0x167 [ 1198.556635] should_fail.cold+0x5/0xa [ 1198.557058] ? create_object.isra.0+0x3a/0xa30 [ 1198.557569] should_failslab+0x5/0x20 [ 1198.557991] kmem_cache_alloc+0x5b/0x310 [ 1198.558446] create_object.isra.0+0x3a/0xa30 [ 1198.558951] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.559516] kmem_cache_alloc_node+0x169/0x330 [ 1198.560023] __kmem_cache_create+0x10e/0x520 [ 1198.560518] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1198.561075] p9_client_create+0xc6a/0x1230 [ 1198.561551] ? p9_client_flush+0x430/0x430 [ 1198.562020] ? trace_hardirqs_on+0x5b/0x180 [ 1198.562500] ? lockdep_init_map_type+0x2c7/0x780 [ 1198.563050] ? __raw_spin_lock_init+0x36/0x110 [ 1198.563560] v9fs_session_init+0x1dd/0x1680 [ 1198.564040] ? lock_release+0x680/0x680 [ 1198.564491] ? kmem_cache_alloc_trace+0x151/0x320 [ 1198.565023] ? v9fs_show_options+0x690/0x690 [ 1198.565517] ? trace_hardirqs_on+0x5b/0x180 [ 1198.565996] ? kasan_unpoison_shadow+0x33/0x50 [ 1198.566506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.567092] v9fs_mount+0x79/0x8f0 [ 1198.567496] ? v9fs_write_inode+0x60/0x60 [ 1198.567957] legacy_get_tree+0x105/0x220 [ 1198.568409] vfs_get_tree+0x8e/0x300 [ 1198.568821] path_mount+0x1490/0x21e0 [ 1198.569244] ? strncpy_from_user+0x9e/0x470 [ 1198.569724] ? finish_automount+0xa90/0xa90 [ 1198.570205] ? getname_flags.part.0+0x1dd/0x4f0 [ 1198.570717] ? _copy_from_user+0xfb/0x1b0 [ 1198.571206] __x64_sys_mount+0x282/0x300 [ 1198.571660] ? copy_mnt_ns+0xa00/0xa00 [ 1198.572094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1198.572681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1198.573257] do_syscall_64+0x33/0x40 [ 1198.573671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1198.574238] RIP: 0033:0x7f2ae689eb19 [ 1198.574653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1198.576711] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1198.577561] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1198.578352] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1198.579158] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1198.579950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.580753] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:28:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 24) 03:28:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 56) [ 1213.957348] FAULT_INJECTION: forcing a failure. [ 1213.957348] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.958922] CPU: 0 PID: 8139 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1213.959817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1213.960894] Call Trace: [ 1213.961245] dump_stack+0x107/0x167 [ 1213.961718] should_fail.cold+0x5/0xa [ 1213.962224] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 1213.962901] should_failslab+0x5/0x20 [ 1213.963404] kmem_cache_alloc+0x5b/0x310 [ 1213.963922] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1213.964587] p9_client_rpc+0x220/0x1370 [ 1213.965105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.965793] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1213.966489] ? pipe_poll+0x21b/0x800 [ 1213.966980] ? p9_fd_close+0x4a0/0x4a0 [ 1213.967471] ? wait_for_partner+0x3c0/0x3c0 [ 1213.968031] ? p9_fd_poll+0x1e0/0x2c0 [ 1213.968528] ? p9_fd_create+0x357/0x4a0 [ 1213.969039] ? p9_conn_create+0x510/0x510 [ 1213.969556] ? p9_client_create+0x798/0x1230 [ 1213.970124] ? kfree+0xd7/0x340 [ 1213.970549] ? do_raw_spin_unlock+0x4f/0x220 [ 1213.971130] p9_client_create+0xa76/0x1230 [ 1213.971679] ? p9_client_flush+0x430/0x430 [ 1213.972227] ? trace_hardirqs_on+0x5b/0x180 [ 1213.972784] ? lockdep_init_map_type+0x2c7/0x780 [ 1213.973394] ? __raw_spin_lock_init+0x36/0x110 [ 1213.973990] v9fs_session_init+0x1dd/0x1680 [ 1213.974319] FAULT_INJECTION: forcing a failure. [ 1213.974319] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.974556] ? lock_release+0x680/0x680 [ 1213.977524] ? kmem_cache_alloc_trace+0x151/0x320 [ 1213.978147] ? v9fs_show_options+0x690/0x690 [ 1213.978713] ? trace_hardirqs_on+0x5b/0x180 [ 1213.979273] ? kasan_unpoison_shadow+0x33/0x50 [ 1213.979858] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1213.980510] v9fs_mount+0x79/0x8f0 [ 1213.980968] ? v9fs_write_inode+0x60/0x60 [ 1213.981500] legacy_get_tree+0x105/0x220 [ 1213.982022] vfs_get_tree+0x8e/0x300 [ 1213.982501] path_mount+0x1490/0x21e0 [ 1213.983006] ? strncpy_from_user+0x9e/0x470 [ 1213.983560] ? finish_automount+0xa90/0xa90 [ 1213.984116] ? getname_flags.part.0+0x1dd/0x4f0 [ 1213.984713] ? _copy_from_user+0xfb/0x1b0 [ 1213.985250] __x64_sys_mount+0x282/0x300 [ 1213.985770] ? copy_mnt_ns+0xa00/0xa00 [ 1213.986272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1213.986959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1213.987621] do_syscall_64+0x33/0x40 [ 1213.988102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1213.988760] RIP: 0033:0x7fd388488b19 [ 1213.989242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1213.991608] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1213.992579] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1213.993464] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1213.994375] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1213.995294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1213.996206] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1213.997115] CPU: 1 PID: 8140 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1213.998631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1214.000444] Call Trace: [ 1214.001024] dump_stack+0x107/0x167 [ 1214.001821] should_fail.cold+0x5/0xa [ 1214.002646] should_failslab+0x5/0x20 [ 1214.003215] FAULT_INJECTION: forcing a failure. [ 1214.003215] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.003487] __kmalloc_track_caller+0x79/0x370 [ 1214.005855] ? p9_client_create+0x51e/0x1230 [ 1214.006808] kmemdup_nul+0x2d/0xa0 [ 1214.007592] p9_client_create+0x51e/0x1230 [ 1214.008513] ? p9_client_flush+0x430/0x430 [ 1214.009425] ? trace_hardirqs_on+0x5b/0x180 [ 1214.010366] ? lockdep_init_map_type+0x2c7/0x780 [ 1214.011414] ? __raw_spin_lock_init+0x36/0x110 [ 1214.012407] v9fs_session_init+0x1dd/0x1680 [ 1214.013338] ? lock_release+0x680/0x680 [ 1214.014213] ? kmem_cache_alloc_trace+0x151/0x320 [ 1214.015271] ? v9fs_show_options+0x690/0x690 [ 1214.016235] ? trace_hardirqs_on+0x5b/0x180 [ 1214.017175] ? kasan_unpoison_shadow+0x33/0x50 [ 1214.018167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.019284] v9fs_mount+0x79/0x8f0 [ 1214.020058] ? v9fs_write_inode+0x60/0x60 [ 1214.020949] legacy_get_tree+0x105/0x220 [ 1214.021827] vfs_get_tree+0x8e/0x300 [ 1214.022637] path_mount+0x1490/0x21e0 [ 1214.023476] ? strncpy_from_user+0x9e/0x470 [ 1214.024403] ? finish_automount+0xa90/0xa90 [ 1214.025339] ? getname_flags.part.0+0x1dd/0x4f0 [ 1214.026349] ? _copy_from_user+0xfb/0x1b0 [ 1214.027254] __x64_sys_mount+0x282/0x300 [ 1214.028139] ? copy_mnt_ns+0xa00/0xa00 [ 1214.028989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.030129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.031252] do_syscall_64+0x33/0x40 [ 1214.032053] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.033167] RIP: 0033:0x7f8718ffcb19 [ 1214.033983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.037996] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1214.039648] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1214.041203] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1214.042739] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1214.044284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.045842] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1214.047435] CPU: 0 PID: 8147 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1214.048323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1214.049394] Call Trace: [ 1214.049734] dump_stack+0x107/0x167 [ 1214.050203] should_fail.cold+0x5/0xa [ 1214.050688] should_failslab+0x5/0x20 [ 1214.051189] __kmalloc_track_caller+0x79/0x370 [ 1214.051779] ? p9_client_create+0x41d/0x1230 [ 1214.052313] kstrdup+0x36/0x70 [ 1214.052731] p9_client_create+0x41d/0x1230 [ 1214.053277] ? lock_downgrade+0x6d0/0x6d0 [ 1214.053815] ? p9_client_flush+0x430/0x430 [ 1214.054359] ? trace_hardirqs_on+0x5b/0x180 [ 1214.054920] ? lockdep_init_map_type+0x2c7/0x780 [ 1214.055537] ? __raw_spin_lock_init+0x36/0x110 [ 1214.056127] v9fs_session_init+0x1dd/0x1680 [ 1214.056698] ? lock_release+0x680/0x680 [ 1214.057193] FAULT_INJECTION: forcing a failure. [ 1214.057193] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.058562] ? kmem_cache_alloc_trace+0x151/0x320 [ 1214.059190] ? v9fs_show_options+0x690/0x690 [ 1214.059725] ? trace_hardirqs_on+0x5b/0x180 [ 1214.060286] ? kasan_unpoison_shadow+0x33/0x50 [ 1214.060872] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.061523] v9fs_mount+0x79/0x8f0 [ 1214.061985] ? v9fs_write_inode+0x60/0x60 [ 1214.062518] legacy_get_tree+0x105/0x220 [ 1214.063052] vfs_get_tree+0x8e/0x300 [ 1214.063534] path_mount+0x1490/0x21e0 [ 1214.064029] ? strncpy_from_user+0x9e/0x470 [ 1214.064585] ? finish_automount+0xa90/0xa90 [ 1214.065141] ? getname_flags.part.0+0x1dd/0x4f0 [ 1214.065741] ? _copy_from_user+0xfb/0x1b0 [ 1214.066283] __x64_sys_mount+0x282/0x300 [ 1214.066811] ? copy_mnt_ns+0xa00/0xa00 [ 1214.067323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.068007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.068679] do_syscall_64+0x33/0x40 [ 1214.069165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.069832] RIP: 0033:0x7f52d4da5b19 [ 1214.070316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.072690] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1214.073602] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1214.074519] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1214.075443] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1214.076358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.077266] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1214.078210] CPU: 1 PID: 8138 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1214.079747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1214.081469] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value [ 1214.081505] Call Trace: [ 1214.083148] dump_stack+0x107/0x167 03:28:32 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:28:32 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:28:32 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 22) 03:28:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 34) [ 1214.083921] should_fail.cold+0x5/0xa [ 1214.085259] ? create_object.isra.0+0x3a/0xa30 [ 1214.086238] should_failslab+0x5/0x20 [ 1214.087049] kmem_cache_alloc+0x5b/0x310 [ 1214.087909] create_object.isra.0+0x3a/0xa30 [ 1214.088834] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.089906] kmem_cache_alloc_node+0x169/0x330 [ 1214.090868] __kmem_cache_create+0x10e/0x520 [ 1214.091815] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1214.092879] p9_client_create+0xc6a/0x1230 [ 1214.093778] ? p9_client_flush+0x430/0x430 [ 1214.094666] ? trace_hardirqs_on+0x5b/0x180 [ 1214.095580] ? lockdep_init_map_type+0x2c7/0x780 [ 1214.096584] ? __raw_spin_lock_init+0x36/0x110 [ 1214.097548] v9fs_session_init+0x1dd/0x1680 [ 1214.098464] ? lock_release+0x680/0x680 [ 1214.099313] ? kmem_cache_alloc_trace+0x151/0x320 [ 1214.100330] ? v9fs_show_options+0x690/0x690 [ 1214.101265] ? trace_hardirqs_on+0x5b/0x180 [ 1214.102188] ? kasan_unpoison_shadow+0x33/0x50 [ 1214.103162] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.104243] v9fs_mount+0x79/0x8f0 [ 1214.104991] ? v9fs_write_inode+0x60/0x60 [ 1214.105860] legacy_get_tree+0x105/0x220 [ 1214.106725] vfs_get_tree+0x8e/0x300 [ 1214.107539] path_mount+0x1490/0x21e0 [ 1214.108352] ? strncpy_from_user+0x9e/0x470 [ 1214.109263] ? finish_automount+0xa90/0xa90 [ 1214.110172] ? getname_flags.part.0+0x1dd/0x4f0 [ 1214.111161] ? _copy_from_user+0xfb/0x1b0 [ 1214.112041] __x64_sys_mount+0x282/0x300 [ 1214.112896] ? copy_mnt_ns+0xa00/0xa00 [ 1214.113719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.114824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.115921] do_syscall_64+0x33/0x40 [ 1214.116705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.117781] RIP: 0033:0x7f2ae689eb19 [ 1214.118567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.122555] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1214.124161] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1214.125646] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1214.127139] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1214.128634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.130120] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:28:32 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 23) 03:28:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 35) [ 1214.168417] FAULT_INJECTION: forcing a failure. [ 1214.168417] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.170829] CPU: 1 PID: 8154 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1214.172272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1214.174023] Call Trace: [ 1214.174582] dump_stack+0x107/0x167 [ 1214.175358] should_fail.cold+0x5/0xa [ 1214.176164] ? create_object.isra.0+0x3a/0xa30 [ 1214.177120] should_failslab+0x5/0x20 [ 1214.177922] kmem_cache_alloc+0x5b/0x310 03:28:33 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1214.178787] create_object.isra.0+0x3a/0xa30 [ 1214.179881] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.180959] kmem_cache_alloc+0x159/0x310 [ 1214.181845] p9_client_prepare_req.part.0+0x3a/0xac0 [ 1214.182928] p9_client_rpc+0x220/0x1370 [ 1214.183786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.184896] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1214.186027] ? pipe_poll+0x21b/0x800 [ 1214.186824] ? p9_fd_close+0x4a0/0x4a0 [ 1214.187659] ? wait_for_partner+0x3c0/0x3c0 [ 1214.188569] ? p9_fd_poll+0x1e0/0x2c0 [ 1214.189376] ? p9_fd_create+0x357/0x4a0 [ 1214.190215] ? p9_conn_create+0x510/0x510 [ 1214.191104] ? p9_client_create+0x798/0x1230 [ 1214.192030] ? kfree+0xd7/0x340 [ 1214.192724] ? do_raw_spin_unlock+0x4f/0x220 [ 1214.193663] p9_client_create+0xa76/0x1230 [ 1214.194560] ? p9_client_flush+0x430/0x430 [ 1214.195466] ? trace_hardirqs_on+0x5b/0x180 [ 1214.196376] ? lockdep_init_map_type+0x2c7/0x780 [ 1214.197381] ? __raw_spin_lock_init+0x36/0x110 [ 1214.198352] v9fs_session_init+0x1dd/0x1680 [ 1214.199052] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value [ 1214.199274] ? lock_release+0x680/0x680 [ 1214.199306] ? kmem_cache_alloc_trace+0x151/0x320 [ 1214.202155] ? v9fs_show_options+0x690/0x690 [ 1214.203108] ? trace_hardirqs_on+0x5b/0x180 [ 1214.204033] ? kasan_unpoison_shadow+0x33/0x50 [ 1214.205001] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.206082] v9fs_mount+0x79/0x8f0 [ 1214.206841] ? v9fs_write_inode+0x60/0x60 [ 1214.207732] legacy_get_tree+0x105/0x220 [ 1214.208589] vfs_get_tree+0x8e/0x300 [ 1214.209382] path_mount+0x1490/0x21e0 [ 1214.210195] ? strncpy_from_user+0x9e/0x470 [ 1214.211123] ? finish_automount+0xa90/0xa90 [ 1214.212053] ? getname_flags.part.0+0x1dd/0x4f0 [ 1214.213039] ? _copy_from_user+0xfb/0x1b0 [ 1214.213918] __x64_sys_mount+0x282/0x300 [ 1214.214776] ? copy_mnt_ns+0xa00/0xa00 [ 1214.215609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.216733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.217821] do_syscall_64+0x33/0x40 [ 1214.218608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.219694] RIP: 0033:0x7fd388488b19 [ 1214.220487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.224386] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1214.225989] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1214.227505] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 03:28:33 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1214.229007] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1214.230683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.232195] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:28:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1214.235426] FAULT_INJECTION: forcing a failure. [ 1214.235426] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.238124] CPU: 1 PID: 8155 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1214.239583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1214.241328] Call Trace: [ 1214.241884] dump_stack+0x107/0x167 [ 1214.242652] should_fail.cold+0x5/0xa [ 1214.243466] should_failslab+0x5/0x20 [ 1214.244272] __kmalloc_track_caller+0x79/0x370 [ 1214.245234] ? p9_client_create+0x41d/0x1230 [ 1214.246164] kstrdup+0x36/0x70 [ 1214.246840] p9_client_create+0x41d/0x1230 03:28:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1214.247736] ? lock_downgrade+0x6d0/0x6d0 [ 1214.248707] ? p9_client_flush+0x430/0x430 [ 1214.249597] ? trace_hardirqs_on+0x5b/0x180 [ 1214.250511] ? lockdep_init_map_type+0x2c7/0x780 [ 1214.251524] ? __raw_spin_lock_init+0x36/0x110 [ 1214.252494] v9fs_session_init+0x1dd/0x1680 [ 1214.253400] ? lock_release+0x680/0x680 [ 1214.254254] ? kmem_cache_alloc_trace+0x151/0x320 [ 1214.255284] ? v9fs_show_options+0x690/0x690 [ 1214.256221] ? trace_hardirqs_on+0x5b/0x180 [ 1214.257129] ? kasan_unpoison_shadow+0x33/0x50 [ 1214.258089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.259165] v9fs_mount+0x79/0x8f0 [ 1214.259916] ? v9fs_write_inode+0x60/0x60 [ 1214.260788] legacy_get_tree+0x105/0x220 [ 1214.261644] vfs_get_tree+0x8e/0x300 [ 1214.262427] path_mount+0x1490/0x21e0 [ 1214.263254] ? strncpy_from_user+0x9e/0x470 [ 1214.264163] ? finish_automount+0xa90/0xa90 [ 1214.265071] ? getname_flags.part.0+0x1dd/0x4f0 [ 1214.266051] ? _copy_from_user+0xfb/0x1b0 [ 1214.266935] __x64_sys_mount+0x282/0x300 [ 1214.267803] ? copy_mnt_ns+0xa00/0xa00 [ 1214.268626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.269739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.270826] do_syscall_64+0x33/0x40 [ 1214.271626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.272712] RIP: 0033:0x7f52d4da5b19 [ 1214.273502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.277394] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1214.279013] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1214.280515] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1214.282014] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1214.283540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.285042] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 03:28:33 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 24) 03:28:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 25) [ 1214.367144] FAULT_INJECTION: forcing a failure. [ 1214.367144] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.369591] CPU: 0 PID: 8171 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1214.369720] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value [ 1214.371048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1214.371055] Call Trace: [ 1214.371080] dump_stack+0x107/0x167 [ 1214.371106] should_fail.cold+0x5/0xa [ 1214.376861] should_failslab+0x5/0x20 [ 1214.377663] __kmalloc_track_caller+0x79/0x370 [ 1214.378632] ? p9_client_create+0x41d/0x1230 [ 1214.379574] kstrdup+0x36/0x70 [ 1214.380256] p9_client_create+0x41d/0x1230 [ 1214.381154] ? lock_downgrade+0x6d0/0x6d0 [ 1214.382034] ? p9_client_flush+0x430/0x430 [ 1214.382927] ? trace_hardirqs_on+0x5b/0x180 [ 1214.383849] ? lockdep_init_map_type+0x2c7/0x780 [ 1214.384851] ? __raw_spin_lock_init+0x36/0x110 [ 1214.385815] v9fs_session_init+0x1dd/0x1680 [ 1214.386725] ? lock_release+0x680/0x680 [ 1214.387583] ? kmem_cache_alloc_trace+0x151/0x320 [ 1214.388597] ? v9fs_show_options+0x690/0x690 [ 1214.389531] ? trace_hardirqs_on+0x5b/0x180 [ 1214.390436] ? kasan_unpoison_shadow+0x33/0x50 [ 1214.391412] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.392479] v9fs_mount+0x79/0x8f0 [ 1214.393236] ? v9fs_write_inode+0x60/0x60 [ 1214.394107] legacy_get_tree+0x105/0x220 [ 1214.394972] vfs_get_tree+0x8e/0x300 [ 1214.395757] path_mount+0x1490/0x21e0 [ 1214.396567] ? strncpy_from_user+0x9e/0x470 [ 1214.397474] ? finish_automount+0xa90/0xa90 [ 1214.398385] ? getname_flags.part.0+0x1dd/0x4f0 [ 1214.399371] ? _copy_from_user+0xfb/0x1b0 [ 1214.400253] __x64_sys_mount+0x282/0x300 [ 1214.401106] ? copy_mnt_ns+0xa00/0xa00 [ 1214.401929] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.403079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.404175] do_syscall_64+0x33/0x40 [ 1214.404961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.406051] RIP: 0033:0x7f52d4da5b19 [ 1214.406839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.410729] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1214.412341] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1214.413860] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1214.415373] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1214.416889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.418394] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1214.441892] FAULT_INJECTION: forcing a failure. [ 1214.441892] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.444360] CPU: 1 PID: 8173 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1214.445807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1214.447557] Call Trace: [ 1214.448120] dump_stack+0x107/0x167 [ 1214.448888] should_fail.cold+0x5/0xa [ 1214.449693] ? create_object.isra.0+0x3a/0xa30 [ 1214.450652] should_failslab+0x5/0x20 [ 1214.451463] kmem_cache_alloc+0x5b/0x310 [ 1214.452319] create_object.isra.0+0x3a/0xa30 [ 1214.453239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.454307] __kmalloc_track_caller+0x177/0x370 [ 1214.455297] ? p9_client_create+0x51e/0x1230 [ 1214.456226] kmemdup_nul+0x2d/0xa0 [ 1214.456974] p9_client_create+0x51e/0x1230 [ 1214.457872] ? p9_client_flush+0x430/0x430 [ 1214.458764] ? trace_hardirqs_on+0x5b/0x180 [ 1214.459690] ? lockdep_init_map_type+0x2c7/0x780 [ 1214.460684] ? __raw_spin_lock_init+0x36/0x110 [ 1214.461653] v9fs_session_init+0x1dd/0x1680 [ 1214.462569] ? lock_release+0x680/0x680 [ 1214.463423] ? kmem_cache_alloc_trace+0x151/0x320 [ 1214.464445] ? v9fs_show_options+0x690/0x690 [ 1214.465378] ? trace_hardirqs_on+0x5b/0x180 [ 1214.466291] ? kasan_unpoison_shadow+0x33/0x50 [ 1214.467280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1214.468347] v9fs_mount+0x79/0x8f0 [ 1214.469094] ? v9fs_write_inode+0x60/0x60 [ 1214.469967] legacy_get_tree+0x105/0x220 [ 1214.470826] vfs_get_tree+0x8e/0x300 [ 1214.471631] path_mount+0x1490/0x21e0 [ 1214.472437] ? strncpy_from_user+0x9e/0x470 [ 1214.473352] ? finish_automount+0xa90/0xa90 [ 1214.474266] ? getname_flags.part.0+0x1dd/0x4f0 [ 1214.475262] ? _copy_from_user+0xfb/0x1b0 [ 1214.476140] __x64_sys_mount+0x282/0x300 [ 1214.477002] ? copy_mnt_ns+0xa00/0xa00 [ 1214.477826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1214.478933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1214.480037] do_syscall_64+0x33/0x40 [ 1214.480826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1214.481911] RIP: 0033:0x7f8718ffcb19 [ 1214.482700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1214.486602] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1214.488230] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1214.489733] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1214.491245] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1214.492753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.494254] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:28:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 26) 03:28:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 57) 03:28:48 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:28:48 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:28:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1c02, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:48 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:48 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 36) 03:28:48 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 25) [ 1230.000540] FAULT_INJECTION: forcing a failure. [ 1230.000540] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.001923] CPU: 1 PID: 8191 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1230.002727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.003715] Call Trace: [ 1230.004039] dump_stack+0x107/0x167 [ 1230.004471] should_fail.cold+0x5/0xa [ 1230.004918] should_failslab+0x5/0x20 [ 1230.005365] __kmalloc_track_caller+0x79/0x370 [ 1230.005895] ? parse_opts.part.0+0x8e/0x340 [ 1230.005944] FAULT_INJECTION: forcing a failure. [ 1230.005944] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.006408] kstrdup+0x36/0x70 [ 1230.009280] parse_opts.part.0+0x8e/0x340 [ 1230.009763] ? p9_fd_show_options+0x1c0/0x1c0 [ 1230.010293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.010903] ? quarantine_put+0x8b/0x1a0 [ 1230.011383] ? trace_hardirqs_on+0x5b/0x180 [ 1230.011886] ? kfree+0xd7/0x340 [ 1230.012274] p9_fd_create+0x98/0x4a0 [ 1230.012707] ? p9_conn_create+0x510/0x510 [ 1230.013192] ? p9_client_create+0x798/0x1230 [ 1230.013705] ? kfree+0xd7/0x340 [ 1230.014089] ? do_raw_spin_unlock+0x4f/0x220 [ 1230.014606] p9_client_create+0x7ff/0x1230 [ 1230.015105] ? p9_client_flush+0x430/0x430 [ 1230.015609] ? trace_hardirqs_on+0x5b/0x180 [ 1230.016114] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.016668] ? __raw_spin_lock_init+0x36/0x110 [ 1230.017207] v9fs_session_init+0x1dd/0x1680 [ 1230.017710] ? lock_release+0x680/0x680 [ 1230.018181] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.018743] ? v9fs_show_options+0x690/0x690 [ 1230.019270] ? trace_hardirqs_on+0x5b/0x180 [ 1230.019775] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.020306] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.020898] v9fs_mount+0x79/0x8f0 [ 1230.021313] ? v9fs_write_inode+0x60/0x60 [ 1230.021795] legacy_get_tree+0x105/0x220 [ 1230.022273] vfs_get_tree+0x8e/0x300 [ 1230.022707] path_mount+0x1490/0x21e0 [ 1230.023167] ? strncpy_from_user+0x9e/0x470 [ 1230.023675] ? finish_automount+0xa90/0xa90 [ 1230.024180] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.024724] ? _copy_from_user+0xfb/0x1b0 [ 1230.025219] __x64_sys_mount+0x282/0x300 [ 1230.025707] ? copy_mnt_ns+0xa00/0xa00 [ 1230.026180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.026808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.027432] do_syscall_64+0x33/0x40 [ 1230.027884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.028497] RIP: 0033:0x7f8718ffcb19 [ 1230.028943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.031140] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.032045] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1230.032900] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.033745] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.034602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.035465] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1230.036347] CPU: 0 PID: 8184 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1230.037098] 9pnet: Insufficient options for proto=fd [ 1230.037931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.037940] Call Trace: [ 1230.037970] dump_stack+0x107/0x167 [ 1230.037993] should_fail.cold+0x5/0xa [ 1230.038018] should_failslab+0x5/0x20 [ 1230.038039] __kmalloc_track_caller+0x79/0x370 [ 1230.038060] ? kstrdup_const+0x53/0x80 [ 1230.045438] kstrdup+0x36/0x70 [ 1230.046157] kstrdup_const+0x53/0x80 [ 1230.046990] kvasprintf_const+0x10c/0x1a0 [ 1230.047931] kobject_set_name_vargs+0x56/0x150 [ 1230.048960] kobject_init_and_add+0xc9/0x160 [ 1230.049942] ? kobject_create_and_add+0xb0/0xb0 [ 1230.050985] ? wait_for_completion_io+0x270/0x270 [ 1230.052085] ? kernfs_name_hash+0xe7/0x110 [ 1230.052812] FAULT_INJECTION: forcing a failure. [ 1230.052812] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.053033] ? kernfs_find_ns+0x256/0x380 [ 1230.053065] sysfs_slab_add+0x172/0x200 [ 1230.053086] __kmem_cache_create+0x3db/0x520 [ 1230.057134] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1230.058264] p9_client_create+0xc6a/0x1230 [ 1230.059231] ? p9_client_flush+0x430/0x430 [ 1230.060179] ? trace_hardirqs_on+0x5b/0x180 [ 1230.061155] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.062221] ? __raw_spin_lock_init+0x36/0x110 [ 1230.063257] v9fs_session_init+0x1dd/0x1680 [ 1230.064222] ? lock_release+0x680/0x680 [ 1230.065120] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.066199] ? v9fs_show_options+0x690/0x690 [ 1230.067215] ? trace_hardirqs_on+0x5b/0x180 [ 1230.068181] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.069213] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.070351] v9fs_mount+0x79/0x8f0 [ 1230.071156] ? v9fs_write_inode+0x60/0x60 [ 1230.072085] legacy_get_tree+0x105/0x220 [ 1230.073005] vfs_get_tree+0x8e/0x300 [ 1230.073841] path_mount+0x1490/0x21e0 [ 1230.074703] ? strncpy_from_user+0x9e/0x470 [ 1230.075704] ? finish_automount+0xa90/0xa90 [ 1230.076673] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.077711] ? _copy_from_user+0xfb/0x1b0 [ 1230.078653] __x64_sys_mount+0x282/0x300 [ 1230.079578] ? copy_mnt_ns+0xa00/0xa00 [ 1230.080463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.081653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.082820] do_syscall_64+0x33/0x40 [ 1230.083676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.084827] RIP: 0033:0x7f2ae689eb19 [ 1230.085682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.089837] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.091561] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1230.093166] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.094778] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.096395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.097999] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1230.099643] CPU: 1 PID: 8197 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1230.099728] kobject: can not set name properly! [ 1230.100467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.100474] Call Trace: [ 1230.100494] dump_stack+0x107/0x167 [ 1230.100512] should_fail.cold+0x5/0xa [ 1230.101688] kmem_cache_create(9p-fcall-cache-284) failed with error -12 [ 1230.102518] ? create_object.isra.0+0x3a/0xa30 [ 1230.102531] should_failslab+0x5/0x20 [ 1230.102551] kmem_cache_alloc+0x5b/0x310 [ 1230.106162] create_object.isra.0+0x3a/0xa30 [ 1230.106668] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.107270] __kmalloc_track_caller+0x177/0x370 [ 1230.107813] ? p9_client_create+0x51e/0x1230 [ 1230.108327] kmemdup_nul+0x2d/0xa0 [ 1230.108740] p9_client_create+0x51e/0x1230 [ 1230.109235] ? p9_client_flush+0x430/0x430 [ 1230.109723] ? trace_hardirqs_on+0x5b/0x180 [ 1230.110223] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.110773] ? __raw_spin_lock_init+0x36/0x110 [ 1230.111315] v9fs_session_init+0x1dd/0x1680 [ 1230.111818] ? lock_release+0x680/0x680 [ 1230.112283] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.112839] ? v9fs_show_options+0x690/0x690 [ 1230.113356] ? trace_hardirqs_on+0x5b/0x180 [ 1230.113853] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.114381] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.114966] v9fs_mount+0x79/0x8f0 [ 1230.115389] ? v9fs_write_inode+0x60/0x60 [ 1230.115874] legacy_get_tree+0x105/0x220 [ 1230.116344] vfs_get_tree+0x8e/0x300 [ 1230.116778] path_mount+0x1490/0x21e0 [ 1230.117223] ? strncpy_from_user+0x9e/0x470 [ 1230.117719] ? finish_automount+0xa90/0xa90 [ 1230.118218] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.118754] ? _copy_from_user+0xfb/0x1b0 [ 1230.119247] __x64_sys_mount+0x282/0x300 [ 1230.119716] ? copy_mnt_ns+0xa00/0xa00 [ 1230.120170] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.120774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.121369] do_syscall_64+0x33/0x40 [ 1230.121800] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.122388] RIP: 0033:0x7f52d4da5b19 [ 1230.122817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.124916] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.125781] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1230.126592] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.127420] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.128232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.129040] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1230.129895] CPU: 0 PID: 8184 Comm: syz-executor.5 Not tainted 5.10.244 #1 03:28:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 27) [ 1230.131457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.133506] Call Trace: [ 1230.134080] dump_stack+0x107/0x167 [ 1230.134871] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1230.136070] p9_client_create+0xc6a/0x1230 [ 1230.137038] ? p9_client_flush+0x430/0x430 [ 1230.137985] ? trace_hardirqs_on+0x5b/0x180 [ 1230.138919] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.140017] ? __raw_spin_lock_init+0x36/0x110 [ 1230.141036] v9fs_session_init+0x1dd/0x1680 [ 1230.141967] ? lock_release+0x680/0x680 [ 1230.142639] FAULT_INJECTION: forcing a failure. [ 1230.142639] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.142876] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.142898] ? v9fs_show_options+0x690/0x690 [ 1230.146114] ? trace_hardirqs_on+0x5b/0x180 [ 1230.147091] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.148130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.149275] v9fs_mount+0x79/0x8f0 [ 1230.150060] ? v9fs_write_inode+0x60/0x60 [ 1230.150946] legacy_get_tree+0x105/0x220 [ 1230.151874] vfs_get_tree+0x8e/0x300 [ 1230.152716] path_mount+0x1490/0x21e0 [ 1230.153520] ? strncpy_from_user+0x9e/0x470 [ 1230.154478] ? finish_automount+0xa90/0xa90 [ 1230.155457] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.156507] ? _copy_from_user+0xfb/0x1b0 [ 1230.157450] __x64_sys_mount+0x282/0x300 [ 1230.158328] ? copy_mnt_ns+0xa00/0xa00 [ 1230.159191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.160374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.161541] do_syscall_64+0x33/0x40 [ 1230.162343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.163488] RIP: 0033:0x7f2ae689eb19 [ 1230.164339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.168471] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.170139] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1230.171775] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.173367] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.174961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.176595] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1230.178172] CPU: 1 PID: 8199 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1230.178951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.179855] Call Trace: [ 1230.180143] dump_stack+0x107/0x167 [ 1230.180538] should_fail.cold+0x5/0xa [ 1230.180951] ? create_object.isra.0+0x3a/0xa30 [ 1230.181509] should_failslab+0x5/0x20 [ 1230.181921] kmem_cache_alloc+0x5b/0x310 [ 1230.182359] ? legacy_get_tree+0x105/0x220 [ 1230.182819] create_object.isra.0+0x3a/0xa30 [ 1230.183304] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.183856] __kmalloc_track_caller+0x177/0x370 [ 1230.184357] ? parse_opts.part.0+0x8e/0x340 [ 1230.184826] kstrdup+0x36/0x70 [ 1230.185176] parse_opts.part.0+0x8e/0x340 [ 1230.185626] ? p9_fd_show_options+0x1c0/0x1c0 [ 1230.186124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.186706] ? quarantine_put+0x8b/0x1a0 [ 1230.187165] ? trace_hardirqs_on+0x5b/0x180 [ 1230.187648] ? kfree+0xd7/0x340 [ 1230.188027] p9_fd_create+0x98/0x4a0 [ 1230.188445] ? p9_conn_create+0x510/0x510 [ 1230.188905] ? p9_client_create+0x798/0x1230 [ 1230.189377] ? kfree+0xd7/0x340 [ 1230.189729] ? do_raw_spin_unlock+0x4f/0x220 [ 1230.190211] p9_client_create+0x7ff/0x1230 [ 1230.190671] ? p9_client_flush+0x430/0x430 [ 1230.191136] ? trace_hardirqs_on+0x5b/0x180 [ 1230.191601] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.192114] ? __raw_spin_lock_init+0x36/0x110 [ 1230.192609] v9fs_session_init+0x1dd/0x1680 [ 1230.193080] ? lock_release+0x680/0x680 [ 1230.193513] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.194033] ? v9fs_show_options+0x690/0x690 [ 1230.194512] ? trace_hardirqs_on+0x5b/0x180 [ 1230.194978] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.195474] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.196021] v9fs_mount+0x79/0x8f0 [ 1230.196420] ? v9fs_write_inode+0x60/0x60 [ 1230.196866] legacy_get_tree+0x105/0x220 [ 1230.197304] vfs_get_tree+0x8e/0x300 [ 1230.197703] path_mount+0x1490/0x21e0 [ 1230.198118] ? strncpy_from_user+0x9e/0x470 [ 1230.198581] ? finish_automount+0xa90/0xa90 [ 1230.199045] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.199553] ? _copy_from_user+0xfb/0x1b0 [ 1230.200004] __x64_sys_mount+0x282/0x300 [ 1230.200440] ? copy_mnt_ns+0xa00/0xa00 [ 1230.200860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.201424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.201980] do_syscall_64+0x33/0x40 [ 1230.202380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.202930] RIP: 0033:0x7f8718ffcb19 [ 1230.203340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.205265] FAULT_INJECTION: forcing a failure. [ 1230.205265] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.205311] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.208730] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1230.209543] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.210359] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.211182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.212000] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1230.212843] CPU: 0 PID: 8201 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1230.214466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.216357] Call Trace: [ 1230.216989] dump_stack+0x107/0x167 [ 1230.217854] should_fail.cold+0x5/0xa [ 1230.218669] ? p9_fcall_init+0x97/0x290 [ 1230.219613] should_failslab+0x5/0x20 [ 1230.220509] __kmalloc+0x72/0x390 [ 1230.221336] p9_fcall_init+0x97/0x290 [ 1230.222218] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1230.223383] p9_client_rpc+0x220/0x1370 [ 1230.224337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.225589] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1230.226757] ? pipe_poll+0x21b/0x800 [ 1230.227654] ? p9_fd_close+0x4a0/0x4a0 [ 1230.228579] ? wait_for_partner+0x3c0/0x3c0 [ 1230.229599] ? p9_fd_poll+0x1e0/0x2c0 [ 1230.230444] ? p9_fd_create+0x357/0x4a0 [ 1230.231391] ? p9_conn_create+0x510/0x510 [ 1230.232424] ? p9_client_create+0x798/0x1230 [ 1230.233469] ? kfree+0xd7/0x340 [ 1230.234214] ? do_raw_spin_unlock+0x4f/0x220 [ 1230.235208] p9_client_create+0xa76/0x1230 [ 1230.236222] ? p9_client_flush+0x430/0x430 [ 1230.237225] ? trace_hardirqs_on+0x5b/0x180 [ 1230.238218] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.239303] ? __raw_spin_lock_init+0x36/0x110 [ 1230.240405] v9fs_session_init+0x1dd/0x1680 [ 1230.241386] ? lock_release+0x680/0x680 [ 1230.242331] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.243497] ? v9fs_show_options+0x690/0x690 [ 1230.244562] ? trace_hardirqs_on+0x5b/0x180 [ 1230.245605] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.246696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.247920] v9fs_mount+0x79/0x8f0 [ 1230.248772] ? v9fs_write_inode+0x60/0x60 [ 1230.249676] legacy_get_tree+0x105/0x220 [ 1230.250637] vfs_get_tree+0x8e/0x300 [ 1230.251587] path_mount+0x1490/0x21e0 [ 1230.252516] ? strncpy_from_user+0x9e/0x470 [ 1230.253489] ? finish_automount+0xa90/0xa90 [ 1230.254484] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.255621] ? _copy_from_user+0xfb/0x1b0 [ 1230.256633] __x64_sys_mount+0x282/0x300 [ 1230.257536] ? copy_mnt_ns+0xa00/0xa00 [ 1230.258442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.259726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.260978] do_syscall_64+0x33/0x40 [ 1230.261771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.262993] RIP: 0033:0x7fd388488b19 [ 1230.263790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.267730] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.269367] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1230.270883] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.272414] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.273931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.275458] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1230.288770] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value 03:28:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1e03, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:49 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 37) [ 1230.359187] FAULT_INJECTION: forcing a failure. [ 1230.359187] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.360506] CPU: 1 PID: 8212 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1230.361299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.362267] Call Trace: [ 1230.362581] dump_stack+0x107/0x167 [ 1230.363008] should_fail.cold+0x5/0xa [ 1230.363458] ? create_object.isra.0+0x3a/0xa30 [ 1230.363991] should_failslab+0x5/0x20 [ 1230.364445] kmem_cache_alloc+0x5b/0x310 [ 1230.364929] create_object.isra.0+0x3a/0xa30 [ 1230.365446] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.366051] __kmalloc+0x16e/0x390 [ 1230.366482] p9_fcall_init+0x97/0x290 [ 1230.366946] p9_client_prepare_req.part.0+0x8c/0xac0 [ 1230.367554] p9_client_rpc+0x220/0x1370 [ 1230.368032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.368656] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1230.369280] ? pipe_poll+0x21b/0x800 [ 1230.369719] ? p9_fd_close+0x4a0/0x4a0 [ 1230.370182] ? wait_for_partner+0x3c0/0x3c0 [ 1230.370695] ? p9_fd_poll+0x1e0/0x2c0 [ 1230.371162] ? p9_fd_create+0x357/0x4a0 [ 1230.371612] ? p9_conn_create+0x510/0x510 [ 1230.372108] ? p9_client_create+0x798/0x1230 [ 1230.372632] ? kfree+0xd7/0x340 [ 1230.373018] ? do_raw_spin_unlock+0x4f/0x220 [ 1230.373537] p9_client_create+0xa76/0x1230 [ 1230.374046] ? p9_client_flush+0x430/0x430 [ 1230.374550] ? trace_hardirqs_on+0x5b/0x180 [ 1230.375070] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.375645] ? __raw_spin_lock_init+0x36/0x110 [ 1230.376200] v9fs_session_init+0x1dd/0x1680 [ 1230.376714] ? lock_release+0x680/0x680 [ 1230.377202] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.377768] ? v9fs_show_options+0x690/0x690 [ 1230.378295] ? trace_hardirqs_on+0x5b/0x180 [ 1230.378810] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.379357] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.379954] v9fs_mount+0x79/0x8f0 [ 1230.380372] ? v9fs_write_inode+0x60/0x60 [ 1230.380859] legacy_get_tree+0x105/0x220 [ 1230.381333] vfs_get_tree+0x8e/0x300 [ 1230.381775] path_mount+0x1490/0x21e0 [ 1230.382230] ? strncpy_from_user+0x9e/0x470 [ 1230.382743] ? finish_automount+0xa90/0xa90 [ 1230.383262] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.383780] ? _copy_from_user+0xfb/0x1b0 [ 1230.384278] __x64_sys_mount+0x282/0x300 [ 1230.384752] ? copy_mnt_ns+0xa00/0xa00 [ 1230.385210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.385828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.386437] do_syscall_64+0x33/0x40 [ 1230.386879] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.387450] RIP: 0033:0x7fd388488b19 [ 1230.387885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.389888] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.390783] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1230.391620] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.392447] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.393277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.394104] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:28:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:49 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:28:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 58) 03:28:49 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1230.447938] FAULT_INJECTION: forcing a failure. [ 1230.447938] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.449214] CPU: 1 PID: 8217 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1230.449988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.450926] Call Trace: [ 1230.451263] dump_stack+0x107/0x167 [ 1230.451678] should_fail.cold+0x5/0xa [ 1230.452112] ? create_object.isra.0+0x3a/0xa30 [ 1230.452630] should_failslab+0x5/0x20 [ 1230.453061] kmem_cache_alloc+0x5b/0x310 [ 1230.453520] ? lock_release+0x680/0x680 [ 1230.453975] create_object.isra.0+0x3a/0xa30 [ 1230.454472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.455050] __kmalloc_track_caller+0x177/0x370 [ 1230.455585] ? kstrdup_const+0x53/0x80 [ 1230.456030] kstrdup+0x36/0x70 [ 1230.456392] kstrdup_const+0x53/0x80 [ 1230.456817] kvasprintf_const+0x10c/0x1a0 [ 1230.457289] kobject_set_name_vargs+0x56/0x150 [ 1230.457809] kobject_init_and_add+0xc9/0x160 [ 1230.458311] ? kobject_create_and_add+0xb0/0xb0 [ 1230.458843] ? wait_for_completion_io+0x270/0x270 [ 1230.459389] ? kernfs_name_hash+0xe7/0x110 [ 1230.459873] ? kernfs_find_ns+0x256/0x380 [ 1230.460350] sysfs_slab_add+0x172/0x200 [ 1230.460799] __kmem_cache_create+0x3db/0x520 [ 1230.461305] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1230.461875] p9_client_create+0xc6a/0x1230 [ 1230.462362] ? p9_client_flush+0x430/0x430 [ 1230.462839] ? trace_hardirqs_on+0x5b/0x180 [ 1230.463337] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.463880] ? __raw_spin_lock_init+0x36/0x110 [ 1230.464405] v9fs_session_init+0x1dd/0x1680 [ 1230.464894] ? lock_release+0x680/0x680 [ 1230.465349] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.465899] ? v9fs_show_options+0x690/0x690 [ 1230.466405] ? trace_hardirqs_on+0x5b/0x180 [ 1230.466896] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.467421] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.467998] v9fs_mount+0x79/0x8f0 [ 1230.468399] ? v9fs_write_inode+0x60/0x60 [ 1230.468871] legacy_get_tree+0x105/0x220 [ 1230.469336] vfs_get_tree+0x8e/0x300 [ 1230.469758] path_mount+0x1490/0x21e0 [ 1230.470193] ? strncpy_from_user+0x9e/0x470 [ 1230.470682] ? finish_automount+0xa90/0xa90 [ 1230.471186] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.471716] ? _copy_from_user+0xfb/0x1b0 [ 1230.472192] __x64_sys_mount+0x282/0x300 [ 1230.472651] ? copy_mnt_ns+0xa00/0xa00 [ 1230.473094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.473689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.474278] do_syscall_64+0x33/0x40 [ 1230.474703] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.475296] RIP: 0033:0x7f2ae689eb19 [ 1230.475722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.477806] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.478671] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1230.479493] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.480306] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.481115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.481926] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 03:28:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:28:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 28) 03:28:49 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 26) [ 1230.534778] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value [ 1230.577685] FAULT_INJECTION: forcing a failure. [ 1230.577685] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.579088] CPU: 1 PID: 8229 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 1230.579881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.580825] Call Trace: [ 1230.581131] dump_stack+0x107/0x167 [ 1230.581548] should_fail.cold+0x5/0xa [ 1230.581982] should_failslab+0x5/0x20 [ 1230.582424] __kmalloc_track_caller+0x79/0x370 [ 1230.582952] ? match_number+0xaf/0x1d0 [ 1230.583405] kmemdup_nul+0x2d/0xa0 [ 1230.583810] match_number+0xaf/0x1d0 [ 1230.584238] ? match_u64+0x190/0x190 [ 1230.584661] ? __kmalloc_track_caller+0x2c6/0x370 [ 1230.585211] ? memcpy+0x39/0x60 [ 1230.585591] parse_opts.part.0+0x1f3/0x340 [ 1230.586074] ? p9_fd_show_options+0x1c0/0x1c0 [ 1230.586589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.587196] ? trace_hardirqs_on+0x5b/0x180 [ 1230.587683] ? kfree+0xd7/0x340 [ 1230.588061] p9_fd_create+0x98/0x4a0 [ 1230.588482] ? p9_conn_create+0x510/0x510 [ 1230.588951] ? p9_client_create+0x798/0x1230 [ 1230.589450] ? kfree+0xd7/0x340 [ 1230.589824] ? do_raw_spin_unlock+0x4f/0x220 [ 1230.590332] p9_client_create+0x7ff/0x1230 [ 1230.590815] ? p9_client_flush+0x430/0x430 [ 1230.591305] ? trace_hardirqs_on+0x5b/0x180 [ 1230.591797] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.592339] ? __raw_spin_lock_init+0x36/0x110 [ 1230.592865] v9fs_session_init+0x1dd/0x1680 [ 1230.593357] ? lock_release+0x680/0x680 [ 1230.593811] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.594362] ? v9fs_show_options+0x690/0x690 [ 1230.594872] ? trace_hardirqs_on+0x5b/0x180 [ 1230.595371] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.595889] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.596469] v9fs_mount+0x79/0x8f0 [ 1230.596872] ? v9fs_write_inode+0x60/0x60 [ 1230.597345] legacy_get_tree+0x105/0x220 [ 1230.597809] vfs_get_tree+0x8e/0x300 [ 1230.598233] path_mount+0x1490/0x21e0 [ 1230.598671] ? strncpy_from_user+0x9e/0x470 [ 1230.599173] ? finish_automount+0xa90/0xa90 [ 1230.599663] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.600192] ? _copy_from_user+0xfb/0x1b0 [ 1230.600671] __x64_sys_mount+0x282/0x300 [ 1230.601143] FAULT_INJECTION: forcing a failure. [ 1230.601143] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.602397] ? copy_mnt_ns+0xa00/0xa00 [ 1230.602823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.603433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.604026] do_syscall_64+0x33/0x40 [ 1230.604453] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.605038] RIP: 0033:0x7f8718ffcb19 [ 1230.605439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.607547] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.608366] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1230.609176] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.609938] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.610753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.611524] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 [ 1230.612306] CPU: 0 PID: 8231 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1230.613804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.615580] Call Trace: [ 1230.616144] dump_stack+0x107/0x167 [ 1230.616908] should_fail.cold+0x5/0xa [ 1230.617713] should_failslab+0x5/0x20 [ 1230.618521] __kmalloc_track_caller+0x79/0x370 [ 1230.619502] ? parse_opts.part.0+0x8e/0x340 [ 1230.620412] kstrdup+0x36/0x70 [ 1230.621085] parse_opts.part.0+0x8e/0x340 [ 1230.621956] ? p9_fd_show_options+0x1c0/0x1c0 [ 1230.622922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.624030] ? quarantine_put+0x8b/0x1a0 [ 1230.624880] ? trace_hardirqs_on+0x5b/0x180 [ 1230.625787] ? kfree+0xd7/0x340 [ 1230.626506] p9_fd_create+0x98/0x4a0 [ 1230.627294] ? p9_conn_create+0x510/0x510 [ 1230.628163] ? p9_client_create+0x798/0x1230 [ 1230.629084] ? kfree+0xd7/0x340 [ 1230.629776] ? do_raw_spin_unlock+0x4f/0x220 [ 1230.630707] p9_client_create+0x7ff/0x1230 [ 1230.631616] ? p9_client_flush+0x430/0x430 [ 1230.632510] ? trace_hardirqs_on+0x5b/0x180 [ 1230.633418] ? lockdep_init_map_type+0x2c7/0x780 [ 1230.634408] ? __raw_spin_lock_init+0x36/0x110 [ 1230.635387] v9fs_session_init+0x1dd/0x1680 [ 1230.636293] ? lock_release+0x680/0x680 [ 1230.637135] ? kmem_cache_alloc_trace+0x151/0x320 [ 1230.638154] ? v9fs_show_options+0x690/0x690 [ 1230.639083] ? trace_hardirqs_on+0x5b/0x180 [ 1230.639999] ? kasan_unpoison_shadow+0x33/0x50 [ 1230.640954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1230.642020] v9fs_mount+0x79/0x8f0 [ 1230.642766] ? v9fs_write_inode+0x60/0x60 [ 1230.643639] legacy_get_tree+0x105/0x220 [ 1230.644491] vfs_get_tree+0x8e/0x300 [ 1230.645273] path_mount+0x1490/0x21e0 [ 1230.646076] ? strncpy_from_user+0x9e/0x470 [ 1230.646977] ? finish_automount+0xa90/0xa90 [ 1230.647885] ? getname_flags.part.0+0x1dd/0x4f0 [ 1230.648855] ? _copy_from_user+0xfb/0x1b0 [ 1230.649726] __x64_sys_mount+0x282/0x300 [ 1230.650573] ? copy_mnt_ns+0xa00/0xa00 [ 1230.651399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1230.652501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1230.653582] do_syscall_64+0x33/0x40 [ 1230.654361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1230.655443] RIP: 0033:0x7f52d4da5b19 [ 1230.656226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.660075] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.661670] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1230.663173] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1230.664666] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1230.666155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1230.667657] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1230.670548] 9pnet: Insufficient options for proto=fd [ 1230.696528] 9pnet: Insufficient options for proto=fd [ 1243.268046] FAULT_INJECTION: forcing a failure. [ 1243.268046] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.271661] CPU: 0 PID: 8242 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 1243.273539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.275813] Call Trace: [ 1243.276548] dump_stack+0x107/0x167 [ 1243.277569] should_fail.cold+0x5/0xa [ 1243.278563] FAULT_INJECTION: forcing a failure. [ 1243.278563] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.278609] ? create_object.isra.0+0x3a/0xa30 [ 1243.281109] should_failslab+0x5/0x20 [ 1243.282145] kmem_cache_alloc+0x5b/0x310 [ 1243.283242] ? legacy_get_tree+0x105/0x220 [ 1243.284468] ? vfs_get_tree+0x8e/0x300 [ 1243.285538] create_object.isra.0+0x3a/0xa30 [ 1243.286749] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.288155] __kmalloc_track_caller+0x177/0x370 [ 1243.289410] ? parse_opts.part.0+0x8e/0x340 [ 1243.290608] kstrdup+0x36/0x70 [ 1243.291479] parse_opts.part.0+0x8e/0x340 [ 1243.292625] ? p9_fd_show_options+0x1c0/0x1c0 [ 1243.293871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.295293] ? quarantine_put+0x8b/0x1a0 [ 1243.296361] ? trace_hardirqs_on+0x5b/0x180 [ 1243.297518] ? kfree+0xd7/0x340 [ 1243.298433] p9_fd_create+0x98/0x4a0 [ 1243.299466] ? p9_conn_create+0x510/0x510 [ 1243.300596] ? p9_client_create+0x798/0x1230 [ 1243.301791] ? kfree+0xd7/0x340 [ 1243.302695] ? do_raw_spin_unlock+0x4f/0x220 [ 1243.303922] p9_client_create+0x7ff/0x1230 [ 1243.305098] ? p9_client_flush+0x430/0x430 [ 1243.306266] ? trace_hardirqs_on+0x5b/0x180 [ 1243.307456] ? lockdep_init_map_type+0x2c7/0x780 [ 1243.308749] ? __raw_spin_lock_init+0x36/0x110 [ 1243.309983] v9fs_session_init+0x1dd/0x1680 [ 1243.311161] ? lock_release+0x680/0x680 [ 1243.312276] ? kmem_cache_alloc_trace+0x151/0x320 [ 1243.313577] ? v9fs_show_options+0x690/0x690 [ 1243.314759] ? trace_hardirqs_on+0x5b/0x180 [ 1243.315918] ? kasan_unpoison_shadow+0x33/0x50 [ 1243.317148] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.318474] v9fs_mount+0x79/0x8f0 [ 1243.319449] ? v9fs_write_inode+0x60/0x60 [ 1243.320565] legacy_get_tree+0x105/0x220 [ 1243.321657] vfs_get_tree+0x8e/0x300 [ 1243.322646] path_mount+0x1490/0x21e0 [ 1243.323670] ? strncpy_from_user+0x9e/0x470 [ 1243.324709] ? finish_automount+0xa90/0xa90 [ 1243.325768] ? getname_flags.part.0+0x1dd/0x4f0 [ 1243.326894] ? _copy_from_user+0xfb/0x1b0 [ 1243.327955] __x64_sys_mount+0x282/0x300 [ 1243.328956] ? copy_mnt_ns+0xa00/0xa00 [ 1243.329912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.331193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.332450] do_syscall_64+0x33/0x40 [ 1243.333346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.334593] RIP: 0033:0x7f52d4da5b19 [ 1243.335514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.339980] RSP: 002b:00007f52d231b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1243.341831] RAX: ffffffffffffffda RBX: 00007f52d4eb8f60 RCX: 00007f52d4da5b19 [ 1243.343571] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1243.345307] RBP: 00007f52d231b1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1243.347023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.348737] R13: 00007ffe1d44871f R14: 00007f52d231b300 R15: 0000000000022000 [ 1243.350488] CPU: 1 PID: 8249 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1243.351257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.352191] Call Trace: [ 1243.352486] dump_stack+0x107/0x167 [ 1243.352898] should_fail.cold+0x5/0xa [ 1243.353329] ? p9_fcall_init+0x97/0x290 [ 1243.353774] should_failslab+0x5/0x20 [ 1243.354202] __kmalloc+0x72/0x390 [ 1243.354596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.355165] p9_fcall_init+0x97/0x290 [ 1243.355604] p9_client_prepare_req.part.0+0xf4/0xac0 03:29:02 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 27) 03:29:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) 03:29:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 29) 03:29:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 03:29:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 59) 03:29:02 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 38) 03:29:02 executing program 1: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x9}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) readahead(0xffffffffffffffff, 0x0, 0x8) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:29:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1243.356213] p9_client_rpc+0x220/0x1370 [ 1243.356746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.357333] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1243.357942] ? pipe_poll+0x21b/0x800 [ 1243.358379] ? p9_fd_close+0x4a0/0x4a0 [ 1243.358827] ? wait_for_partner+0x3c0/0x3c0 [ 1243.359351] ? p9_fd_poll+0x1e0/0x2c0 [ 1243.359783] ? p9_fd_create+0x357/0x4a0 [ 1243.360212] ? p9_conn_create+0x510/0x510 [ 1243.360661] ? p9_client_create+0x798/0x1230 [ 1243.361136] ? kfree+0xd7/0x340 [ 1243.361491] ? do_raw_spin_unlock+0x4f/0x220 [ 1243.361972] p9_client_create+0xa76/0x1230 [ 1243.362436] ? p9_client_flush+0x430/0x430 [ 1243.362894] ? trace_hardirqs_on+0x5b/0x180 [ 1243.363373] ? lockdep_init_map_type+0x2c7/0x780 [ 1243.363887] ? __raw_spin_lock_init+0x36/0x110 [ 1243.364385] v9fs_session_init+0x1dd/0x1680 [ 1243.364852] ? lock_release+0x680/0x680 [ 1243.365288] ? kmem_cache_alloc_trace+0x151/0x320 [ 1243.365811] ? v9fs_show_options+0x690/0x690 [ 1243.366292] ? trace_hardirqs_on+0x5b/0x180 [ 1243.366760] ? kasan_unpoison_shadow+0x33/0x50 [ 1243.367255] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.367811] v9fs_mount+0x79/0x8f0 [ 1243.368194] ? v9fs_write_inode+0x60/0x60 [ 1243.368639] legacy_get_tree+0x105/0x220 [ 1243.369075] vfs_get_tree+0x8e/0x300 [ 1243.369474] path_mount+0x1490/0x21e0 [ 1243.369887] ? strncpy_from_user+0x9e/0x470 [ 1243.370349] ? finish_automount+0xa90/0xa90 [ 1243.370812] ? getname_flags.part.0+0x1dd/0x4f0 [ 1243.371316] ? _copy_from_user+0xfb/0x1b0 [ 1243.371765] __x64_sys_mount+0x282/0x300 [ 1243.372200] ? copy_mnt_ns+0xa00/0xa00 [ 1243.372622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.373185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.373766] do_syscall_64+0x33/0x40 [ 1243.374185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.374744] RIP: 0033:0x7fd388488b19 [ 1243.375144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.377145] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1243.377964] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1243.378730] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1243.379505] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1243.380276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.381047] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 [ 1243.385313] FAULT_INJECTION: forcing a failure. [ 1243.385313] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.388041] CPU: 0 PID: 8254 Comm: syz-executor.4 Not tainted 5.10.244 #1 03:29:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1243.389625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.391727] Call Trace: [ 1243.392185] dump_stack+0x107/0x167 [ 1243.392813] should_fail.cold+0x5/0xa [ 1243.393471] ? create_object.isra.0+0x3a/0xa30 [ 1243.394227] should_failslab+0x5/0x20 [ 1243.394886] kmem_cache_alloc+0x5b/0x310 [ 1243.395576] create_object.isra.0+0x3a/0xa30 [ 1243.396323] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.397292] __kmalloc_track_caller+0x177/0x370 [ 1243.398176] ? match_number+0xaf/0x1d0 [ 1243.398871] kmemdup_nul+0x2d/0xa0 [ 1243.399546] match_number+0xaf/0x1d0 [ 1243.400266] ? match_u64+0x190/0x190 [ 1243.400952] ? __kmalloc_track_caller+0x2c6/0x370 [ 1243.401826] ? memcpy+0x39/0x60 [ 1243.402428] parse_opts.part.0+0x1f3/0x340 [ 1243.403195] ? p9_fd_show_options+0x1c0/0x1c0 [ 1243.403999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.404932] ? trace_hardirqs_on+0x5b/0x180 [ 1243.405728] ? kfree+0xd7/0x340 [ 1243.406325] p9_fd_create+0x98/0x4a0 [ 1243.407018] ? p9_conn_create+0x510/0x510 [ 1243.407686] ? p9_client_create+0x798/0x1230 [ 1243.408406] ? kfree+0xd7/0x340 [ 1243.408927] ? do_raw_spin_unlock+0x4f/0x220 [ 1243.409650] p9_client_create+0x7ff/0x1230 [ 1243.410345] ? p9_client_flush+0x430/0x430 [ 1243.411022] ? trace_hardirqs_on+0x5b/0x180 [ 1243.411740] ? lockdep_init_map_type+0x2c7/0x780 [ 1243.412503] ? __raw_spin_lock_init+0x36/0x110 [ 1243.413258] v9fs_session_init+0x1dd/0x1680 [ 1243.413982] ? lock_release+0x680/0x680 [ 1243.414604] ? kmem_cache_alloc_trace+0x151/0x320 [ 1243.415352] ? v9fs_show_options+0x690/0x690 [ 1243.416041] ? trace_hardirqs_on+0x5b/0x180 [ 1243.416750] ? kasan_unpoison_shadow+0x33/0x50 [ 1243.417493] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.418342] v9fs_mount+0x79/0x8f0 [ 1243.418919] ? v9fs_write_inode+0x60/0x60 [ 1243.419595] legacy_get_tree+0x105/0x220 [ 1243.420275] vfs_get_tree+0x8e/0x300 [ 1243.420882] path_mount+0x1490/0x21e0 [ 1243.421512] ? strncpy_from_user+0x9e/0x470 [ 1243.422213] ? finish_automount+0xa90/0xa90 [ 1243.422906] ? getname_flags.part.0+0x1dd/0x4f0 [ 1243.423664] ? _copy_from_user+0xfb/0x1b0 [ 1243.424355] __x64_sys_mount+0x282/0x300 [ 1243.425007] ? copy_mnt_ns+0xa00/0xa00 [ 1243.425649] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.426502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.427343] do_syscall_64+0x33/0x40 [ 1243.427942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.428758] RIP: 0033:0x7f8718ffcb19 [ 1243.429384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.432365] RSP: 002b:00007f8716572188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1243.433592] RAX: ffffffffffffffda RBX: 00007f871910ff60 RCX: 00007f8718ffcb19 [ 1243.434728] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1243.435892] RBP: 00007f87165721d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1243.437045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.438208] R13: 00007ffe4b90c67f R14: 00007f8716572300 R15: 0000000000022000 03:29:02 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) (fail_nth: 39) 03:29:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) [ 1243.462627] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615" or missing value [ 1243.486406] FAULT_INJECTION: forcing a failure. [ 1243.486406] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.487800] CPU: 1 PID: 8268 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 1243.488599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.489569] Call Trace: [ 1243.489886] dump_stack+0x107/0x167 [ 1243.490316] should_fail.cold+0x5/0xa [ 1243.490768] ? create_object.isra.0+0x3a/0xa30 [ 1243.491315] should_failslab+0x5/0x20 [ 1243.491762] kmem_cache_alloc+0x5b/0x310 [ 1243.492238] create_object.isra.0+0x3a/0xa30 [ 1243.492758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.493352] __kmalloc+0x16e/0x390 [ 1243.493774] p9_fcall_init+0x97/0x290 [ 1243.494226] p9_client_prepare_req.part.0+0xf4/0xac0 [ 1243.494825] p9_client_rpc+0x220/0x1370 [ 1243.495304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.495920] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 1243.496545] ? pipe_poll+0x21b/0x800 [ 1243.496990] ? p9_fd_close+0x4a0/0x4a0 [ 1243.497444] ? wait_for_partner+0x3c0/0x3c0 [ 1243.497946] ? p9_fd_poll+0x1e0/0x2c0 [ 1243.498391] ? p9_fd_create+0x357/0x4a0 [ 1243.498856] ? p9_conn_create+0x510/0x510 [ 1243.499349] ? p9_client_create+0x798/0x1230 [ 1243.499861] ? kfree+0xd7/0x340 [ 1243.500242] ? do_raw_spin_unlock+0x4f/0x220 [ 1243.500760] p9_client_create+0xa76/0x1230 [ 1243.501253] ? p9_client_flush+0x430/0x430 [ 1243.501753] ? trace_hardirqs_on+0x5b/0x180 [ 1243.502253] ? lockdep_init_map_type+0x2c7/0x780 [ 1243.502801] ? __raw_spin_lock_init+0x36/0x110 [ 1243.503346] v9fs_session_init+0x1dd/0x1680 [ 1243.503855] ? lock_release+0x680/0x680 [ 1243.504320] ? kmem_cache_alloc_trace+0x151/0x320 [ 1243.504883] ? v9fs_show_options+0x690/0x690 [ 1243.505397] ? trace_hardirqs_on+0x5b/0x180 [ 1243.505906] ? kasan_unpoison_shadow+0x33/0x50 [ 1243.506439] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.507039] v9fs_mount+0x79/0x8f0 [ 1243.507466] ? v9fs_write_inode+0x60/0x60 [ 1243.507953] legacy_get_tree+0x105/0x220 [ 1243.508426] vfs_get_tree+0x8e/0x300 [ 1243.508863] path_mount+0x1490/0x21e0 [ 1243.509322] ? strncpy_from_user+0x9e/0x470 [ 1243.509822] ? finish_automount+0xa90/0xa90 [ 1243.510329] ? getname_flags.part.0+0x1dd/0x4f0 [ 1243.510875] ? _copy_from_user+0xfb/0x1b0 [ 1243.511370] __x64_sys_mount+0x282/0x300 [ 1243.511843] ? copy_mnt_ns+0xa00/0xa00 [ 1243.512304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.512923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.513525] do_syscall_64+0x33/0x40 [ 1243.513964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.514567] RIP: 0033:0x7fd388488b19 [ 1243.515002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.517103] RSP: 002b:00007fd3859fe188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1243.517963] RAX: ffffffffffffffda RBX: 00007fd38859bf60 RCX: 00007fd388488b19 [ 1243.518778] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1243.519635] RBP: 00007fd3859fe1d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1243.520439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.521243] R13: 00007ffd07d0c1df R14: 00007fd3859fe300 R15: 0000000000022000 03:29:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0xa000000, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x20000844) [ 1243.528072] FAULT_INJECTION: forcing a failure. [ 1243.528072] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.530120] CPU: 0 PID: 8246 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1243.531256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.532649] Call Trace: [ 1243.533101] dump_stack+0x107/0x167 [ 1243.533714] should_fail.cold+0x5/0xa [ 1243.534356] should_failslab+0x5/0x20 [ 1243.534986] __kmalloc_track_caller+0x79/0x370 [ 1243.535745] ? kstrdup_const+0x53/0x80 [ 1243.536392] kstrdup+0x36/0x70 [ 1243.536929] kstrdup_const+0x53/0x80 [ 1243.537545] __kernfs_new_node+0x9d/0x860 [ 1243.538236] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1243.539031] ? lock_acquire+0x197/0x470 [ 1243.539706] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1243.540579] ? lock_release+0x680/0x680 [ 1243.541235] ? find_held_lock+0x2c/0x110 [ 1243.541913] kernfs_new_node+0x18d/0x250 [ 1243.542597] kernfs_create_dir_ns+0x49/0x160 [ 1243.543340] sysfs_create_dir_ns+0x127/0x290 [ 1243.544074] ? sysfs_create_mount_point+0xb0/0xb0 [ 1243.544864] ? rwlock_bug.part.0+0x90/0x90 [ 1243.545566] ? do_raw_spin_unlock+0x4f/0x220 [ 1243.546301] kobject_add_internal+0x25e/0xa30 [ 1243.547051] kobject_init_and_add+0x101/0x160 [ 1243.547813] ? kobject_create_and_add+0xb0/0xb0 [ 1243.548585] ? wait_for_completion_io+0x270/0x270 [ 1243.549385] ? kernfs_name_hash+0xe7/0x110 [ 1243.550090] ? kernfs_find_ns+0x256/0x380 [ 1243.550782] sysfs_slab_add+0x172/0x200 [ 1243.551447] __kmem_cache_create+0x3db/0x520 [ 1243.552186] kmem_cache_create_usercopy+0x1db/0x2f0 [ 1243.553018] p9_client_create+0xc6a/0x1230 [ 1243.553738] ? p9_client_flush+0x430/0x430 [ 1243.554439] ? trace_hardirqs_on+0x5b/0x180 [ 1243.555156] ? lockdep_init_map_type+0x2c7/0x780 [ 1243.555944] ? __raw_spin_lock_init+0x36/0x110 [ 1243.556705] v9fs_session_init+0x1dd/0x1680 [ 1243.557412] ? lock_release+0x680/0x680 [ 1243.558069] ? kmem_cache_alloc_trace+0x151/0x320 [ 1243.558871] ? v9fs_show_options+0x690/0x690 [ 1243.559616] ? trace_hardirqs_on+0x5b/0x180 [ 1243.560330] ? kasan_unpoison_shadow+0x33/0x50 [ 1243.561084] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.561923] v9fs_mount+0x79/0x8f0 [ 1243.562506] ? v9fs_write_inode+0x60/0x60 [ 1243.563186] legacy_get_tree+0x105/0x220 [ 1243.563870] vfs_get_tree+0x8e/0x300 [ 1243.564477] path_mount+0x1490/0x21e0 [ 1243.565105] ? strncpy_from_user+0x9e/0x470 [ 1243.565815] ? finish_automount+0xa90/0xa90 [ 1243.566525] ? getname_flags.part.0+0x1dd/0x4f0 [ 1243.567299] ? _copy_from_user+0xfb/0x1b0 [ 1243.568002] __x64_sys_mount+0x282/0x300 [ 1243.568673] ? copy_mnt_ns+0xa00/0xa00 [ 1243.569320] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.570182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.571026] do_syscall_64+0x33/0x40 [ 1243.571646] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.572495] RIP: 0033:0x7f2ae689eb19 [ 1243.573113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.576143] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1243.577402] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1243.578560] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1243.579746] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1243.580915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.582082] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1243.583462] kobject_add_internal failed for 9p-fcall-cache-290 (error: -12 parent: slab) [ 1243.584916] kmem_cache_create(9p-fcall-cache-290) failed with error -12 [ 1243.586049] CPU: 0 PID: 8246 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1243.587178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.588561] Call Trace: [ 1243.588989] dump_stack+0x107/0x167 [ 1243.589587] kmem_cache_create_usercopy.cold+0x17/0x65 [ 1243.590455] p9_client_create+0xc6a/0x1230 [ 1243.591163] ? p9_client_flush+0x430/0x430 [ 1243.591863] ? trace_hardirqs_on+0x5b/0x180 [ 1243.592564] ? lockdep_init_map_type+0x2c7/0x780 [ 1243.593346] ? __raw_spin_lock_init+0x36/0x110 [ 1243.594108] v9fs_session_init+0x1dd/0x1680 [ 1243.594818] ? lock_release+0x680/0x680 [ 1243.595481] ? kmem_cache_alloc_trace+0x151/0x320 [ 1243.596287] ? v9fs_show_options+0x690/0x690 [ 1243.597012] ? trace_hardirqs_on+0x5b/0x180 [ 1243.597724] ? kasan_unpoison_shadow+0x33/0x50 [ 1243.598476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.599331] v9fs_mount+0x79/0x8f0 [ 1243.599920] ? v9fs_write_inode+0x60/0x60 [ 1243.600603] legacy_get_tree+0x105/0x220 [ 1243.601267] vfs_get_tree+0x8e/0x300 [ 1243.601883] path_mount+0x1490/0x21e0 [ 1243.602514] ? strncpy_from_user+0x9e/0x470 [ 1243.603235] ? finish_automount+0xa90/0xa90 [ 1243.603953] ? getname_flags.part.0+0x1dd/0x4f0 [ 1243.604721] ? _copy_from_user+0xfb/0x1b0 [ 1243.605413] __x64_sys_mount+0x282/0x300 [ 1243.606082] ? copy_mnt_ns+0xa00/0xa00 [ 1243.606734] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.607597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.608433] do_syscall_64+0x33/0x40 [ 1243.609041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.609876] RIP: 0033:0x7f2ae689eb19 [ 1243.610488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.613482] RSP: 002b:00007f2ae3e14188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1243.614725] RAX: ffffffffffffffda RBX: 00007f2ae69b1f60 RCX: 00007f2ae689eb19 [ 1243.615886] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 1243.617043] RBP: 00007f2ae3e141d0 R08: 00000000200004c0 R09: 0000000000000000 [ 1243.618191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.619347] R13: 00007ffde849b00f R14: 00007f2ae3e14300 R15: 0000000000022000 [ 1255.671869] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88801d1b6d00 (size 32): comm "syz-executor.5", pid 8246, jiffies 4295910454 (age 19.112s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 32 9p-fcall-cache-2 39 30 00 1d 80 88 ff ff 10 00 00 00 00 00 00 00 90.............. backtrace: [<00000000f7017a0e>] kstrdup+0x36/0x70 [<00000000351af9c0>] kstrdup_const+0x53/0x80 [<000000002b8b57ad>] kvasprintf_const+0x10c/0x1a0 [<000000008d70557b>] kobject_set_name_vargs+0x56/0x150 [<000000008ad0f52c>] kobject_init_and_add+0xc9/0x160 [<00000000e119c876>] sysfs_slab_add+0x172/0x200 [<00000000fabf1949>] __kmem_cache_create+0x3db/0x520 [<000000000860c446>] kmem_cache_create_usercopy+0x1db/0x2f0 [<000000001c0c0503>] p9_client_create+0xc6a/0x1230 [<00000000a0a2fd60>] v9fs_session_init+0x1dd/0x1680 [<00000000ec6f16b6>] v9fs_mount+0x79/0x8f0 [<00000000b88bab92>] legacy_get_tree+0x105/0x220 [<000000007ad35edb>] vfs_get_tree+0x8e/0x300 [<000000001bf1abce>] path_mount+0x1490/0x21e0 [<00000000b134b3ea>] __x64_sys_mount+0x282/0x300 [<00000000fd8ea51a>] do_syscall_64+0x33/0x40 BUG: leak checking failed VM DIAGNOSIS: 03:29:21 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=000000000003b2c0 RCX=1ffff1100d9c1398 RDX=0000000000000000 RSI=ffff88806ce3b2d8 RDI=ffff88806ce3b2c0 RBP=ffff88806ce09d98 RSP=ffff88806ce09d48 R8 =0000000000000001 R9 =ffffffff8615100f R10=ffffffff86151017 R11=ffffffff8615101b R12=ffff88806ce3b2c0 R13=0000000000000000 R14=ffffffff84e32340 R15=ffff88806ce3b2d8 RIP=ffffffff83e99751 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe4b912fe8 CR3=000000000fe04000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=3a29323320657a697328203030643662 XMM03=323820646970202c22352e726f747563 XMM04=2d6c6c6163662d703920203233206432 XMM05=64322063362063362031362033362036 XMM06=29736574796220323320747372696628 XMM07=312e3931206567612820343534303139 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e979f0 RBX=0000000000000001 RCX=ffffffff83e7f65c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e981b8 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85679e08 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e979fe RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff9fd6f2020 CR3=0000000004e26000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000000000000000ff00 XMM01=25252525252525252525252525252525 XMM02=20646970202c22352e726f7475636578 XMM03=00000000000000000000000000000000 XMM04=0000000000000000000000000000ff00 XMM05=64313038383866666666783020746365 XMM06=29323320657a69732820303064366231 XMM07=78652d7a797322206d6d6f6320200a3a XMM08=0a303478302f333378302b34365f6c6c XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000